Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YcxfJRq_xWB_R48RW_hgydDwHsA.roa
File: YcxfJRq_xWB_R48RW_hgydDwHsA.roa (raw, json)
Hash identifier: DqPHUO1ziXhFynNeLgt8GYpRfZDdGLOvWj3unfLtA6U=
Subject key identifier: 61:CC:5F:25:1A:BF:C5:60:7F:47:8F:11:5B:F8:60:C9:D0:F0:1E:C0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197323CD9977D344F51A48268F01CDD5196
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YcxfJRq_xWB_R48RW_hgydDwHsA.roa
Signing time: Mon 02 Jun 2025 20:02:18 +0000
ROA not before: Mon 02 Jun 2025 20:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.231.70.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.93.6.0/24 maxlen: 24
85.93.22.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.103.168.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 04:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:3c:d9:97:7d:34:4f:51:a4:82:68:f0:1c:dd:51:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 20:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61cc5f251abfc5607f478f115bf860c9d0f01ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:84:59:23:82:dc:3e:ab:23:f9:2b:7b:b0:
37:a8:47:52:d6:ae:a0:a2:ce:1e:fa:d1:e0:51:c7:
c2:22:c2:ba:53:1f:e9:32:1d:db:6a:4f:5d:d9:0e:
bb:1a:06:98:c4:55:b9:2d:16:ff:6f:ff:f7:33:e0:
d0:27:2d:5d:2b:f8:82:25:4d:52:1e:e1:29:25:55:
df:c3:a9:99:8b:d0:e9:dc:cd:51:1b:03:e9:8d:bc:
6b:7e:76:52:57:27:c3:8a:05:8b:80:6a:a6:49:b9:
cb:f9:65:52:2e:cf:06:ae:4b:65:18:d4:79:15:0d:
41:ca:2c:87:eb:e8:48:67:07:1d:57:f8:7d:08:b2:
31:00:5c:b1:dc:75:8e:18:71:27:6e:a8:3c:e5:57:
67:59:f0:be:24:96:0f:91:a7:3e:8e:36:c6:e9:85:
31:f7:bd:50:40:79:e6:9f:6a:85:85:6a:b3:f4:ca:
83:ad:fe:f9:28:cf:25:02:30:ee:c8:03:f1:7c:86:
0e:c8:7d:a8:57:82:ea:e8:76:cf:f2:39:d4:cb:27:
4f:05:b9:9f:b3:29:c0:a2:fa:50:eb:09:fa:ba:28:
b1:0b:f1:72:ae:a6:0a:ea:aa:d9:50:d2:2f:26:10:
f2:c3:96:57:a6:5b:30:c5:6d:2c:4b:04:90:33:36:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:5F:25:1A:BF:C5:60:7F:47:8F:11:5B:F8:60:C9:D0:F0:1E:C0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YcxfJRq_xWB_R48RW_hgydDwHsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.70.0/24
5.231.203.0/24
5.231.234.0/24
77.90.22.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
85.93.1.0/24
85.93.6.0/24
85.93.22.0/24
89.144.14.0/24
89.144.16.0-89.144.18.255
89.144.25.0/24
89.144.35.0/24
94.103.168.0/24
94.249.153.0/24
94.249.158.0/24
178.18.147.0/24
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3e:ae:fb:4a:b5:10:62:c6:01:69:37:04:4e:87:cf:c7:29:
a1:8b:32:29:d8:1d:a3:a7:2b:1d:64:b5:b2:b9:6a:7b:4c:95:
0d:85:84:33:5b:98:12:d0:81:aa:59:5a:bc:37:26:e1:09:f0:
18:af:ab:6d:21:62:e4:b3:65:ef:fd:f6:3c:08:f3:61:d2:10:
d2:97:f6:ff:1e:bc:9c:bf:8f:f8:6e:10:ae:fc:a5:02:34:4c:
47:32:73:3f:10:a6:d4:6e:78:a5:58:e8:d4:af:20:e9:ea:70:
bf:d9:62:7b:ea:bc:67:c3:3e:8e:34:37:6c:de:68:0b:d3:d5:
31:8e:00:c1:6e:56:11:2f:c6:27:4b:a4:82:24:1f:b0:70:94:
47:7c:e6:b6:d2:31:26:02:e8:2f:03:b3:1d:a3:7c:ee:7a:da:
56:7d:54:58:d5:65:bd:90:41:49:f6:e6:76:00:e0:1a:58:3e:
24:83:1f:6d:2d:4c:f7:ea:14:03:79:95:6b:b7:1e:11:44:a7:
76:02:1b:3c:68:e8:a0:5a:be:b8:4a:56:74:b5:f5:14:64:a3:
6e:fb:16:46:78:2a:d9:19:ea:1b:db:8d:b6:81:f8:ac:71:48:
01:ae:81:49:ec:69:cb:c4:8c:2e:e4:32:2d:f4:1d:da:b4:35:
d1:7e:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:42:41 2025 by rpki-client