Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3F5R_jQku1UKJmM8Fp15IQrPWB8.roa
File: 3F5R_jQku1UKJmM8Fp15IQrPWB8.roa (raw, json)
Hash identifier: /aAF4TR6lzve1b1UkpKLN1i5da7Q9abYqj3cOXDY99I=
Subject key identifier: DC:5E:51:FE:34:24:BB:55:0A:26:63:3C:16:9D:79:21:0A:CF:58:1F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019832CBFB880E087A57BF8F6CB9231A199D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3F5R_jQku1UKJmM8Fp15IQrPWB8.roa
Signing time: Tue 22 Jul 2025 15:41:25 +0000
ROA not before: Tue 22 Jul 2025 15:41:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210415
IP address blocks: 2.59.195.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.10.104.0/23 maxlen: 23
45.80.80.0/24 maxlen: 24
45.130.163.0/24 maxlen: 24
45.137.12.0/23 maxlen: 24
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
89.42.113.0/24 maxlen: 24
91.132.30.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.226.192.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
201.49.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 16:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:cb:fb:88:0e:08:7a:57:bf:8f:6c:b9:23:1a:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 22 15:41:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc5e51fe3424bb550a26633c169d79210acf581f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:52:43:f0:f0:b5:5e:d9:b9:09:59:39:5d:
6d:5b:5b:a1:90:b7:b5:f3:b9:69:04:38:db:af:4c:
40:aa:b6:85:c4:94:0b:82:94:47:13:0e:8c:b6:d5:
7e:97:94:0e:e5:ab:4d:1d:86:a4:d4:80:9d:e4:5a:
7f:94:b2:52:3f:a1:13:8c:c5:21:c4:41:86:fd:dc:
dd:f8:40:5c:d2:6b:e1:68:d1:63:49:dd:52:2f:be:
a5:5f:08:9d:70:3e:cc:dc:7c:a1:fb:30:05:fe:88:
ab:e8:35:c1:d6:fe:5d:e1:cb:89:e3:e5:7c:6a:b4:
b1:fa:bc:a7:e0:97:59:ef:c5:7f:59:65:b3:d8:02:
0b:70:31:a1:8b:bc:b0:a6:d0:ef:77:cc:55:7f:13:
f9:ed:d0:92:ff:81:a6:a9:81:dc:00:21:29:0b:13:
be:7a:4b:a7:90:b7:a2:17:20:1e:78:c3:6b:63:71:
12:93:4d:2b:f8:56:e9:4d:45:c1:74:3a:7d:6e:6f:
ce:06:63:32:f6:dc:33:98:47:31:70:aa:63:00:4f:
ee:aa:bf:26:3d:2d:b7:e4:c5:2f:fe:78:c9:76:e9:
e5:52:0a:57:c9:72:79:23:a2:d9:b7:be:78:2e:9d:
db:cf:78:19:d7:6a:27:83:75:58:1e:17:8d:32:b7:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:51:FE:34:24:BB:55:0A:26:63:3C:16:9D:79:21:0A:CF:58:1F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3F5R_jQku1UKJmM8Fp15IQrPWB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.195.0/24
31.15.7.0/24
45.10.104.0/23
45.80.80.0/24
45.130.163.0/24
45.137.12.0/23
45.137.139.0/24
45.145.135.0/24
80.66.125.0/24
89.42.113.0/24
91.132.30.0/24
178.19.42.0/24
185.226.192.0/24
185.231.187.0/24
185.246.15.0/24
201.49.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:98:cd:27:2d:23:87:3e:69:19:95:15:d6:b6:d8:56:49:51:
d8:db:6a:f5:e2:fc:5f:77:3a:aa:a7:db:24:b0:06:c3:54:a8:
67:22:85:30:5c:1e:9c:01:1a:07:b2:44:70:6f:d9:8b:a7:4b:
2f:55:22:98:3e:cb:e8:4e:38:68:51:02:29:73:06:db:88:d5:
66:0c:f2:9f:f0:b8:7d:12:42:7e:1b:a0:de:cc:d0:c8:bb:85:
4f:27:5f:c5:29:f6:5f:95:e4:11:d8:bc:b6:b3:72:72:e1:46:
16:e9:8b:3d:d4:dc:e6:b1:eb:92:18:78:4a:45:ee:06:9c:03:
55:25:11:7e:81:b6:10:06:8c:4e:95:f2:33:64:b9:6c:b8:7c:
2b:ee:c9:78:2e:4a:a3:8e:8a:21:97:51:32:30:ac:03:7c:0d:
c0:cb:7d:76:2c:b7:f5:9c:f0:e8:03:22:43:40:32:7c:43:77:
a5:ec:de:a3:a6:f6:1d:4a:aa:0c:a2:1e:59:f7:52:77:48:a5:
41:1a:01:a6:ea:d3:fa:83:ba:c8:40:86:f6:94:64:2f:49:0e:
6c:0e:28:f7:c4:67:50:77:c7:07:c6:32:59:5e:44:02:3a:72:
b7:3e:b8:77:58:91:8b:d2:bc:58:1d:5e:22:3c:17:16:66:55:
bd:30:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:43:05 2025 by rpki-client