Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bLCgO6Oup0Q6M-ldyJhaXN8iEQk.roa
File: bLCgO6Oup0Q6M-ldyJhaXN8iEQk.roa (raw, json)
Hash identifier: H7DlhYzSynGykvRXfSuu/7OtPaDMW/CuFen3ObiOlYQ=
Subject key identifier: 6C:B0:A0:3B:A3:AE:A7:44:3A:33:E9:5D:C8:98:5A:5C:DF:22:11:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422201A9992395A179CE83199013E06AD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bLCgO6Oup0Q6M-ldyJhaXN8iEQk.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 19:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1a:99:92:39:5a:17:9c:e8:31:99:01:3e:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cb0a03ba3aea7443a33e95dc8985a5cdf221109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:ad:7d:bc:ef:6d:7d:c9:61:f8:05:c0:47:
86:ee:ec:7e:86:6d:0b:da:00:7c:93:5b:cf:15:d7:
eb:10:b4:e8:9c:cb:bc:27:7a:6d:aa:22:2f:17:5c:
43:4a:e9:86:19:5b:6f:69:f9:bb:b3:e7:62:ab:d3:
11:7e:09:e8:fb:08:e1:49:39:11:7b:a3:6f:33:c8:
ee:9a:78:6e:f6:57:8c:16:c6:ed:5c:16:5c:28:2a:
aa:87:e4:2c:a9:5a:11:ac:00:3b:a0:ee:15:58:1e:
4a:e3:9f:ea:05:9e:db:c9:a0:6b:68:5d:22:c9:eb:
fe:1e:61:13:c7:77:9f:b3:4a:31:a6:e3:75:2e:12:
5c:f8:e6:0b:1d:39:f6:57:a1:c1:7e:2a:22:f9:fe:
0d:ef:7a:72:4e:ed:e7:5c:1a:4c:42:6c:55:02:ff:
f1:57:8d:aa:12:fd:fc:37:54:04:05:a1:1e:f9:0c:
56:8e:51:08:b7:d9:ef:70:f8:29:bb:cd:f2:40:1a:
0e:ff:d2:a3:3b:a0:80:4e:da:94:c3:3c:fe:92:02:
b4:83:f6:39:a4:2d:1e:8b:d1:fd:c0:f0:8b:b6:01:
44:47:83:a9:91:95:cd:f4:be:36:40:e7:ba:89:43:
e1:69:22:cc:c6:56:75:30:11:8c:b9:cc:bd:17:9e:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:A0:3B:A3:AE:A7:44:3A:33:E9:5D:C8:98:5A:5C:DF:22:11:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bLCgO6Oup0Q6M-ldyJhaXN8iEQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.231.28.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
Signature Algorithm: sha256WithRSAEncryption
79:52:dd:88:3a:5c:f0:73:5b:a4:a0:c1:58:94:d5:d8:8d:40:
28:4c:0c:2b:be:3c:10:7e:00:74:89:65:64:27:90:12:a3:a4:
67:02:a7:02:f1:47:19:31:3a:ad:82:a7:ac:83:88:03:84:34:
03:f6:38:5a:b9:c6:65:e0:c9:20:4d:f2:14:24:3b:a1:15:7e:
ed:42:11:82:31:f2:52:48:7c:eb:c0:c1:00:52:73:0d:5d:98:
a3:22:1a:13:f1:c7:0b:cd:72:7e:6d:b8:37:ca:36:e2:12:fd:
e7:9e:e2:60:96:db:00:2b:ae:2f:da:55:3e:40:6f:55:2e:2a:
73:08:fd:c5:06:33:d4:a7:09:37:81:0d:c2:f5:e1:75:71:27:
13:03:d8:0f:19:90:fb:8f:e9:77:0f:e8:bb:62:a3:94:82:c6:
66:37:36:1c:f9:dc:75:bb:12:56:6f:a9:80:45:93:76:d2:42:
f3:80:72:26:2c:e4:0d:15:8f:57:a8:58:7a:ec:4e:27:60:27:
bb:31:2c:a1:af:21:12:dc:14:6e:4d:c3:20:92:9b:23:2f:e7:
88:94:78:19:18:ed:0b:13:e3:7c:0e:2c:79:8e:94:94:2f:2d:
ce:f8:ea:d2:44:d8:44:74:a6:97:b2:17:a1:ac:73:06:2c:43:
6a:b7:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:58 2025 by rpki-client