Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rbj3L7E95U9jclbWGcHsombiIs.roa
File: 6rbj3L7E95U9jclbWGcHsombiIs.roa (raw, json)
Hash identifier: 4ZrJooeI8ZoI9Tm4FB5CYSGJtKkTTYr8ldj+GZzswEQ=
Subject key identifier: EA:B6:E3:DC:BE:C4:F7:95:3D:8D:C9:5B:58:67:07:B2:89:9B:88:8B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195ACCC12D248537AFDDB572D81465C0A28
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rbj3L7E95U9jclbWGcHsombiIs.roa
Signing time: Wed 19 Mar 2025 05:06:50 +0000
ROA not before: Wed 19 Mar 2025 05:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213519
IP address blocks: 5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
89.144.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 05:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ac:cc:12:d2:48:53:7a:fd:db:57:2d:81:46:5c:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 19 05:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab6e3dcbec4f7953d8dc95b586707b2899b888b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2d:9c:f3:ac:42:31:71:bf:ed:f5:51:99:01:
a4:51:fb:fc:45:3e:94:33:ff:81:4a:71:27:db:62:
09:6b:3e:63:4b:05:94:6e:64:0a:09:5d:e8:e6:f7:
b2:37:a1:6e:55:71:5c:38:fd:81:cd:fe:44:c0:4a:
cb:09:c2:47:b7:4e:b1:1c:9f:27:c7:60:fd:c9:f2:
aa:22:f4:e5:85:ae:3d:38:ef:7b:a8:8f:ae:a1:70:
25:b9:11:80:5d:9b:5e:2f:68:34:81:ad:57:be:99:
2f:a1:23:e2:d8:c7:e8:62:96:79:07:a1:17:3d:6d:
d2:e0:f4:fe:25:0a:96:60:d5:d3:91:b3:b2:d2:af:
45:90:a9:8a:51:a3:89:bc:96:39:82:b7:28:7c:e5:
ea:a9:12:9b:cf:1b:35:95:7b:28:d2:09:03:16:47:
90:b3:80:59:93:c9:17:51:3f:da:d0:f7:79:db:6d:
02:ad:bc:93:66:17:55:4a:57:7b:f4:48:3c:11:68:
78:c4:7d:bb:85:38:22:c5:c7:03:04:af:3c:90:da:
d0:f6:28:ab:5b:37:f9:f6:a3:4c:1b:6e:05:7b:c1:
cc:40:78:66:2a:30:98:df:26:3f:ba:f4:c9:6a:81:
74:1f:8b:71:c9:0f:70:53:df:d0:20:3d:9b:49:a8:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B6:E3:DC:BE:C4:F7:95:3D:8D:C9:5B:58:67:07:B2:89:9B:88:8B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rbj3L7E95U9jclbWGcHsombiIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.175.239.0/24
89.144.38.0/24
Signature Algorithm: sha256WithRSAEncryption
01:34:e5:75:90:c3:89:a2:0a:15:3e:c5:cb:09:db:50:3a:6d:
bd:d2:fe:f8:35:67:87:70:af:ef:23:84:37:46:91:f1:c2:5f:
b4:19:9b:84:2c:45:e2:da:4a:3f:1b:19:af:44:be:9a:8a:32:
97:e1:d6:4e:6d:dd:0b:00:b4:2b:48:fd:50:74:c8:8d:31:d0:
df:5d:e7:00:98:22:96:f8:52:d4:03:d3:87:29:05:aa:28:e2:
8c:9c:d3:1e:af:c5:b7:8a:f4:a3:14:53:91:16:4b:60:8a:5a:
1d:9f:36:7c:63:d6:09:a4:18:57:09:b8:ad:a1:bc:fd:28:64:
79:81:e3:27:3e:06:7f:a6:83:27:09:b8:ad:93:67:c7:40:e5:
ee:54:61:76:d9:54:42:b5:8b:0c:92:5f:8c:60:60:fc:c6:9e:
10:90:ff:c1:2a:ec:fa:7a:99:31:15:3d:e1:6b:d6:d1:42:0e:
b3:b9:81:06:a3:bc:99:a8:ef:70:bf:42:2d:90:0e:c4:51:a3:
0a:8f:f1:b7:cc:ac:11:34:98:85:25:8e:15:31:b2:f0:79:49:
74:ca:43:dc:f4:87:ef:3d:2a:32:11:ad:f6:ae:5e:9b:72:06:
12:21:f3:8c:a8:b0:f6:b3:00:c4:ab:35:78:84:dc:6c:20:ec:
f1:bb:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:25 2025 by rpki-client