Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZ8atGwRx_ki6RnP7plnz6oIKPM.roa
File: mZ8atGwRx_ki6RnP7plnz6oIKPM.roa (raw, json)
Hash identifier: uvhX/ivhK7Xr2EF3/xCHP2NATTSNVlMlw7ARXfhZwhg=
Subject key identifier: 99:9F:1A:B4:6C:11:C7:F9:22:E9:19:CF:EE:99:67:CF:AA:08:28:F3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195F84F6ECEF333AEF2A186D0F6B6EB12F7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZ8atGwRx_ki6RnP7plnz6oIKPM.roa
Signing time: Wed 02 Apr 2025 21:01:50 +0000
ROA not before: Wed 02 Apr 2025 21:01:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 04:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:4f:6e:ce:f3:33:ae:f2:a1:86:d0:f6:b6:eb:12:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 2 21:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=999f1ab46c11c7f922e919cfee9967cfaa0828f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:4d:e7:c5:56:8c:ca:ae:eb:5e:88:d5:71:
d1:6e:ec:55:c6:97:2e:20:b4:3a:ae:cb:29:c6:09:
bb:7d:7b:1c:06:36:00:5a:64:9f:cc:58:5b:6e:b0:
c6:ae:d3:c6:a7:74:93:d6:0d:6e:d4:93:a2:66:d9:
b5:3a:e3:0c:dd:f2:54:e6:54:80:7e:64:4d:bf:5c:
7d:57:a8:38:4f:11:74:d2:11:34:ec:c5:a6:15:54:
f7:2a:62:36:69:54:02:f0:21:db:2b:9f:57:93:0e:
8b:0e:d9:de:85:ad:b1:7d:7f:ab:ad:1a:a2:41:cb:
d3:3e:17:7d:0d:a8:23:33:44:2f:06:35:e8:6b:f2:
2e:72:26:3e:13:81:9f:d4:2f:a4:96:c6:2e:4d:f5:
c4:fd:4a:9c:3f:5d:bf:5d:a1:b9:f1:72:ca:5a:97:
27:9c:7c:89:15:a5:4c:bc:48:0e:20:07:ef:7e:2a:
2c:11:71:29:f8:12:86:41:14:fa:b6:8e:20:2f:15:
cf:f1:f8:a0:ea:20:5a:80:22:e9:8d:52:20:60:9c:
2c:69:29:4a:c1:e8:9b:34:61:e6:02:2e:95:5a:2e:
bd:21:c2:e8:c0:cf:12:b1:4c:64:2b:7a:24:bc:a9:
a6:f5:90:28:61:cc:9f:d4:ba:41:5e:f7:e0:82:72:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9F:1A:B4:6C:11:C7:F9:22:E9:19:CF:EE:99:67:CF:AA:08:28:F3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZ8atGwRx_ki6RnP7plnz6oIKPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
77.90.37.0/24
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:53:24:27:9b:0d:a0:54:96:ad:18:08:7e:30:16:22:93:f9:
5d:45:37:c1:72:42:8f:a5:0b:17:89:ec:3c:7f:48:d1:60:e5:
58:4f:44:43:51:69:39:76:1f:67:92:fc:5a:ea:74:4a:54:96:
21:6d:6f:ae:5f:9b:de:fc:91:b4:80:85:b9:e0:89:d8:9d:e9:
fd:bb:fa:8d:46:10:17:02:11:91:05:62:94:b3:24:25:6a:ea:
27:8e:31:ac:7d:ad:6e:cc:02:cc:fd:88:c2:cd:6c:c8:17:2a:
a2:fe:b7:a1:f5:53:49:b4:6f:ec:37:72:a7:74:ff:a1:08:58:
dc:33:37:ce:42:6f:aa:0b:5e:3e:3b:5f:9b:df:71:6d:b6:5f:
a5:96:f9:a1:ae:5b:4e:52:a4:9c:97:29:3e:60:3b:ed:48:c4:
b4:66:99:6e:82:43:2e:f3:56:d4:5b:5c:76:bd:f5:f1:20:70:
ed:21:7b:18:b9:d6:fc:e5:f4:d5:d1:b8:06:93:9a:f7:4c:a5:
61:5b:43:45:46:90:9e:0c:ed:7e:aa:ba:f5:e3:59:65:6b:a8:
cf:eb:6d:ab:7d:4e:ee:de:cd:cb:63:d9:ce:4b:3d:57:9d:e8:
90:fd:da:38:a2:c8:71:06:3b:80:69:ee:2c:ae:ed:f5:c9:4e:
6a:85:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:56 2025 by rpki-client