Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X4yOd6bfGCrFjCfctVTpo3k6954.roa
File: X4yOd6bfGCrFjCfctVTpo3k6954.roa (raw, json)
Hash identifier: zYu8tHEcVlV7ks1/z8zsBjiLAHdz0LBDLGqtmnHi73E=
Subject key identifier: 5F:8C:8E:77:A6:DF:18:2A:C5:8C:27:DC:B5:54:E9:A3:79:3A:F7:9E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019555406BCFE9167C1229276AB52E6094F9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X4yOd6bfGCrFjCfctVTpo3k6954.roa
Signing time: Sun 02 Mar 2025 05:07:20 +0000
ROA not before: Sun 02 Mar 2025 05:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 06:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:40:6b:cf:e9:16:7c:12:29:27:6a:b5:2e:60:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 05:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f8c8e77a6df182ac58c27dcb554e9a3793af79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:61:de:cb:b6:9e:ba:4d:be:ec:1b:59:f2:
09:80:41:e4:d5:26:53:f1:a6:1b:aa:ec:02:ec:17:
7d:6d:ac:40:0f:ed:f7:d8:b1:7d:73:39:01:d7:20:
fc:91:1b:85:7d:44:13:1f:92:b4:58:ca:2a:a7:f2:
21:92:72:46:5e:86:96:53:d8:28:51:61:44:41:b3:
83:ad:bb:bb:51:46:51:60:82:b9:d0:21:60:10:e7:
2f:cf:f1:c8:4a:55:9c:66:ee:f6:50:7f:8c:18:3a:
5d:f5:12:14:d6:77:b7:ac:c6:84:0b:3b:56:f9:b0:
67:35:72:3e:55:36:fa:78:7a:43:bc:1a:0b:22:6e:
23:f1:c5:8e:cd:0c:f3:1d:4a:ba:c1:01:69:09:32:
18:54:11:50:c7:b8:90:f3:45:38:1b:74:1e:f9:1a:
ad:43:77:26:d9:13:27:dd:d8:5f:b2:5b:86:aa:64:
72:3f:89:d0:7b:f1:4a:2b:fe:4c:00:19:57:bf:34:
c7:30:bb:54:a7:d7:64:ef:3e:8d:b2:3c:7b:a4:75:
ef:cb:5b:31:8f:39:da:cd:f5:82:19:32:b3:3c:1a:
4d:d5:9c:57:dc:b7:c5:4f:ea:b6:44:ce:95:cb:56:
f8:8b:a2:7c:fb:a9:05:0a:89:75:c8:6c:d2:2d:fb:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:8E:77:A6:DF:18:2A:C5:8C:27:DC:B5:54:E9:A3:79:3A:F7:9E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X4yOd6bfGCrFjCfctVTpo3k6954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.140.0/24
5.175.142.0/24
5.175.220.0/24
5.231.79.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.58.0/24
85.118.162.0/24
87.239.130.0/24
89.106.70.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
94.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1b:e6:f2:6e:07:dd:49:e9:36:2a:da:b1:6f:ac:29:af:51:
c8:63:20:33:03:cf:d0:46:b8:27:4b:30:54:0b:1d:c3:ac:7a:
e9:7c:3c:0f:02:8e:17:ea:29:36:7d:d2:1d:02:88:d6:ae:78:
4f:9e:db:73:b5:16:e8:8b:1d:f2:ff:d3:03:a4:95:82:9f:0d:
ab:6e:1d:6e:0d:41:f6:f0:fc:64:a4:db:b4:0c:5b:e8:cc:a8:
a7:6b:83:30:41:f5:12:14:05:35:2c:21:87:0a:f1:ff:46:c0:
e2:89:67:a8:f2:97:f1:30:e8:6c:c8:91:0d:47:9a:01:64:d0:
0b:17:b4:cd:ef:6f:0e:33:af:28:7b:b8:69:06:eb:36:ab:4c:
3c:3a:cd:50:62:9a:8f:fa:96:fd:28:5d:ac:97:7b:6e:2f:43:
58:5b:d8:b7:b8:36:c7:d5:8d:1f:8a:3c:45:9b:ac:db:98:3c:
b8:30:3a:e1:79:39:7e:f6:52:47:47:c0:7d:57:28:b9:b8:bf:
ca:4b:d5:33:a3:54:53:2f:ae:ca:28:e8:f3:bd:85:22:9a:47:
f5:83:0c:74:6a:15:9d:09:84:0b:08:7b:b3:c7:77:49:d6:46:
d9:26:94:b0:6b:ad:9f:b9:cc:19:64:f8:77:dd:fc:cb:84:23:
dd:d3:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:23 2025 by rpki-client