Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SEKgZvOcjsf6BGHjWcblDO30DVg.roa
File: SEKgZvOcjsf6BGHjWcblDO30DVg.roa (raw, json)
Hash identifier: t/OnqnwdsOQDkQyUL45L7ypMG+Y8WNmbtTVhEsUUP6c=
Subject key identifier: 48:42:A0:66:F3:9C:8E:C7:FA:04:61:E3:59:C6:E5:0C:ED:F4:0D:58
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195328DB5CB6899C7A3696908200ADD0589
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SEKgZvOcjsf6BGHjWcblDO30DVg.roa
Signing time: Sun 23 Feb 2025 11:25:02 +0000
ROA not before: Sun 23 Feb 2025 11:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 11:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:8d:b5:cb:68:99:c7:a3:69:69:08:20:0a:dd:05:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 23 11:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4842a066f39c8ec7fa0461e359c6e50cedf40d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:bc:92:e6:ae:dc:af:d9:8d:96:53:ff:16:
3e:43:f5:4b:9e:c8:6b:c4:06:07:aa:ef:c4:a4:06:
ba:af:3e:df:f1:b1:b2:6f:7c:05:a9:5d:e0:87:36:
10:c6:05:86:66:8d:42:7a:36:87:3a:c7:cb:2f:45:
c4:98:14:c8:27:52:24:b5:12:50:46:d6:2d:cc:19:
ac:32:21:c6:a4:c3:eb:b0:3b:b0:66:88:a7:a9:24:
c3:71:72:18:f8:99:5b:50:25:28:eb:8c:ed:92:77:
0b:20:9a:e5:49:8e:f2:6b:7a:7f:2b:c3:99:a8:16:
a8:0f:21:58:8b:d2:51:57:19:23:f7:f6:c7:33:11:
f1:95:af:02:07:fd:45:fb:7d:87:a6:85:24:c5:6f:
3d:a7:c1:c7:b7:fd:76:61:1e:2b:f6:01:9d:c2:78:
e7:78:6e:56:00:f8:cb:76:09:8f:a4:2e:a1:93:a2:
8b:1b:f8:1f:1e:58:52:f3:9b:4b:9f:7e:53:f4:6a:
a1:29:b3:a7:53:09:53:95:16:64:13:7a:d1:d8:85:
e1:57:ee:eb:3d:e2:46:b6:ac:6d:ae:d5:22:ed:b9:
d0:e4:6b:35:c7:5d:98:42:04:55:44:7e:4d:e9:3b:
da:ef:3f:87:9e:f6:12:96:39:7b:d3:5b:cb:dd:31:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:A0:66:F3:9C:8E:C7:FA:04:61:E3:59:C6:E5:0C:ED:F4:0D:58
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SEKgZvOcjsf6BGHjWcblDO30DVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
77.90.49.0/24
Signature Algorithm: sha256WithRSAEncryption
16:53:14:8a:10:c1:63:d2:5c:43:91:2b:52:13:e2:b7:b1:97:
2e:e5:21:4a:fc:0c:10:4d:5d:a1:f6:86:a7:0d:79:56:dc:6f:
69:b7:20:59:91:b4:f3:36:cf:27:89:16:30:c4:c9:c6:43:3f:
86:5d:44:bc:95:0e:a4:7b:68:ed:94:f5:33:f7:3a:ca:96:fa:
09:c6:8e:7e:4b:67:69:0d:8f:93:e3:6c:fb:6d:10:22:4b:c0:
77:16:09:43:02:c2:80:a0:fc:8b:60:b9:be:a7:fe:4c:40:85:
8f:ee:eb:22:da:6c:9e:53:19:f5:0e:fb:08:7e:7e:f6:15:2b:
81:81:39:32:69:77:83:0a:19:b2:63:6d:e0:4f:d2:8c:38:e6:
ed:85:38:8e:c6:73:e7:86:66:27:08:95:d5:1d:66:be:44:0f:
fd:96:7e:61:e5:74:20:01:04:fc:f0:21:31:42:a8:2f:7d:0b:
ad:64:22:4a:49:7b:c8:f8:c0:33:59:ee:1c:3f:f5:51:28:c3:
fc:87:93:83:8a:c5:50:a6:07:31:85:76:00:f0:47:a6:e9:4e:
62:b3:64:25:f0:d3:f7:1a:c6:71:6a:b0:72:aa:cb:a8:35:6b:
90:1c:3d:18:1b:b5:e3:89:f6:e8:26:9d:43:ec:78:dd:06:d9:
0d:13:77:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUyjbXLaJnHo2lpCCAK3QWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjIzMTEyNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQyYTA2NmYzOWM4ZWM3ZmEwNDYxZTM1OWM2ZTUwY2VkZjQwZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSm8kuau3K/ZjZZT/xY+Q/VLnshr
xAYHqu/EpAa6rz7f8bGyb3wFqV3ghzYQxgWGZo1CejaHOsfLL0XEmBTIJ1IktRJQ
RtYtzBmsMiHGpMPrsDuwZoinqSTDcXIY+JlbUCUo64ztkncLIJrlSY7ya3p/K8OZ
qBaoDyFYi9JRVxkj9/bHMxHxla8CB/1F+32HpoUkxW89p8HHt/12YR4r9gGdwnjn
eG5WAPjLdgmPpC6hk6KLG/gfHlhS85tLn35T9GqhKbOnUwlTlRZkE3rR2IXhV+7r
PeJGtqxtrtUi7bnQ5Gs1x12YQgRVRH5N6Tva7z+HnvYSljl701vL3TF+twIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEhCoGbznI7H+gRh41nG5Qzt9A1YMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvU0VLZ1p2T2Nqc2Y2QkdIaldjYmxETzMwRFZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOZAwQA
TVoxMA0GCSqGSIb3DQEBCwUAA4IBAQAWUxSKEMFj0lxDkStSE+K3sZcu5SFK/AwQ
TV2h9oanDXlW3G9ptyBZkbTzNs8niRYwxMnGQz+GXUS8lQ6ke2jtlPUz9zrKlvoJ
xo5+S2dpDY+T42z7bRAiS8B3FglDAsKAoPyLYLm+p/5MQIWP7usi2myeUxn1DvsI
fn72FSuBgTkyaXeDChmyY23gT9KMOObthTiOxnPnhmYnCJXVHWa+RA/9ln5h5XQg
AQT88CExQqgvfQutZCJKSXvI+MAzWe4cP/VRKMP8h5ODisVQpgcxhXYA8Eem6U5i
s2Ql8NP3GsZxarByqsuoNWuQHD0YG7XjifboJp1D7HjdBtkNE3fh
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:26:21 2025 by rpki-client