Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oLEjyPluyahiaXD688WFZPviouk.roa
File: oLEjyPluyahiaXD688WFZPviouk.roa (raw, json)
Hash identifier: pAGO4z6Y6tJaO1IC1vcYTuknQ2NDhSc0aRbo9GXT7uA=
Subject key identifier: A0:B1:23:C8:F9:6E:C9:A8:62:69:70:FA:F3:C5:85:64:FB:E2:A2:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019519461329915DCDF8E100F97583E62222
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oLEjyPluyahiaXD688WFZPviouk.roa
Signing time: Tue 18 Feb 2025 13:36:17 +0000
ROA not before: Tue 18 Feb 2025 13:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 11:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:46:13:29:91:5d:cd:f8:e1:00:f9:75:83:e6:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 18 13:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0b123c8f96ec9a8626970faf3c58564fbe2a2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:78:4f:3c:5e:38:df:29:10:14:e6:e0:83:
e7:eb:14:b2:dd:c2:61:f3:02:70:3c:87:01:c9:1a:
58:e5:ee:a8:00:3d:c9:27:eb:0a:ac:da:d3:cf:b2:
f8:d3:8c:4e:8d:fc:da:be:c5:7b:25:19:cc:58:0d:
eb:11:fe:5c:2e:4e:c6:3f:c7:8e:0e:5e:a2:76:14:
2e:1d:37:ef:2b:4f:fb:7d:5f:95:5c:93:f9:a8:94:
59:50:47:28:70:ef:eb:e9:1e:cd:85:b3:ae:25:e8:
17:27:d9:04:98:3e:af:2f:f6:a1:fa:61:65:67:b3:
58:2c:7a:79:24:3c:99:2c:95:fb:79:80:aa:a4:7e:
bb:5b:aa:82:3d:c6:c6:09:04:00:7f:a0:57:43:f7:
a8:20:dc:50:aa:8e:5a:ca:3d:9a:f6:b2:27:e7:3c:
96:ec:66:0a:9f:62:4b:81:79:6e:6f:15:8d:44:92:
09:cd:bf:06:47:a9:fb:ac:7e:e0:a4:3c:de:25:3e:
e9:03:c5:58:02:85:7e:e7:15:cf:c6:f4:33:72:25:
e6:a5:2c:16:65:76:97:5c:32:db:17:21:c2:ea:a8:
91:bf:a0:36:a2:6b:0a:90:15:e4:2f:26:ed:25:2c:
da:af:6c:f1:25:61:52:29:9f:eb:cb:ef:91:91:94:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:23:C8:F9:6E:C9:A8:62:69:70:FA:F3:C5:85:64:FB:E2:A2:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oLEjyPluyahiaXD688WFZPviouk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.232.0/23
77.90.3.0/24
77.90.28.0/24
89.106.92.0/22
89.144.46.0-89.144.55.255
89.144.58.0/23
Signature Algorithm: sha256WithRSAEncryption
26:c6:3c:7e:fa:e8:aa:5b:af:0e:58:4b:3d:c6:e3:be:69:d2:
e6:93:01:92:f8:bc:1e:36:7a:d7:5a:54:dc:2e:8f:bb:b4:69:
ee:4b:22:f8:3b:22:a5:38:e0:90:0d:3d:59:54:80:75:bd:18:
a5:40:40:fa:78:f9:b3:13:45:b5:d2:a0:a0:6b:de:29:ac:d0:
c0:1e:26:0c:30:fe:fc:ad:81:80:4d:ed:a0:df:5f:53:69:de:
14:73:ca:d7:39:03:1d:ce:49:19:07:22:60:ae:4e:7d:a5:33:
1f:da:d9:e1:14:4f:b3:30:68:25:83:39:84:c3:f6:5f:1d:6b:
90:a0:d1:8b:39:25:3c:7a:ab:c8:fa:18:14:7f:45:01:d0:00:
b7:7d:42:74:09:68:0e:39:ed:dd:97:78:32:67:b5:83:4e:0f:
05:e9:9f:2b:15:19:40:d2:f9:72:5b:28:bf:66:b6:a7:9f:71:
a4:7b:99:dd:68:03:f7:96:5b:af:b9:88:24:06:38:c3:f4:d3:
2d:a4:fb:0a:80:1b:99:99:fe:b6:8c:fd:d2:9c:50:a9:85:dd:
28:4b:bb:88:e6:d0:d7:ce:85:4b:ac:25:d1:59:8e:d7:c6:28:
a4:88:1d:d9:97:ad:85:0c:2d:bb:0b:f5:07:26:1a:40:d1:4b:
52:d2:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:07:57 2025 by rpki-client