Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cN70d7Z8214D-4Ld9S9gQTRIZl0.roa
File: cN70d7Z8214D-4Ld9S9gQTRIZl0.roa (raw, json)
Hash identifier: V/OV4MFtPRpoWkCdvJ5+2bATuH9SxOGJmmDstTQ2CNQ=
Subject key identifier: 70:DE:F4:77:B6:7C:DB:5E:03:FB:82:DD:F5:2F:60:41:34:48:66:5D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195A5622F61526FC1FFE2B5322E2683D5F1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cN70d7Z8214D-4Ld9S9gQTRIZl0.roa
Signing time: Mon 17 Mar 2025 18:33:50 +0000
ROA not before: Mon 17 Mar 2025 18:33:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 05:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:62:2f:61:52:6f:c1:ff:e2:b5:32:2e:26:83:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 17 18:33:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70def477b67cdb5e03fb82ddf52f60413448665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:69:23:26:ba:92:90:fd:c1:e3:9a:57:07:
9d:ed:31:ba:9b:26:3c:b1:36:02:51:fb:d2:1c:75:
d0:91:78:2b:b2:06:62:e8:89:81:70:43:72:d5:dd:
2f:53:a9:30:00:6f:df:e4:ed:28:c2:97:7c:cc:93:
61:16:8f:7e:4b:f8:52:45:ca:bb:46:b0:43:4d:4c:
5c:9c:5c:b5:8b:81:0f:2b:1b:c4:fb:7d:6a:12:fe:
0a:03:8a:ac:7a:a2:54:25:bb:6a:b0:32:bd:5e:f9:
19:f5:bd:bb:e8:68:a5:61:c9:44:52:06:90:29:f5:
f5:c6:1d:a0:09:81:38:48:5c:fe:25:c7:9a:f1:0c:
45:71:64:01:06:be:e0:c0:3a:cd:de:06:e6:39:d8:
91:9d:fd:d5:33:d8:0d:59:66:91:71:2a:54:a9:43:
0a:a6:03:c6:4b:1f:f1:24:00:5a:01:cc:0d:c2:b7:
5c:c4:7f:82:77:04:6c:27:db:23:67:f6:32:6b:36:
35:2f:a1:b7:e2:74:fd:0e:59:bc:cb:64:a2:2c:37:
fb:6f:c3:a8:08:e7:a1:f0:23:d0:e8:95:79:f0:7e:
bb:78:b1:ec:32:6d:8f:47:63:7a:a6:ef:a6:76:ff:
55:c3:37:a0:28:c6:a8:02:91:b0:c2:6c:bf:5d:41:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:F4:77:B6:7C:DB:5E:03:FB:82:DD:F5:2F:60:41:34:48:66:5D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cN70d7Z8214D-4Ld9S9gQTRIZl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.103.163.0/24
94.249.195.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f8:45:3d:fe:37:fb:7a:97:72:47:b2:c9:13:95:f0:c2:cb:
fb:0a:d0:25:ac:4f:b3:ca:15:78:32:6e:a1:26:19:48:d3:7c:
87:5d:00:a4:66:89:73:70:ad:c6:a7:73:ea:3c:45:70:ea:8a:
30:6d:8d:d0:9f:40:42:6b:57:23:34:9d:c4:b5:39:dc:62:27:
03:8f:95:52:66:20:eb:84:67:ba:3d:83:e1:75:e6:bc:bc:02:
89:96:e8:85:f4:89:99:33:62:36:e0:cb:8e:4a:2d:02:08:48:
49:70:dd:c5:3b:ba:01:dd:38:c0:7b:12:a4:45:e4:01:d8:d9:
f6:e4:33:99:28:f1:8e:45:75:39:15:bd:38:a2:59:29:06:2b:
52:d6:a0:3e:18:ee:39:b3:ca:ca:da:c8:fa:bd:96:49:42:35:
dd:da:06:0f:32:d3:3e:e2:de:60:1c:02:7f:6e:21:49:22:88:
e5:ff:a1:59:4a:df:a5:c7:75:2d:93:0f:57:2e:73:6c:56:16:
5f:59:5c:97:b6:49:5d:32:b1:82:7f:cc:e9:9d:84:b2:ed:49:
8e:c9:45:03:6e:4c:25:40:82:3b:a3:cf:03:77:6b:c1:f8:3f:
64:7b:ba:54:3d:63:fb:6e:15:25:71:7a:53:e9:c8:21:4d:f4:
e1:9f:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:27:59 2025 by rpki-client