Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7roDfRvnrNtVc5aQqnyeklLoAjY.roa
File: 7roDfRvnrNtVc5aQqnyeklLoAjY.roa (raw, json)
Hash identifier: uLxcizJwQaP/EFlO9to26nzjdu/sSnaLmcckxuqcdqg=
Subject key identifier: EE:BA:03:7D:1B:E7:AC:DB:55:73:96:90:AA:7C:9E:92:52:E8:02:36
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019597C11C4D227637178B6DF7C4BA7FC1C7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7roDfRvnrNtVc5aQqnyeklLoAjY.roa
Signing time: Sat 15 Mar 2025 03:02:50 +0000
ROA not before: Sat 15 Mar 2025 03:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 05:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:97:c1:1c:4d:22:76:37:17:8b:6d:f7:c4:ba:7f:c1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 15 03:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeba037d1be7acdb55739690aa7c9e9252e80236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:9e:d2:0a:6d:d0:14:d1:71:d5:3f:f0:00:
49:98:73:50:fb:cf:83:f0:29:d3:d9:fd:9f:db:c7:
99:6f:b3:c2:b8:a7:7e:ef:36:18:14:85:0d:4b:17:
38:64:11:cb:d0:f0:e5:37:fa:64:6a:a7:0b:61:8c:
51:57:12:9a:b4:64:4a:e8:8f:b9:5f:8f:a9:c7:fa:
82:fc:af:e7:93:e5:f3:61:c1:44:a3:aa:12:7b:c6:
8f:55:05:f6:c2:73:48:49:c4:2b:79:b0:e9:0a:ba:
00:1e:1a:97:be:59:d7:50:0d:00:8a:f9:67:d1:48:
ce:cf:d6:48:73:6a:cd:98:a1:36:38:f8:b3:30:f0:
6e:75:d0:7f:fa:43:a1:82:88:b1:b5:ce:44:33:a4:
72:98:0e:cb:32:42:74:24:3a:3a:4e:01:d1:86:ff:
9e:be:b6:ac:8e:33:92:6a:d8:7c:9a:69:a1:ec:e4:
54:b2:5b:c0:f0:16:01:28:36:32:db:44:41:56:82:
85:7d:0e:cd:f0:1c:4f:e3:ab:26:b9:dc:f0:fd:06:
39:53:ed:e2:76:aa:e4:96:48:4f:08:4f:54:b2:bc:
6d:6d:85:53:2e:1f:e1:d6:f0:e3:63:ee:62:19:98:
b5:20:09:5d:16:55:91:00:45:c7:4c:7a:31:c8:ba:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BA:03:7D:1B:E7:AC:DB:55:73:96:90:AA:7C:9E:92:52:E8:02:36
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7roDfRvnrNtVc5aQqnyeklLoAjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.220.0/24
5.231.70.0/24
5.231.82.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.8.0/24
89.144.16.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3d:23:cf:55:7d:fa:17:89:5e:4c:05:c8:cf:c7:ee:6f:76:
90:fd:f2:41:80:cd:28:69:9b:e3:ad:02:02:f4:a6:ea:8f:6f:
f9:3c:d7:04:97:ad:9c:90:94:3b:3c:17:64:dd:9f:3b:2c:e7:
ee:18:e5:33:99:f0:0d:2c:a6:3b:0b:13:18:6e:8a:ab:f6:35:
98:37:89:bb:d0:b1:3b:a1:6f:df:62:ed:f8:0c:14:22:f1:40:
bc:de:00:c1:70:ea:e5:99:22:7f:23:d7:75:7f:2f:11:22:64:
5f:25:fb:87:42:7d:99:12:c1:cf:ba:7d:a9:ff:79:20:74:28:
c1:5a:80:d6:f5:c4:72:23:70:f5:b9:1c:70:ee:2c:21:01:b8:
ef:49:ef:23:84:de:08:44:a0:25:c9:0f:a7:18:96:51:e4:fc:
f9:d9:65:32:58:94:d1:e4:43:15:f8:a7:1f:89:23:6c:ed:54:
81:da:0a:32:da:e6:b1:34:38:76:bd:1b:b1:62:0d:9b:ba:e9:
a8:bd:3c:b7:2e:78:6f:e8:13:4f:50:b9:02:b0:8e:64:71:0f:
ef:5b:a6:65:49:bd:53:17:e5:22:4d:19:9b:2c:81:38:da:23:
bc:55:18:30:02:90:22:c6:bc:56:91:66:9e:c2:23:20:42:c6:
fb:9a:11:82
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZWXwRxNInY3F4tt98S6f8HHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzE1MDMwMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWJhMDM3ZDFiZTdhY2RiNTU3Mzk2OTBhYTdjOWU5MjUyZTgwMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UKe0gpt0BTRcdU/8ABJmHNQ+8+D
8CnT2f2f28eZb7PCuKd+7zYYFIUNSxc4ZBHL0PDlN/pkaqcLYYxRVxKatGRK6I+5
X4+px/qC/K/nk+XzYcFEo6oSe8aPVQX2wnNIScQrebDpCroAHhqXvlnXUA0Aivln
0UjOz9ZIc2rNmKE2OPizMPBuddB/+kOhgoixtc5EM6RymA7LMkJ0JDo6TgHRhv+e
vrasjjOSath8mmmh7ORUslvA8BYBKDYy20RBVoKFfQ7N8BxP46smudzw/QY5U+3i
dqrklkhPCE9UsrxtbYVTLh/h1vDjY+5iGZi1IAldFlWRAEXHTHoxyLpi6QIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFO66A30b56zbVXOWkKp8npJS6AI2MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvN3JvRGZSdm5yTnRWYzVhUXFueWVrbExvQWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQABVOWAwQA
Ba/cAwQABedGAwQABedSAwQATVoWAwQATVonAwQATVopAwQATVo0AwQATVo6AwQA
WWpGAwQAWZAIAwQAWZAQAwQAWZAZAwQBWZAiAwQAWZA8MA0GCSqGSIb3DQEBCwUA
A4IBAQByPSPPVX36F4leTAXIz8fub3aQ/fJBgM0oaZvjrQIC9Kbqj2/5PNcEl62c
kJQ7PBdk3Z87LOfuGOUzmfANLKY7CxMYboqr9jWYN4m70LE7oW/fYu34DBQi8UC8
3gDBcOrlmSJ/I9d1fy8RImRfJfuHQn2ZEsHPun2p/3kgdCjBWoDW9cRyI3D1uRxw
7iwhAbjvSe8jhN4IRKAlyQ+nGJZR5Pz52WUyWJTR5EMV+KcfiSNs7VSB2goy2uax
NDh2vRuxYg2buumovTy3Lnhv6BNPULkCsI5kcQ/vW6ZlSb1TF+UiTRmbLIE42iO8
VRgwApAixrxWkWaewiMgQsb7mhGC
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:33 2025 by rpki-client