Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5_Q4mqO1UiGDoKec0WqET55SD_M.roa
File: 5_Q4mqO1UiGDoKec0WqET55SD_M.roa (raw, json)
Hash identifier: wSCb9XlOgAgmcpLYuBCGcSaZzeLKseG24WEM4/gEwUQ=
Subject key identifier: E7:F4:38:9A:A3:B5:52:21:83:A0:A7:9C:D1:6A:84:4F:9E:52:0F:F3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01945C186CCB17618DDA552AED220D23088C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5_Q4mqO1UiGDoKec0WqET55SD_M.roa
Signing time: Sun 12 Jan 2025 19:58:12 +0000
ROA not before: Sun 12 Jan 2025 19:58:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
5.231.45.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5c:18:6c:cb:17:61:8d:da:55:2a:ed:22:0d:23:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 12 19:58:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7f4389aa3b5522183a0a79cd16a844f9e520ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:a3:42:b1:ad:b1:57:df:b3:8c:fc:73:51:
75:a0:42:62:d3:da:21:22:70:bc:0d:f2:8e:f1:c7:
99:57:07:fe:d0:98:b6:15:e7:aa:46:3b:8c:7c:c2:
3a:32:9b:19:2d:9a:df:29:a0:45:94:95:ed:9f:6f:
8a:d3:00:58:70:22:81:91:ad:53:cb:d3:9a:3f:9d:
ea:d3:c4:a0:d9:06:38:b2:22:94:39:e4:8c:26:50:
d9:78:0a:e4:a9:18:8a:54:88:bb:30:09:db:25:7b:
75:e8:22:61:bc:5f:8d:ea:bc:b4:2c:7b:c4:50:97:
f0:85:b7:8c:f2:16:8e:3f:31:e7:64:de:aa:40:51:
d7:17:ae:63:3c:a2:80:40:59:e4:ec:26:66:f5:30:
45:11:81:9e:43:1a:0e:f1:58:49:33:ba:c5:8f:08:
8b:35:8c:91:1b:d6:04:67:ef:05:9f:ad:67:cd:e1:
d2:1c:ce:24:e1:61:9b:e8:45:44:c4:c5:8d:b4:0e:
75:cb:2f:e3:c6:63:b6:d8:87:e6:7b:d2:4a:96:bf:
9e:16:50:fe:8f:8a:5b:4c:7d:36:ff:b4:9d:20:ad:
a5:db:be:96:ce:17:a4:cc:ae:e2:16:cd:64:ce:bc:
24:e7:21:8a:86:d3:fd:f6:8a:81:f0:cc:a3:45:af:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F4:38:9A:A3:B5:52:21:83:A0:A7:9C:D1:6A:84:4F:9E:52:0F:F3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5_Q4mqO1UiGDoKec0WqET55SD_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.231.28.0/24
5.231.45.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e2:ae:ff:41:b8:38:4c:a1:43:3a:5d:6f:b0:d1:5c:44:57:
0e:df:81:60:fd:ce:63:e0:eb:a3:cb:55:0f:c2:d7:6b:55:31:
c2:b4:52:81:ba:64:09:21:0c:a4:1d:1b:5d:8a:71:4e:e1:92:
84:c7:fb:f0:d7:5d:9e:f5:32:6a:98:a2:75:62:54:e2:5b:35:
7f:9a:2c:5b:0a:ce:4f:03:6d:04:57:9b:64:3b:03:a7:06:8d:
d0:cb:af:d5:c6:b2:09:fc:a9:57:4a:74:f0:39:e3:07:86:cb:
eb:8a:ac:a5:d5:ca:62:6f:17:bf:bc:1f:cd:2a:bd:b9:e9:67:
a4:65:85:75:58:b1:5b:17:76:66:0d:b3:16:b3:ef:96:01:98:
da:5b:5e:44:5f:57:3b:93:72:77:07:16:f6:c4:ff:50:a9:47:
0d:57:73:f2:e2:28:f6:a7:e2:df:30:6c:f1:4c:7d:9c:40:07:
b3:d6:d9:0d:b5:03:9a:c4:9a:1b:25:94:3b:5d:50:f3:c0:f8:
97:13:3e:25:80:9a:ab:73:99:4a:3c:5d:e2:d9:4c:0e:bf:f0:
ae:35:12:b5:ed:c0:b2:ee:18:e5:33:29:04:86:ab:3b:a7:3c:
b5:30:97:91:20:77:09:c6:cf:7a:ec:f2:29:47:83:70:05:1f:
d6:15:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:13 2025 by rpki-client