Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K2EpF3mgA6gShVisMra1ZnvTJeA.roa
File: K2EpF3mgA6gShVisMra1ZnvTJeA.roa (raw, json)
Hash identifier: yBTLYJKnTLwLNHMLT7g18FNcnlhhb9lPtUhIIIDYsgI=
Subject key identifier: 2B:61:29:17:79:A0:03:A8:12:85:58:AC:32:B6:B5:66:7B:D3:25:E0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942574310D696ACE14CCB085EB58E3DADC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K2EpF3mgA6gShVisMra1ZnvTJeA.roa
Signing time: Thu 02 Jan 2025 05:19:19 +0000
ROA not before: Thu 02 Jan 2025 05:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 16:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:74:31:0d:69:6a:ce:14:cc:b0:85:eb:58:e3:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 05:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b61291779a003a8128558ac32b6b5667bd325e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:06:fe:c0:29:3e:d2:f4:e9:b7:d0:c0:25:
61:ce:e4:ed:04:bf:64:64:e4:71:16:9e:66:a2:1f:
36:f7:6b:6a:02:dd:ae:97:8c:3c:eb:72:df:03:45:
73:92:05:10:50:83:a5:d9:5f:a0:a0:b8:00:67:06:
c9:54:cd:82:0b:0a:47:cc:e7:c9:d8:fa:ad:0e:25:
34:7d:96:ad:9d:b6:b6:9e:7f:20:5a:1d:23:b1:01:
d1:e7:43:57:9d:05:32:11:24:7a:09:2a:ce:3f:56:
18:d0:b4:61:70:92:83:a6:91:9d:78:50:00:65:67:
96:e9:fc:55:70:e4:36:ad:e6:a5:ae:99:d8:47:c3:
1b:20:b9:c0:d4:5d:66:27:9f:db:24:4d:04:b6:5e:
67:e9:94:2d:55:66:10:4c:49:76:1a:ee:e4:12:7a:
3b:4b:b6:2f:80:48:6b:86:9a:98:1d:9f:75:a9:62:
8a:ec:f1:71:a8:9e:40:a6:55:a4:26:60:7f:f9:c6:
5d:bc:9e:44:d6:c9:80:bf:e9:2e:7e:57:c9:0b:19:
ed:a6:ac:f8:d0:90:a4:27:ee:8c:9c:e0:71:76:ba:
13:1a:d3:ab:a6:0e:94:f9:58:c7:da:36:c7:fc:17:
b8:d5:5d:c7:f8:6c:b5:8e:51:15:90:49:78:c3:0b:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:61:29:17:79:A0:03:A8:12:85:58:AC:32:B6:B5:66:7B:D3:25:E0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/K2EpF3mgA6gShVisMra1ZnvTJeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ab:c4:d4:d4:b5:87:60:21:f3:4b:43:78:1d:da:fe:6c:ef:
94:cb:50:2d:64:76:bf:72:d8:07:f1:b6:d9:0e:57:9c:6d:94:
76:51:2a:b0:74:cf:d6:70:ae:3d:a7:8b:37:f6:62:3f:9a:05:
70:bc:d4:e1:c0:62:9d:a3:c5:84:bc:2c:ae:05:16:ee:97:40:
24:4b:49:2b:89:03:e2:d2:2a:07:b1:62:7f:69:f3:75:1d:58:
ee:71:3f:b4:fe:72:49:4a:d5:46:3e:31:2d:f0:a5:af:08:59:
9e:39:af:08:e8:f5:46:51:f2:0c:7f:8d:e5:e1:a7:89:9f:66:
fb:49:23:ec:1e:d7:6c:39:b3:2b:c7:76:9b:79:16:f6:f5:bb:
28:df:9c:31:e9:a3:15:ce:72:9f:0a:5e:8e:0a:09:59:ce:87:
29:84:69:e4:2f:af:84:88:60:4b:05:92:8e:ba:be:f5:95:9b:
67:b2:8c:de:92:7c:e9:19:25:20:ee:58:3c:fe:3a:c0:40:ea:
16:01:31:9e:75:0a:83:58:65:62:68:29:c0:c3:7e:e7:15:69:
a8:00:ff:00:41:c6:ef:ee:a8:61:a1:bf:88:9a:cb:9a:be:7f:
88:48:c4:be:72:7a:46:18:21:58:02:ce:5b:e5:f9:06:64:96:
89:a3:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:11 2025 by rpki-client