Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n_vnGQJTjNV6rp38sX2Oqj4_sQ0.roa
File: n_vnGQJTjNV6rp38sX2Oqj4_sQ0.roa (raw, json)
Hash identifier: SVkvrfpJ1tOfA6XmsUl5P/zr0z8B8gZzoxc3PE2Q8lo=
Subject key identifier: 9F:FB:E7:19:02:53:8C:D5:7A:AE:9D:FC:B1:7D:8E:AA:3E:3F:B1:0D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01955586ECDC7C0C92D9BFE49EEECA17D9A2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n_vnGQJTjNV6rp38sX2Oqj4_sQ0.roa
Signing time: Sun 02 Mar 2025 06:24:20 +0000
ROA not before: Sun 02 Mar 2025 06:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 05:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:86:ec:dc:7c:0c:92:d9:bf:e4:9e:ee:ca:17:d9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 06:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ffbe71902538cd57aae9dfcb17d8eaa3e3fb10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:23:9d:8b:dc:8e:4b:6e:e3:f4:9a:90:69:
40:71:10:93:30:7f:8e:cc:61:8c:3e:71:c8:91:d7:
3f:a3:71:3f:a8:5e:b3:80:f4:3c:a0:36:01:0b:69:
86:9d:6a:bd:f5:06:30:da:2d:9b:f7:c9:0c:e7:81:
07:50:62:1f:5d:64:65:a5:b8:35:3d:14:c4:12:3f:
ff:81:63:53:3b:31:42:bc:ed:7e:e1:fb:04:fa:44:
62:71:81:e1:3a:f6:fa:cd:f3:71:07:5d:a1:16:53:
49:0a:23:f0:1d:a1:2d:50:f3:da:26:75:4e:83:b0:
8c:06:58:39:43:66:3c:d5:8a:3b:93:6d:93:83:39:
12:d1:b3:64:a4:02:1c:d0:f9:10:f3:85:72:e2:4c:
cd:3b:4c:ae:97:1d:15:fb:2c:2d:64:ab:46:4d:38:
1b:26:99:ca:85:4a:a5:13:e7:77:e3:fb:36:1c:69:
c0:94:10:73:73:d9:58:ce:1d:48:3e:0c:dc:9b:50:
ef:ee:f1:ec:e1:5a:65:15:82:98:58:14:a3:97:99:
76:74:b4:34:a1:db:e2:46:e4:03:26:8d:dd:32:0c:
4e:77:3d:c4:8d:41:d4:17:f2:2b:03:e9:36:8c:81:
61:22:d6:df:ab:4d:f3:29:74:f7:7c:01:78:a6:e8:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:E7:19:02:53:8C:D5:7A:AE:9D:FC:B1:7D:8E:AA:3E:3F:B1:0D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/n_vnGQJTjNV6rp38sX2Oqj4_sQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.140.0/24
5.175.142.0/24
5.175.220.0/24
5.231.79.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
85.118.162.0/24
87.239.130.0/24
89.106.70.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
94.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a5:d8:3e:a8:9e:9b:9c:7d:ca:1d:a1:0b:46:d7:f9:4c:5e:
e4:d0:69:96:ba:4b:2d:64:84:f8:97:f5:92:ee:fb:5b:44:4e:
39:e1:4c:0e:47:64:7a:76:df:09:fd:00:53:26:8a:c4:8f:b6:
5f:78:45:6e:d3:7f:4e:b9:04:a8:ae:74:32:53:1a:41:15:19:
a9:f0:1e:03:ea:54:c5:f0:bb:3b:b8:ad:85:d6:d8:cd:c8:4f:
b0:37:08:11:7f:ae:d1:24:3a:94:8f:77:bd:56:52:dd:16:64:
52:bb:7c:38:24:4b:1f:82:c2:66:39:99:af:4b:5d:88:e9:6d:
aa:90:38:c5:22:4c:7f:28:95:21:67:3b:52:1e:3d:ab:f9:ab:
60:44:b6:29:82:2e:72:4b:2b:87:8f:28:da:90:80:85:b8:82:
da:19:67:ae:37:e5:e4:bf:04:ea:7a:61:cc:14:c2:7c:b1:64:
55:8f:0b:59:73:70:21:4f:cd:90:71:6f:2c:cc:55:7c:07:ce:
0b:f3:a7:1c:84:19:9f:0e:6d:18:f8:c2:09:e5:18:9a:31:d1:
a7:27:d5:33:b4:a2:d3:b9:a7:da:94:cb:c8:b5:3d:40:82:a9:
54:dd:de:04:e7:f5:ac:52:3d:27:5d:8a:9a:e2:98:9c:43:11:
85:dc:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:25 2025 by rpki-client