Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U0HFJsbM70pCm9HnTGMszw4bsrY.roa
File: U0HFJsbM70pCm9HnTGMszw4bsrY.roa (raw, json)
Hash identifier: uNSYdjjZcj++7Zt7Fgv9iz+NN9cWRCaPtx2JDxB64qA=
Subject key identifier: 53:41:C5:26:C6:CC:EF:4A:42:9B:D1:E7:4C:63:2C:CF:0E:1B:B2:B6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195BCC12844BF060733F0131137100E6D69
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U0HFJsbM70pCm9HnTGMszw4bsrY.roa
Signing time: Sat 22 Mar 2025 07:28:50 +0000
ROA not before: Sat 22 Mar 2025 07:28:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.7.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 04:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bc:c1:28:44:bf:06:07:33:f0:13:11:37:10:0e:6d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 22 07:28:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5341c526c6ccef4a429bd1e74c632ccf0e1bb2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:78:4a:36:35:4a:0b:60:3d:74:e7:70:46:
10:55:86:db:6a:fc:eb:6a:c0:5e:96:5f:59:2e:87:
ff:27:af:0a:a0:51:67:a3:34:15:98:06:f1:95:50:
c3:c7:d9:05:45:29:df:b2:49:dc:1c:5f:ca:f2:f0:
b4:3c:b3:af:46:b6:0e:8d:ed:dc:65:49:c4:ea:44:
34:31:e0:87:70:28:1f:f2:2c:de:98:09:0a:e8:c3:
d7:f0:ff:ab:8d:6d:bf:71:70:07:d9:7b:b1:dd:93:
e0:28:5d:ce:a6:c1:9d:79:16:3d:aa:f8:41:66:35:
5d:fe:91:b5:ae:83:76:75:07:39:65:b3:82:15:7d:
b3:00:92:66:9d:34:22:90:3d:bf:87:f9:61:4d:74:
ed:06:b8:f8:ff:3f:15:d6:5b:7d:df:b5:27:a0:a6:
e8:e2:77:2c:bc:52:49:aa:ff:6d:a6:9e:dd:6a:f1:
a4:65:a2:ee:19:c7:bb:48:0e:46:7e:11:a5:6f:d7:
4a:43:18:90:f7:bd:3c:d8:8a:38:c5:3a:8e:9f:c9:
0b:8e:de:73:f1:ad:9b:6a:6c:58:06:67:85:d7:b8:
5e:b5:63:57:1f:20:39:c3:68:24:0d:f5:77:35:09:
c9:af:15:8f:b1:c5:ed:c3:59:86:ec:e8:99:ff:7b:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:C5:26:C6:CC:EF:4A:42:9B:D1:E7:4C:63:2C:CF:0E:1B:B2:B6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U0HFJsbM70pCm9HnTGMszw4bsrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.70.0/24
5.231.82.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.7.0-89.144.8.255
89.144.16.0/24
89.144.25.0/24
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:10:c0:83:fd:5f:bc:86:e1:4b:2f:5c:25:17:f8:df:4c:4e:
f1:d8:ea:5b:b6:15:85:76:6c:6f:7d:d3:9c:16:fd:8e:9f:d5:
0c:8e:66:2b:15:b5:1b:01:7c:b0:7f:86:b8:34:53:e0:09:9e:
98:6e:c4:d2:a0:95:32:f9:45:ef:88:d5:fc:16:fe:21:4c:43:
f1:35:94:a0:0f:01:ec:5f:49:0a:6e:88:af:41:5d:5d:2a:ab:
27:4d:45:9b:48:0b:e4:33:74:24:15:68:19:70:fb:48:6e:04:
0f:b6:65:4f:7b:43:c5:da:05:b7:f0:e0:e3:94:b6:7e:18:b5:
8d:32:31:e2:22:e0:9d:1e:40:df:c2:2d:fd:ff:0d:27:b4:b3:
95:96:76:f9:d7:9b:5c:12:28:fb:aa:65:d3:d7:22:d6:67:da:
7e:bd:a6:4c:e4:8f:6b:6a:d6:f2:68:eb:f4:7e:35:b8:9e:14:
ca:39:5f:43:2d:08:fd:ca:d1:a2:56:09:95:98:83:3c:8e:74:
39:0b:c3:55:36:69:d7:04:1b:fa:8d:8e:00:fc:3d:ec:93:22:
85:fa:f0:d8:2e:32:23:ff:19:34:ee:16:77:7f:8f:07:9b:f3:
12:f0:33:e9:d6:15:0f:c2:9b:fb:51:f0:b0:ac:64:df:38:5d:
95:cc:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:18 2025 by rpki-client