Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lPh4ZxOk_55nkoUg0Un7PfTQV2w.roa
File: lPh4ZxOk_55nkoUg0Un7PfTQV2w.roa (raw, json)
Hash identifier: bQKvp+Yf1qKJ63397cp+PqkLs9A95tySIUMBMuSv32g=
Subject key identifier: 94:F8:78:67:13:A4:FF:9E:67:92:85:20:D1:49:FB:3D:F4:D0:57:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01972F0B9AAA75D0FBE30B6703645D89D03D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lPh4ZxOk_55nkoUg0Un7PfTQV2w.roa
Signing time: Mon 02 Jun 2025 05:09:38 +0000
ROA not before: Mon 02 Jun 2025 05:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.231.70.0/24 maxlen: 24
5.231.203.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
85.93.6.0/24 maxlen: 24
85.93.22.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
94.103.168.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 20:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:0b:9a:aa:75:d0:fb:e3:0b:67:03:64:5d:89:d0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 05:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f8786713a4ff9e67928520d149fb3df4d0576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:4e:72:58:b7:37:ee:3e:7a:ec:bf:c5:1f:
fb:50:83:cf:0d:1d:47:e9:7f:c9:33:07:13:f9:18:
e7:e3:16:41:72:57:da:4e:a8:21:ee:a2:40:a0:87:
14:9d:0f:86:b7:97:ad:68:0c:82:e4:71:aa:ce:94:
52:49:0a:6b:f9:c0:80:86:2e:e4:21:11:fa:a8:b4:
a8:d5:ff:d3:91:b0:47:81:47:51:e8:4e:7d:91:10:
1e:e9:26:cd:9c:e9:22:81:32:a5:3f:a6:0e:da:b3:
24:0e:04:77:b1:6f:15:4b:78:5e:fb:3e:19:89:8c:
e0:47:98:87:22:10:16:a0:78:c2:d5:4d:ea:54:72:
bb:b3:8f:dd:57:c0:7f:16:dd:2a:8e:d6:44:a2:ad:
62:b6:72:e5:cc:97:62:2d:8b:09:19:76:26:12:67:
6f:10:bc:c4:34:b1:4a:13:3c:ff:9f:50:66:bd:f7:
42:da:e0:fd:42:7a:18:87:5c:ea:51:49:4d:3e:5d:
8b:23:d2:28:b0:50:8f:c2:4a:ca:2a:b5:77:ca:0a:
3b:ae:b1:ec:77:bc:88:86:2f:52:ca:3a:42:76:7b:
dc:72:30:33:9e:37:a7:1d:e6:47:94:bd:bf:dc:98:
ab:2f:ac:01:f4:90:85:db:ec:c9:6e:60:7c:63:dd:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:78:67:13:A4:FF:9E:67:92:85:20:D1:49:FB:3D:F4:D0:57:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lPh4ZxOk_55nkoUg0Un7PfTQV2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.70.0/24
5.231.203.0/24
5.231.234.0/24
77.90.22.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
85.93.1.0/24
85.93.6.0/24
85.93.22.0/24
89.144.14.0/24
89.144.16.0-89.144.18.255
89.144.25.0/24
89.144.35.0/24
94.103.168.0/24
94.249.153.0/24
94.249.158.0/24
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b3:ac:21:0f:1c:9d:01:f3:e8:39:5f:29:98:6f:9b:67:25:
bf:9e:6a:a1:f2:c6:bb:1a:40:62:20:03:4f:70:8d:de:bb:90:
69:aa:25:b5:f8:67:dd:a3:57:83:c4:08:d6:6b:a4:3c:aa:22:
26:43:f7:52:20:de:93:5f:ff:8d:89:44:78:09:98:5d:4b:1b:
82:95:0f:c9:bb:a6:10:c8:c9:92:cc:ce:9f:25:e4:0f:d3:65:
13:0e:21:dd:4a:13:e3:2c:98:ca:35:26:46:26:e2:39:47:7a:
6d:2c:6a:79:c1:74:17:09:15:f6:85:e8:4d:af:ab:1a:8e:c3:
3a:40:44:6f:30:15:a6:a0:d9:64:11:2f:64:54:ac:cd:2e:6f:
28:79:59:94:0e:20:86:b3:13:7d:e8:81:d6:c8:0c:9a:c2:17:
1e:3e:e6:8a:db:db:a3:48:87:24:23:c5:a3:ae:d4:56:ed:c0:
31:a0:64:dd:0c:2d:49:e1:e6:92:5f:0c:69:36:66:27:31:80:
72:88:57:59:89:58:88:20:4c:33:8d:ff:8b:04:ba:27:f4:53:
ae:7d:47:fb:55:76:d0:fd:fd:40:83:9f:7b:6c:24:dd:5f:f9:
e4:4d:98:39:d9:0f:c8:16:b2:e4:3e:00:ca:f6:ec:89:6f:df:
eb:ac:69:3b
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZcvC5qqddD74wtnA2RdidA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjAyMDUwOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGY4Nzg2NzEzYTRmZjllNjc5Mjg1MjBkMTQ5ZmIzZGY0ZDA1NzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NOcli3N+4+euy/xR/7UIPPDR1H
6X/JMwcT+Rjn4xZBclfaTqgh7qJAoIcUnQ+Gt5etaAyC5HGqzpRSSQpr+cCAhi7k
IRH6qLSo1f/TkbBHgUdR6E59kRAe6SbNnOkigTKlP6YO2rMkDgR3sW8VS3he+z4Z
iYzgR5iHIhAWoHjC1U3qVHK7s4/dV8B/Ft0qjtZEoq1itnLlzJdiLYsJGXYmEmdv
ELzENLFKEzz/n1BmvfdC2uD9QnoYh1zqUUlNPl2LI9IosFCPwkrKKrV3ygo7rrHs
d7yIhi9SyjpCdnvccjAznjenHeZHlL2/3JirL6wB9JCF2+zJbmB8Y90WpwIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFJT4eGcTpP+eZ5KFINFJ+z300FdsMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbFBoNFp4T2tfNTVua29VZzBVbjdQZlRRVjJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAAXnRgME
AAXnywMEAAXn6gMEAE1aFgMEAE1aKQMEAE1aNAMEAE1aOgMEAFVdAQMEAFVdBgME
AFVdFgMEAFmQDjAMAwQEWZAQAwQAWZASAwQAWZAZAwQAWZAjAwQAXmeoAwQAXvmZ
AwQAXvmeAwQAshKTMA0GCSqGSIb3DQEBCwUAA4IBAQBPs6whDxydAfPoOV8pmG+b
ZyW/nmqh8sa7GkBiIANPcI3eu5BpqiW1+Gfdo1eDxAjWa6Q8qiImQ/dSIN6TX/+N
iUR4CZhdSxuClQ/Ju6YQyMmSzM6fJeQP02UTDiHdShPjLJjKNSZGJuI5R3ptLGp5
wXQXCRX2hehNr6sajsM6QERvMBWmoNlkES9kVKzNLm8oeVmUDiCGsxN96IHWyAya
whcePuaK29ujSIckI8WjrtRW7cAxoGTdDC1J4eaSXwxpNmYnMYByiFdZiViIIEwz
jf+LBLon9FOufUf7VXbQ/f1Ag597bCTdX/nkTZg52Q/IFrLkPgDK9uyJb9/rrGk7
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:23:01 2025 by rpki-client