Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/SirkunqLIuju_vw7qoNmAqc0KXY.roa
File: SirkunqLIuju_vw7qoNmAqc0KXY.roa (raw, json)
Hash identifier: z7eq2OsyhAkQxLRJa4Y1l7awPPURl/W8kLqiQMC0H6U=
Subject key identifier: 4A:2A:E4:BA:7A:8B:22:E8:EE:FE:FC:3B:AA:83:66:02:A7:34:29:76
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0195FB14F635E5C814B2CB93C4052DD6C1CE
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/SirkunqLIuju_vw7qoNmAqc0KXY.roa
Signing time: Thu 03 Apr 2025 09:56:49 +0000
ROA not before: Thu 03 Apr 2025 09:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39150
IP address blocks: 91.196.136.0/24 maxlen: 24
91.196.137.0/24 maxlen: 24
91.196.138.0/24 maxlen: 24
91.196.139.0/24 maxlen: 24
93.179.67.0/24 maxlen: 24
93.179.68.0/23 maxlen: 23
93.179.69.0/24 maxlen: 24
93.179.120.0/24 maxlen: 24
95.85.83.128/25 maxlen: 25
95.181.213.0/24 maxlen: 24
109.196.133.0/24 maxlen: 24
195.182.8.0/24 maxlen: 24
2a04:8680::/32 maxlen: 32
2a04:8681::/32 maxlen: 32
2a09:d5c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Apr 2025 06:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:14:f6:35:e5:c8:14:b2:cb:93:c4:05:2d:d6:c1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 3 09:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a2ae4ba7a8b22e8eefefc3baa836602a7342976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:56:73:15:fe:11:2c:8a:4e:d7:e4:52:cb:
f7:6a:bd:a2:c3:d4:12:41:2a:95:6c:c4:38:a4:14:
4a:b8:31:ad:bd:e3:b7:af:d7:65:3c:45:31:60:ba:
10:f3:fc:69:41:23:2a:a6:76:40:b2:b8:b7:08:b4:
c0:f1:86:d4:38:13:4b:d3:8c:5c:fd:f2:97:e9:ed:
b6:56:d4:24:ce:1d:78:fc:71:2e:83:cc:3a:77:c3:
6e:f1:59:32:ae:cf:23:1b:f5:48:45:24:56:8d:7d:
57:f4:1f:e1:c5:6e:d9:57:9a:ae:df:a2:e5:b9:70:
63:30:26:0f:ba:23:0a:65:13:b0:4b:5f:7c:1b:c8:
74:e4:d4:d0:fe:40:1a:5a:c0:7e:e1:3a:a0:4d:bf:
e4:cd:4c:f4:8b:88:a9:68:60:8f:a0:53:6f:b2:34:
0d:5c:c0:df:3e:65:a3:e1:5f:ed:29:49:ac:40:dc:
4d:2a:9c:79:e1:f8:d8:3a:69:aa:be:5e:73:40:14:
33:0d:ce:a8:9d:9b:c3:8f:cf:29:8f:4d:59:73:7f:
2e:47:9a:15:72:8d:b0:76:30:8c:29:df:67:ef:64:
3d:a9:ff:fd:a7:8c:b6:cf:ee:4e:ba:bd:51:9c:9a:
c2:45:c3:45:ad:38:ad:cf:1c:8f:ac:72:8e:53:54:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:E4:BA:7A:8B:22:E8:EE:FE:FC:3B:AA:83:66:02:A7:34:29:76
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/SirkunqLIuju_vw7qoNmAqc0KXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.136.0/22
93.179.67.0-93.179.69.255
93.179.120.0/24
95.85.83.128/25
95.181.213.0/24
109.196.133.0/24
195.182.8.0/24
IPv6:
2a04:8680::/31
2a09:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
07:5d:fe:ea:55:08:01:a8:b4:e0:83:6b:0f:34:79:d5:e0:cc:
dd:38:69:80:1a:43:47:14:e2:c1:63:1e:5c:b6:05:49:cf:0d:
11:d9:68:e4:19:51:d0:8d:5d:ed:a3:60:c6:29:18:e4:4f:c4:
d3:51:70:54:88:5a:bc:3b:60:fd:fe:4e:a4:c0:e0:25:5f:38:
32:89:92:36:b1:c5:24:b7:58:17:91:90:76:e2:c2:13:84:b9:
78:a9:d1:db:cd:6d:bb:37:51:39:0d:88:5f:6f:10:33:ad:8b:
61:74:23:46:81:9d:70:00:72:bf:f5:9d:a5:e8:33:22:8f:61:
75:86:aa:d2:dd:48:86:57:7d:83:45:8c:6d:4a:05:e1:50:39:
20:72:58:b0:68:a7:56:9f:21:1f:d3:03:e0:8a:2f:ab:00:db:
ff:f3:15:5a:9f:1e:9e:b3:36:ab:b6:28:68:48:51:d8:d8:57:
e8:f8:64:60:b6:9f:7c:51:40:9d:dd:4d:d4:aa:85:16:a4:6f:
11:8b:76:24:b1:5f:10:72:9c:89:c6:d1:df:a8:75:9c:1e:bc:
91:7f:2f:42:f4:69:03:5c:06:9b:da:11:83:ae:9d:97:b1:05:
c1:bf:1d:7c:bc:43:00:9a:6b:ae:dd:b3:00:96:07:a8:49:26:
5a:65:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:59:50 2025 by rpki-client