Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FQ2Mv2QXbgIzM8_jB6owlnQOtw0.roa
File: FQ2Mv2QXbgIzM8_jB6owlnQOtw0.roa (raw, json)
Hash identifier: maFSxLa1SjXED/RUTZMdUVL6nrhrZUP/mkObbM+sCMQ=
Subject key identifier: 15:0D:8C:BF:64:17:6E:02:33:33:CF:E3:07:AA:30:96:74:0E:B7:0D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01990AA20EB7B0EE3DE5A13AE2DBADB064CA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FQ2Mv2QXbgIzM8_jB6owlnQOtw0.roa
Signing time: Tue 02 Sep 2025 13:33:36 +0000
ROA not before: Tue 02 Sep 2025 13:33:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Sep 2025 04:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:a2:0e:b7:b0:ee:3d:e5:a1:3a:e2:db:ad:b0:64:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 13:33:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=150d8cbf64176e023333cfe307aa3096740eb70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:09:97:c9:a4:17:c6:d0:ad:2e:75:d8:6a:
02:7a:0e:ac:47:bd:12:61:b7:39:e6:9d:8b:5e:28:
84:62:30:e1:90:03:c3:55:5e:9f:65:8c:ab:7e:1b:
b1:51:20:92:a5:14:e7:3d:41:c7:77:99:fc:48:6c:
1a:9f:04:64:d4:d9:c4:f1:b3:d8:d0:b6:4e:9e:6e:
67:84:2f:95:3e:60:ef:5d:91:4b:3e:ea:9a:db:2a:
4e:98:7f:82:9a:a2:53:42:a4:3e:28:96:10:99:b1:
03:62:b1:8d:fc:12:df:30:00:bc:dd:e4:59:ab:a9:
5b:30:01:47:7b:50:82:d4:d0:a7:a6:44:5a:1c:45:
28:62:fa:a3:1a:57:69:5e:2e:5a:74:6f:f9:02:88:
77:ce:5a:d0:07:53:33:bd:62:3a:23:c6:50:19:4c:
68:d3:08:68:62:34:04:4d:ed:29:24:0f:83:40:60:
7c:84:dd:aa:37:40:cb:1f:0b:00:02:95:b3:80:91:
86:4a:0c:dd:cf:17:fa:a0:a8:26:3b:77:be:96:68:
86:c3:dc:8b:ab:0b:a5:c5:c9:0b:05:e7:d0:ce:d0:
6a:32:69:c5:4b:fb:68:10:46:aa:02:55:20:90:c4:
7f:6d:cb:2d:fe:97:a1:16:06:39:6e:27:92:82:12:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:8C:BF:64:17:6E:02:33:33:CF:E3:07:AA:30:96:74:0E:B7:0D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FQ2Mv2QXbgIzM8_jB6owlnQOtw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.231.30.0/24
77.90.54.0/24
85.118.162.0/24
87.239.131.0/24
89.106.90.0/24
89.144.47.0/24
94.249.233.0/24
95.215.32.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
da:c5:84:b1:59:b1:0e:0f:a5:43:b7:2d:9c:35:03:bf:0b:71:
7e:ae:0c:ee:bf:83:5b:9b:5f:8b:48:f3:32:7c:78:b2:e8:2e:
e2:e4:b2:ee:2f:32:eb:33:b0:5d:72:94:36:e5:86:a5:91:b1:
d5:75:61:2b:04:f3:ee:bf:74:25:85:eb:dd:43:f8:72:09:71:
5a:36:15:97:ab:a9:fa:c8:05:3a:00:b3:19:ac:7b:5b:8a:77:
ce:ff:9f:97:06:b4:db:d0:66:c1:f5:ab:a6:9b:4c:2e:30:12:
72:5b:15:20:59:de:72:25:f2:87:c9:63:11:0a:af:a9:4d:1d:
cc:74:d6:f6:ff:fc:67:96:94:11:db:30:a9:28:77:12:95:cb:
b3:66:ac:e9:3d:8d:b1:4b:ca:e6:92:c8:8f:7a:f3:f1:a5:d0:
4b:64:4a:77:e4:b8:43:47:83:cb:ce:23:b7:24:8c:17:4b:a3:
32:be:43:2b:a3:e3:5b:21:fa:06:73:dc:ee:8f:a8:38:4a:5f:
54:2d:af:6b:66:2d:e1:34:2c:50:7e:21:e4:f5:a6:ac:b6:29:
20:15:4e:c3:54:34:49:fc:5a:e6:b4:39:79:5f:45:c7:2a:83:
88:25:43:c6:2a:50:7e:76:83:bd:0e:ef:f5:90:75:a3:23:c2:
c3:30:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:02:02 2025 by rpki-client