Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-xNIj8I6LxwgTE06TWBa63ZuHKs.roa
File: 1-xNIj8I6LxwgTE06TWBa63ZuHKs.roa (raw, json)
Hash identifier: 8X/PK0L26omDI9wOvjQ4h3+fhqpopj3y6yh4NfS94wg=
Subject key identifier: FB:13:48:8F:C2:3A:2F:1C:20:4C:4D:3A:4D:60:5A:EB:76:6E:1C:AB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194874496EE35494B7AF958A062BF85778D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-xNIj8I6LxwgTE06TWBa63ZuHKs.roa
Signing time: Tue 21 Jan 2025 05:10:06 +0000
ROA not before: Tue 21 Jan 2025 05:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 05:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:44:96:ee:35:49:4b:7a:f9:58:a0:62:bf:85:77:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 21 05:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb13488fc23a2f1c204c4d3a4d605aeb766e1cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:46:56:68:b2:d1:da:4e:e7:37:fe:f4:95:
f3:2d:2e:ed:ab:88:20:df:d8:ab:aa:54:88:7a:10:
88:dd:01:7a:79:0e:b8:fa:91:63:7c:89:f2:e3:c5:
f4:fa:72:a7:fc:c5:c7:12:cc:18:e5:a5:ca:08:94:
f7:4c:c1:16:75:e2:da:45:e4:f3:4e:ad:71:67:9e:
af:d1:79:8b:52:5e:9f:37:a4:bb:7c:3d:e9:f9:18:
a8:fb:f8:f1:e5:ab:e7:9b:be:d4:81:57:88:34:f8:
6f:33:81:88:d0:c3:7c:70:bf:2e:07:63:75:62:44:
c1:6d:d3:9c:8b:1a:60:30:f7:99:59:96:ea:52:c7:
ca:34:a8:fd:05:6c:e8:8f:98:54:e8:62:33:d4:8d:
c1:50:40:ed:23:8c:5c:b8:e5:58:15:9b:83:a1:8d:
7d:bd:dd:d4:ce:15:69:cc:34:60:b9:50:17:dc:9a:
f1:3a:ac:26:b7:cb:39:d2:21:28:2a:b0:66:38:2d:
a8:c1:62:74:4b:cc:f8:0c:c5:30:a2:42:05:9e:14:
35:00:8b:d2:38:08:95:99:6d:7a:33:24:76:25:3a:
ac:f5:f2:4d:90:78:1a:7f:e6:ff:16:d2:ee:7d:e4:
ba:5d:47:88:dd:ec:31:e1:b7:91:6e:75:dd:65:95:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:48:8F:C2:3A:2F:1C:20:4C:4D:3A:4D:60:5A:EB:76:6E:1C:AB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-xNIj8I6LxwgTE06TWBa63ZuHKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
89.106.69.0/24
94.103.164.0/24
94.249.148.0/24
94.249.153.0/24
94.249.158.0/24
94.249.195.0/24
94.249.212.0/24
94.249.214.0/23
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:ae:8a:d2:a8:8e:e1:f1:e1:25:d1:c8:31:c5:14:43:dc:e8:
d9:89:56:0c:bb:82:59:d6:51:f7:c9:43:87:d5:36:81:00:83:
12:40:9b:84:ad:ba:ca:9e:e5:4e:e3:f1:f0:2c:76:32:dd:bd:
c2:75:8a:37:df:98:08:4c:94:f9:1b:73:2d:0d:b6:f4:68:7b:
8a:02:0c:fd:09:28:87:29:f1:a6:12:97:35:57:ff:8d:ec:97:
a0:40:7d:88:3e:b3:85:02:1c:e6:45:88:82:56:b9:f4:d4:9f:
1c:05:db:76:6e:e6:5f:02:1d:bc:a5:91:77:f5:b7:75:67:75:
e1:4d:c8:64:a1:15:d3:1e:30:a0:75:12:73:26:40:ee:d8:2b:
f0:f8:6a:36:9c:1b:cd:68:20:38:24:8b:98:36:a5:f3:d7:6f:
ba:fa:d4:3d:51:5a:d6:29:ba:bc:d4:d0:c6:e0:1f:14:5f:7d:
69:2e:59:7f:3d:02:cb:2b:46:48:92:cd:7c:c2:e8:62:87:9b:
60:f6:ea:71:c0:e7:5d:d3:cc:a5:df:bf:56:45:ca:ad:e4:06:
c3:bd:a7:1f:4e:db:c0:e2:3d:fc:0b:bd:53:f6:36:6d:5f:1e:
e6:da:14:d3:ea:b3:55:3e:ab:c1:1e:1c:8c:19:68:47:0a:14:
28:de:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:54 2025 by rpki-client