Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xlD2S2G9IoklorVPfDx_dIf6mNc.roa
File: xlD2S2G9IoklorVPfDx_dIf6mNc.roa (raw, json)
Hash identifier: kS6/LcyR+KnfYG4Id+B4V1Iy1b1BZtzCOXqgycif1l8=
Subject key identifier: C6:50:F6:4B:61:BD:22:89:25:A2:B5:4F:7C:3C:7F:74:87:FA:98:D7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196B86FB59DE4342D1E477E09065C0AC544
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xlD2S2G9IoklorVPfDx_dIf6mNc.roa
Signing time: Sat 10 May 2025 04:24:10 +0000
ROA not before: Sat 10 May 2025 04:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
5.231.117.0/24 maxlen: 24
5.231.118.0/24 maxlen: 24
5.231.119.0/24 maxlen: 24
5.231.120.0/24 maxlen: 24
5.231.121.0/24 maxlen: 24
5.231.122.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
94.249.183.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.189.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.205.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
94.249.228.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.245.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
94.249.247.0/24 maxlen: 24
94.249.248.0/24 maxlen: 24
94.249.249.0/24 maxlen: 24
94.249.250.0/24 maxlen: 24
94.249.251.0/24 maxlen: 24
94.249.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 00:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:6f:b5:9d:e4:34:2d:1e:47:7e:09:06:5c:0a:c5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 10 04:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c650f64b61bd228925a2b54f7c3c7f7487fa98d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:5f:7a:ca:71:2f:db:35:b3:89:dd:6a:da:
7f:34:ff:e7:3d:0b:ed:16:e7:af:17:b6:57:18:78:
0d:4c:39:4c:fb:c8:a5:98:29:fb:c7:cd:cc:10:55:
1d:7b:ca:f9:88:a9:86:05:8a:25:f3:82:82:44:be:
34:b3:90:da:3d:a5:0d:2c:da:1a:97:d9:45:90:d5:
b7:8a:ee:25:98:aa:a8:97:ae:23:14:34:ce:d5:d3:
32:2a:7c:07:44:be:24:4a:15:04:02:15:1f:7f:6f:
ad:d0:71:ee:8d:96:f1:27:1e:8b:92:30:2e:eb:03:
78:3f:d1:d1:fe:8d:f3:c4:bb:fc:e4:3a:8e:71:6b:
3b:cf:24:31:1c:0c:88:98:e6:af:a2:d0:8d:61:86:
eb:cd:42:83:eb:17:34:05:f5:6e:65:b4:77:89:19:
6a:a6:d2:4e:9d:d5:21:33:72:aa:5c:50:2c:6f:9a:
37:9b:d2:3a:53:a8:5d:8e:3a:d9:11:cf:86:20:a6:
e5:73:46:b6:e3:ef:7a:4d:58:b9:09:52:df:76:4d:
08:f4:b3:91:c2:c3:14:92:8c:12:fa:59:5a:60:99:
52:c6:f8:d1:55:87:28:c8:f4:a5:20:20:6c:34:fd:
93:4b:41:9b:cd:fb:93:af:3a:2b:95:ce:09:07:8a:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:F6:4B:61:BD:22:89:25:A2:B5:4F:7C:3C:7F:74:87:FA:98:D7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xlD2S2G9IoklorVPfDx_dIf6mNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.106.0-5.231.110.255
5.231.116.0-5.231.123.255
89.144.53.0-89.144.55.255
94.103.166.0/24
94.249.183.0-94.249.190.255
94.249.197.0-94.249.206.255
94.249.225.0-94.249.230.255
94.249.243.0-94.249.252.255
Signature Algorithm: sha256WithRSAEncryption
a1:16:f8:e7:33:65:2b:41:1a:4c:db:7e:d4:7a:3a:5a:45:eb:
c4:b9:44:ff:5e:8b:8f:88:72:49:d5:a1:b2:46:45:9b:5d:66:
24:51:d9:3f:11:db:d0:93:5a:f5:75:2a:f9:15:2b:13:7b:5d:
61:89:d9:0f:7b:5f:2e:91:b8:1a:ea:43:43:c9:8c:7c:95:9d:
d1:34:19:7d:c7:73:c4:34:fa:2a:ff:07:e8:0a:2f:5c:69:56:
8d:fb:d6:a4:a2:ba:c3:14:9d:f9:6b:32:1b:1b:64:cc:6c:f9:
92:21:71:2b:d0:f6:90:fe:78:97:17:a6:92:54:92:39:29:4d:
82:f6:df:5b:9e:5f:f0:32:b6:e1:c2:db:21:ec:e9:4e:2c:1c:
12:9b:d4:60:cb:39:43:a4:2e:70:e9:0a:35:16:e0:cf:9d:e3:
4b:8a:a3:c1:10:a4:c0:f7:92:71:fa:06:e6:1e:26:8d:a3:02:
2f:29:bc:12:35:41:59:fe:93:49:82:92:67:6c:9d:0a:be:5e:
32:01:fb:17:bd:d6:3b:f4:72:0a:52:d2:98:c7:74:7a:26:83:
53:f4:d1:04:87:f4:f6:8e:42:fc:c1:f8:08:4f:20:51:ba:be:
ef:7d:fc:31:ef:50:05:e7:17:fd:15:aa:d6:89:ed:65:78:ed:
22:f9:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:54:50 2025 by rpki-client