Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X-4LuNosqmhD91pdfHVVAQ7BZH8.roa
File: X-4LuNosqmhD91pdfHVVAQ7BZH8.roa (raw, json)
Hash identifier: D2PQxjwJxC+ojTUTVjQLXGwKPcSIOUMwG3ofqYsKVVs=
Subject key identifier: 5F:EE:0B:B8:DA:2C:AA:68:43:F7:5A:5D:7C:75:55:01:0E:C1:64:7F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019928F0F68328743BF9266AC5BCF837ED74
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X-4LuNosqmhD91pdfHVVAQ7BZH8.roa
Signing time: Mon 08 Sep 2025 10:48:24 +0000
ROA not before: Mon 08 Sep 2025 10:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.128.0/24 maxlen: 24
5.83.131.0/24 maxlen: 24
5.83.132.0/24 maxlen: 24
5.83.134.0/24 maxlen: 24
5.83.138.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.224.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.80.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
77.90.27.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.106.84.0/24 maxlen: 24
89.106.85.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
89.144.61.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.103.171.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.177.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Sep 2025 04:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:f0:f6:83:28:74:3b:f9:26:6a:c5:bc:f8:37:ed:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 8 10:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fee0bb8da2caa6843f75a5d7c7555010ec1647f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:20:0c:ed:68:06:73:7e:0b:5d:b4:52:0c:
27:3a:c5:40:2f:42:f1:ae:1e:9a:7e:2e:ac:0f:73:
a8:13:4b:12:0d:89:1e:9c:57:a9:31:13:09:0c:c8:
bc:7f:92:83:2d:9c:c4:36:59:5e:a9:cd:64:60:d3:
65:53:3c:97:81:dd:f1:fb:d6:63:6e:72:f0:bc:f4:
c6:30:60:c4:a5:b8:00:5a:ac:45:c5:9b:29:94:92:
14:92:d4:53:30:97:a9:ed:a2:1f:c4:a8:51:1d:58:
cf:42:bc:7c:63:06:a6:25:b2:b6:79:94:10:38:fa:
7b:4d:60:f7:03:75:9c:c7:e6:17:07:aa:26:51:78:
ad:dc:5b:46:4a:ea:cf:1c:d6:ec:9c:eb:6c:7e:d5:
62:e3:44:65:44:97:08:81:ec:74:92:f0:06:f6:10:
02:87:87:d0:d4:94:2e:7f:be:8b:13:79:e7:a7:30:
11:d5:ea:5d:16:d9:01:0f:4f:b3:fd:de:97:4f:a0:
b4:44:53:18:74:9f:71:6d:93:95:c5:e9:a3:86:a8:
1b:3a:68:e8:7b:fc:c0:c5:85:d8:bf:3d:d8:f3:60:
00:84:60:62:6b:22:54:7b:a0:79:da:12:02:66:45:
2f:c2:6b:38:8f:38:6c:3c:06:28:dd:cc:8a:a3:f4:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:0B:B8:DA:2C:AA:68:43:F7:5A:5D:7C:75:55:01:0E:C1:64:7F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X-4LuNosqmhD91pdfHVVAQ7BZH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/24
5.83.131.0-5.83.132.255
5.83.134.0/24
5.83.138.0/24
5.175.140.0/24
5.175.192.0/24
5.175.224.0/24
5.231.61.0/24
5.231.79.0-5.231.80.255
5.231.94.0/24
77.90.27.0/24
85.93.5.0/24
89.106.75.0-89.106.76.255
89.106.84.0/23
89.144.25.0/24
89.144.31.0/24
89.144.60.0/23
94.103.170.0/23
94.103.173.0-94.103.174.255
94.249.148.0/24
94.249.158.0/24
94.249.177.0/24
94.249.229.0/24
95.215.33.0/24
178.18.144.0/24
185.13.159.0/24
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:7b:9c:c2:24:c8:4f:a7:7f:ed:a9:07:29:46:1b:d6:d2:75:
5a:46:d0:1b:9a:94:95:19:7b:0f:45:d6:a1:ac:ca:64:6b:eb:
00:c2:11:1b:2f:ea:55:8c:9b:5f:fc:4f:07:30:d4:57:f2:6a:
69:e9:35:2a:07:b6:50:09:46:bf:fd:9d:ab:71:a7:ab:5a:11:
61:c2:8c:c4:0e:de:c3:03:dc:65:63:49:9b:1a:ed:33:21:fd:
16:11:08:7e:f5:9f:2f:ce:24:a0:ff:87:47:dc:96:3f:f8:66:
e6:d1:ea:08:95:ff:89:7e:9b:65:21:26:dd:4b:b2:78:70:98:
65:05:1e:42:8d:1f:8d:68:f4:88:fa:e4:06:e5:8c:fe:cf:74:
5d:85:24:e3:91:5b:b5:56:a9:d1:83:6d:55:36:1b:6b:c6:72:
e2:be:9a:b9:b7:15:ac:0d:97:29:5a:47:7f:46:a4:86:0a:f0:
67:13:7a:5f:4f:7d:ba:4d:bd:57:d0:8d:e8:81:67:67:8d:28:
d5:87:8c:a8:22:73:24:92:48:24:9d:af:62:4d:dc:1b:65:3e:
43:41:38:be:e3:ea:9e:73:d7:be:71:38:d8:87:f1:97:7f:64:
54:04:8c:c1:28:b1:5d:cf:83:1b:28:33:45:94:00:94:f7:3b:
41:94:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:13:38 2025 by rpki-client