Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sc0lDba9jHeUfIXOsUQyUsy0pCs.roa
File: Sc0lDba9jHeUfIXOsUQyUsy0pCs.roa (raw, json)
Hash identifier: 2od90fOEjs9uaee2DeW2EYy+7MZFZQ2kIcPxhmeE2IM=
Subject key identifier: 49:CD:25:0D:B6:BD:8C:77:94:7C:85:CE:B1:44:32:52:CC:B4:A4:2B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195FF0238F485AE7CB7CD24F6F5562C1F43
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sc0lDba9jHeUfIXOsUQyUsy0pCs.roa
Signing time: Fri 04 Apr 2025 04:14:50 +0000
ROA not before: Fri 04 Apr 2025 04:14:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 04:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:02:38:f4:85:ae:7c:b7:cd:24:f6:f5:56:2c:1f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 4 04:14:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49cd250db6bd8c77947c85ceb1443252ccb4a42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:9d:2f:20:4a:f9:51:63:8e:5a:2f:4f:d7:
63:99:ff:38:34:f4:62:7f:a7:c5:1c:8d:7c:64:2f:
e2:a6:d6:86:97:be:34:c5:9c:e1:ca:33:e1:2f:7e:
45:5b:1d:30:6a:53:57:ad:1f:51:a4:20:1e:25:35:
f9:d2:9f:51:53:51:43:ec:46:c2:d9:cb:1f:0e:32:
c7:ce:dc:a8:42:96:5b:63:8e:03:2a:84:78:02:65:
69:8e:b7:19:ea:ae:96:27:9a:62:78:08:d7:6b:42:
d9:c3:8c:59:0a:43:06:5a:13:61:12:9d:3a:d5:00:
bf:56:5c:6b:24:21:12:48:7c:40:93:f3:79:bc:7c:
27:7f:6e:04:63:ba:2e:85:5a:fb:fe:d1:9f:76:a7:
8e:f4:9c:3a:9b:c4:51:fb:d6:41:39:2d:83:21:e5:
f6:7b:06:69:a7:2e:86:84:a9:31:f0:7c:2c:c5:3c:
28:fd:25:70:fa:92:09:21:c6:18:c1:6a:0d:3a:00:
68:95:c1:c3:eb:a9:07:8c:84:5d:af:ec:b9:8d:a4:
1b:84:e8:0a:2a:e3:ee:cc:38:96:f8:72:d9:26:74:
95:93:7d:7e:e6:d5:86:af:23:4e:37:c0:41:a3:0a:
6a:d3:75:52:87:23:d9:4c:f5:94:3b:73:c9:45:42:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:25:0D:B6:BD:8C:77:94:7C:85:CE:B1:44:32:52:CC:B4:A4:2B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Sc0lDba9jHeUfIXOsUQyUsy0pCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.231.233.0/24
77.90.3.0/24
77.90.28.0/24
89.106.92.0/22
89.144.6.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
89.144.46.0-89.144.55.255
89.144.58.0/23
Signature Algorithm: sha256WithRSAEncryption
55:ee:10:c0:2d:2b:03:f4:7d:34:35:a9:74:d8:4e:2e:a1:15:
4e:ed:97:e3:16:d7:43:62:c4:a6:f1:59:61:c4:94:1b:00:bd:
61:39:c6:7b:25:7e:d3:da:38:11:ae:35:32:49:fd:63:85:c5:
1a:cd:b7:da:97:1e:4c:45:d2:7a:5d:d0:a8:bb:e5:4c:00:37:
90:6a:15:08:e1:87:54:a1:c1:0c:07:66:86:d9:ba:aa:31:6a:
16:94:df:52:7c:37:93:fc:08:8a:85:8a:64:81:d9:22:5e:f2:
35:0d:25:29:b2:4d:9a:b6:52:86:e0:90:ae:84:73:22:2b:47:
3f:21:44:e1:05:02:f6:3e:4a:7d:97:d5:b2:7b:60:51:68:65:
36:9d:c4:5d:f1:50:49:49:d1:5a:f4:67:e9:a5:c2:39:1b:ff:
24:f5:8d:62:49:5d:a0:b2:9a:aa:41:3c:76:e5:0c:62:5b:a5:
92:b9:4c:e2:73:3f:2e:57:fa:c1:10:ab:ef:23:ba:f5:e6:9e:
74:0d:eb:cc:9f:e9:74:ee:ad:dd:c7:08:7a:86:e8:c3:88:7b:
5d:e6:37:da:f5:0d:22:18:7a:af:b9:b6:b8:5e:85:73:1a:86:
7b:6e:9f:58:c8:23:22:13:14:e1:99:72:a1:c7:c2:de:e0:98:
ad:08:f6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:27 2025 by rpki-client