Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/82GPIRI04ijtxn4B0cQWr95nbbk.roa
File: 82GPIRI04ijtxn4B0cQWr95nbbk.roa (raw, json)
Hash identifier: U27oVsax7Kp4yjm+DfnW6j/CfK6ZhY2NuLfR0SAnBCw=
Subject key identifier: F3:61:8F:21:12:34:E2:28:ED:C6:7E:01:D1:C4:16:AF:DE:67:6D:B9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195930D30C7E121E2E4B27C22FE2F6FB038
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/82GPIRI04ijtxn4B0cQWr95nbbk.roa
Signing time: Fri 14 Mar 2025 05:07:49 +0000
ROA not before: Fri 14 Mar 2025 05:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 09:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:0d:30:c7:e1:21:e2:e4:b2:7c:22:fe:2f:6f:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 14 05:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3618f211234e228edc67e01d1c416afde676db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:6a:cb:d2:b9:a2:11:ad:7c:f3:2b:cd:e1:
de:a1:24:5f:fd:05:35:0c:ad:79:9f:2c:4d:58:d2:
ee:96:f9:e2:98:dd:a1:cb:5c:fe:6e:b5:21:77:74:
e8:5f:b5:9c:44:17:91:f7:a2:c6:a1:12:09:ff:7f:
65:b0:be:e1:ee:e4:46:0e:f5:2d:70:11:8e:45:ff:
a3:79:63:a3:f6:ee:6a:93:0b:ee:55:f2:ba:ad:ce:
33:65:f6:98:2b:fa:0c:2b:e1:37:2c:4d:64:a8:86:
5f:28:ef:4a:af:eb:02:6a:ae:a1:1a:1e:11:60:cf:
90:2a:fd:4a:b5:ad:a9:92:37:03:2f:a1:25:5f:4c:
32:1d:47:10:0b:03:c3:57:97:37:1e:d4:22:08:a9:
83:56:16:ad:c8:51:6c:e9:7b:1c:2d:49:1e:0c:87:
97:fa:54:76:ae:99:70:3e:dd:2c:18:18:cc:3c:10:
8d:75:38:37:7f:8a:a5:26:4c:ef:92:97:87:8c:20:
a6:c6:c0:cc:a3:da:8f:d7:7b:81:ac:80:65:7c:19:
07:9d:cb:f2:e2:dc:84:b0:f7:a4:fb:62:be:79:28:
0f:be:13:95:53:bb:83:da:22:ed:30:b6:06:ed:09:
0b:79:d8:a3:71:8f:fb:dd:43:52:6e:26:02:7d:32:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:61:8F:21:12:34:E2:28:ED:C6:7E:01:D1:C4:16:AF:DE:67:6D:B9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/82GPIRI04ijtxn4B0cQWr95nbbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.103.163.0/24
94.249.195.0/24
94.249.215.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:e9:41:5e:58:27:a5:87:7b:1e:ef:fd:50:f6:1d:f3:97:fe:
65:dd:18:a6:50:64:3b:95:ac:fd:ba:7c:0f:8a:27:fe:65:aa:
1a:6f:c1:99:31:83:ab:ed:29:3c:f9:33:38:89:8a:90:68:8a:
fe:2b:13:9f:95:ed:73:05:d8:06:9e:34:98:6b:6d:79:e5:98:
57:80:d1:fd:34:14:e1:a4:ad:ad:30:4d:41:bc:32:ec:fb:f9:
f1:38:8b:37:db:8f:65:7b:f5:da:c9:17:fb:58:ac:14:a7:3d:
36:93:28:a7:31:60:46:b7:e5:07:2b:4e:ce:82:e6:a6:f4:d8:
12:ec:67:f1:74:f6:fc:13:81:3a:1b:9d:07:c9:ac:e6:a2:81:
6c:b0:e7:96:97:29:29:a2:45:d3:e5:5e:ce:d1:e6:10:fb:9a:
67:74:cb:00:bf:f4:e5:02:8b:e3:1c:aa:b8:7c:23:32:7a:4f:
fe:e4:29:06:5c:7d:79:67:20:ab:da:bb:35:1b:ee:27:23:bd:
63:53:5f:4e:18:29:68:3c:6b:cd:ab:77:d0:f7:b7:f7:20:6a:
ed:d4:14:2d:28:8f:a7:5b:51:50:62:93:52:28:2d:f8:f3:e4:
41:55:ee:59:49:48:4e:30:99:97:c8:b8:eb:1c:fa:3e:19:3a:
63:88:ba:8b
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZWTDTDH4SHi5LJ8Iv4vb7A4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzE0MDUwNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzYxOGYyMTEyMzRlMjI4ZWRjNjdlMDFkMWM0MTZhZmRlNjc2ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1xqy9K5ohGtfPMrzeHeoSRf/QU1
DK15nyxNWNLulvnimN2hy1z+brUhd3ToX7WcRBeR96LGoRIJ/39lsL7h7uRGDvUt
cBGORf+jeWOj9u5qkwvuVfK6rc4zZfaYK/oMK+E3LE1kqIZfKO9Kr+sCaq6hGh4R
YM+QKv1Kta2pkjcDL6ElX0wyHUcQCwPDV5c3HtQiCKmDVhatyFFs6XscLUkeDIeX
+lR2rplwPt0sGBjMPBCNdTg3f4qlJkzvkpeHjCCmxsDMo9qP13uBrIBlfBkHncvy
4tyEsPek+2K+eSgPvhOVU7uD2iLtMLYG7QkLedijcY/73UNSbiYCfTKupQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFPNhjyESNOIo7cZ+AdHEFq/eZ225MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvODJHUElSSTA0aWp0eG40QjBjUVdyOTVuYmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQABVOBAwQA
Ba+KAwQATVo2AwQAV++DAwQAXmejAwQAXvnDAwQAXvnXAwQAX9ciAwQAshKQAwQA
uQ2cAwQA2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQDi6UFeWCelh3se7/1Q9h3zl/5l
3RimUGQ7laz9unwPiif+Zaoab8GZMYOr7Sk8+TM4iYqQaIr+KxOfle1zBdgGnjSY
a2155ZhXgNH9NBThpK2tME1BvDLs+/nxOIs3249le/XayRf7WKwUpz02kyinMWBG
t+UHK07Oguam9NgS7GfxdPb8E4E6G50HyazmooFssOeWlykpokXT5V7O0eYQ+5pn
dMsAv/TlAovjHKq4fCMyek/+5CkGXH15ZyCr2rs1G+4nI71jU19OGCloPGvNq3fQ
97f3IGrt1BQtKI+nW1FQYpNSKC348+RBVe5ZSUhOMJmXyLjrHPo+GTpjiLqL
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:17 2025 by rpki-client