Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I6uXIkutBFpw1ePUGMF-DQ1tgsk.roa
File: I6uXIkutBFpw1ePUGMF-DQ1tgsk.roa (raw, json)
Hash identifier: MVZnrkk7aEgcnyvRkV9VD/878oGOIKEZ9jb+SHOyEr0=
Subject key identifier: 23:AB:97:22:4B:AD:04:5A:70:D5:E3:D4:18:C1:7E:0D:0D:6D:82:C9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193BDA7FAD772C34B3B151CCD21676ABC9D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I6uXIkutBFpw1ePUGMF-DQ1tgsk.roa
Signing time: Fri 13 Dec 2024 01:35:22 +0000
ROA not before: Fri 13 Dec 2024 01:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 12:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bd:a7:fa:d7:72:c3:4b:3b:15:1c:cd:21:67:6a:bc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 13 01:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23ab97224bad045a70d5e3d418c17e0d0d6d82c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:ff:4a:8d:82:fc:c9:b6:63:17:cd:22:de:
5e:a6:2f:f5:04:6e:74:db:65:45:87:d9:31:99:c0:
33:0d:13:cd:66:d0:e3:60:fe:51:03:21:3b:3d:87:
4c:c7:02:16:66:23:8b:c5:f5:4e:24:8b:10:52:0f:
ac:ca:ed:6c:6c:ae:84:39:67:cb:b1:9a:ac:dd:c8:
38:53:84:4d:af:6f:97:48:c0:1f:e3:d3:84:21:c4:
8e:5c:8b:49:ad:a1:95:7c:5a:47:8a:f0:25:cd:3b:
f2:43:17:df:fa:3c:d9:33:41:45:02:de:dd:c1:73:
68:8d:f0:85:a7:3a:60:af:5e:eb:7b:f8:0b:89:4e:
9e:f4:7f:6d:8a:e5:78:03:a4:de:1c:40:fa:8c:7c:
b9:b1:93:6b:7b:e5:d7:2a:f0:b7:7c:12:21:7e:eb:
e4:59:7c:47:b8:9c:54:ce:b0:0c:c9:ab:a2:38:de:
d8:01:ee:cd:80:c0:41:d1:af:15:64:5e:44:8a:95:
ac:f9:70:82:2b:1c:c4:2c:4d:1e:5b:49:97:ff:24:
bc:b7:6c:b2:e9:e6:c8:70:6c:2f:57:e1:25:cf:24:
d9:b2:f4:5b:a1:da:6f:ea:24:a9:d5:1d:b0:89:d0:
92:ff:2b:f9:6d:54:29:54:3e:e4:73:06:48:bb:30:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:97:22:4B:AD:04:5A:70:D5:E3:D4:18:C1:7E:0D:0D:6D:82:C9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I6uXIkutBFpw1ePUGMF-DQ1tgsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
94.249.153.0/24
94.249.212.0/24
94.249.237.0/24
95.215.32.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:3d:8e:83:7e:0e:a5:8a:09:53:78:f7:93:8f:5a:d1:3c:ee:
db:31:9c:be:e2:a5:44:0b:ff:ae:e6:f8:00:7b:2f:94:90:e6:
7d:a4:be:d5:c4:4f:e3:4a:3c:30:54:40:6d:60:fd:e3:39:1a:
13:de:7c:fe:5c:8e:37:70:e0:f9:67:6e:1b:19:ae:c8:f8:7c:
3d:62:ec:17:91:97:e0:42:e7:83:16:65:e5:e3:e4:2e:db:3b:
9a:e4:db:d7:94:b1:f0:5d:ab:ec:29:7c:b9:f6:45:29:9b:c4:
e4:8e:c0:26:2f:c7:b0:ec:da:77:8b:55:85:3d:b2:9c:39:65:
ae:5d:d0:a6:bf:e7:72:94:22:60:0c:18:49:81:62:8c:1a:4c:
e7:d0:20:3b:9f:d5:91:9e:2f:68:c3:77:cc:63:4f:9a:d2:c1:
36:e0:9d:99:8f:4f:19:c0:b1:0e:13:59:86:32:b7:c6:b2:c7:
96:0d:b4:3b:cb:26:22:2b:bb:a1:5f:ba:0a:a7:e9:e9:dc:cb:
6b:47:43:c1:9b:7d:30:70:7a:95:63:63:35:7a:48:be:e4:a6:
c2:ad:8f:da:b7:c3:2e:08:d4:4f:8b:62:f7:fc:66:96:dd:ab:
78:ba:e8:aa:e0:5d:65:64:a7:ba:27:ff:96:5a:a5:64:aa:01:
85:e3:ad:53
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZO9p/rXcsNLOxUczSFnarydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMjEzMDEzNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2FiOTcyMjRiYWQwNDVhNzBkNWUzZDQxOGMxN2UwZDBkNmQ4MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHD/So2C/Mm2YxfNIt5epi/1BG50
22VFh9kxmcAzDRPNZtDjYP5RAyE7PYdMxwIWZiOLxfVOJIsQUg+syu1sbK6EOWfL
sZqs3cg4U4RNr2+XSMAf49OEIcSOXItJraGVfFpHivAlzTvyQxff+jzZM0FFAt7d
wXNojfCFpzpgr17re/gLiU6e9H9tiuV4A6TeHED6jHy5sZNre+XXKvC3fBIhfuvk
WXxHuJxUzrAMyauiON7YAe7NgMBB0a8VZF5EipWs+XCCKxzELE0eW0mX/yS8t2yy
6ebIcGwvV+ElzyTZsvRbodpv6iSp1R2widCS/yv5bVQpVD7kcwZIuzDaRQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFCOrlyJLrQRacNXj1BjBfg0NbYLJMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSTZ1WElrdXRCRnB3MWVQVUdNRi1EUTF0Z3NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQABVOBAwQA
Ba+KAwQATVo2AwQAV++DAwQAXvmKAwQAXvmUAwQAXvmZAwQAXvnUAwQAXvntAwQA
X9cgAwQAuS+PMA0GCSqGSIb3DQEBCwUAA4IBAQDHPY6Dfg6liglTePeTj1rRPO7b
MZy+4qVEC/+u5vgAey+UkOZ9pL7VxE/jSjwwVEBtYP3jORoT3nz+XI43cOD5Z24b
Ga7I+Hw9YuwXkZfgQueDFmXl4+Qu2zua5NvXlLHwXavsKXy59kUpm8TkjsAmL8ew
7Np3i1WFPbKcOWWuXdCmv+dylCJgDBhJgWKMGkzn0CA7n9WRni9ow3fMY0+a0sE2
4J2Zj08ZwLEOE1mGMrfGsseWDbQ7yyYiK7uhX7oKp+np3MtrR0PBm30wcHqVY2M1
eki+5KbCrY/at8MuCNRPi2L3/GaW3at4uuiq4F1lZKe6J/+WWqVkqgGF461T
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:51 2025 by rpki-client