Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rqor1-rNeZM56KkT_LXsQB5D2K0.roa
File: rqor1-rNeZM56KkT_LXsQB5D2K0.roa (raw, json)
Hash identifier: J6zU9N4VwVvzCWctKRRhCXUimrxyBPBQ2mE/IlbPdgE=
Subject key identifier: AE:AA:2B:D7:EA:CD:79:93:39:E8:A9:13:FC:B5:EC:40:1E:43:D8:AD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01959F7611351EDBC2A208741886CF88AD43
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rqor1-rNeZM56KkT_LXsQB5D2K0.roa
Signing time: Sun 16 Mar 2025 14:57:49 +0000
ROA not before: Sun 16 Mar 2025 14:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 17:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:76:11:35:1e:db:c2:a2:08:74:18:86:cf:88:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 16 14:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeaa2bd7eacd799339e8a913fcb5ec401e43d8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:b3:d7:48:cc:65:a3:0f:b5:e0:f4:a8:7e:
ba:8c:05:76:81:b7:8c:28:50:be:c3:e7:19:1c:31:
79:eb:21:0f:67:b0:c6:fe:74:99:48:5d:c9:3d:2a:
7f:e9:82:8d:fb:a4:da:6b:52:5e:20:95:89:b1:4b:
96:2d:9d:e1:99:71:42:8f:76:4b:a2:99:4d:74:c3:
c6:5b:51:fb:1c:66:0b:0d:a1:b3:e5:38:42:d0:cc:
d2:bf:d6:5e:25:98:89:7e:f1:4e:7a:36:2a:6e:24:
c4:bb:54:48:7b:f1:2d:8c:f9:90:89:b1:de:d7:f0:
72:3d:83:8e:35:1f:b9:d7:11:6c:0e:9f:97:1e:1e:
3a:c4:6e:78:02:bd:1c:9d:5b:cf:ac:1f:6c:b7:3e:
e7:f3:d9:25:f4:e0:fa:e9:13:7e:41:3d:7e:ba:9c:
ee:f2:28:5e:14:7b:95:9f:57:f2:7a:8c:ee:87:d7:
dc:4b:10:00:8d:6a:92:01:ac:af:f8:61:4a:c3:68:
bd:72:88:2e:ee:22:33:43:6a:11:67:7e:af:14:97:
45:f6:74:7d:60:29:dd:63:40:15:63:67:4b:dc:03:
5e:3e:e7:53:84:f7:d5:a2:c0:6c:44:db:18:b3:1e:
8a:3b:ba:8b:50:6c:0a:1e:8d:05:de:55:f4:d5:2c:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:2B:D7:EA:CD:79:93:39:E8:A9:13:FC:B5:EC:40:1E:43:D8:AD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rqor1-rNeZM56KkT_LXsQB5D2K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
77.90.12.0/24
77.90.33.0/24
77.90.42.0/24
Signature Algorithm: sha256WithRSAEncryption
27:15:8a:75:35:38:c4:e5:52:6b:19:fc:34:a8:08:f6:49:55:
ef:5c:73:ae:43:0e:87:96:c4:c3:62:b0:61:50:cf:ac:ca:b6:
ed:c3:96:1b:f1:b9:ec:ae:45:1c:66:23:15:26:56:ab:14:1a:
3b:0a:58:8d:6b:b0:eb:b1:5f:46:20:74:e7:76:cf:c9:fa:3d:
5f:e2:f5:5f:22:df:6d:78:c3:7f:41:18:b6:c4:8f:a3:11:7a:
55:1b:ae:40:b1:ea:e6:b6:c6:e0:55:e1:70:1a:35:b8:6a:4c:
11:cc:ac:89:e2:b9:21:f9:cf:16:27:63:f8:40:5b:f3:f7:2b:
69:46:31:cb:cc:37:00:45:c3:0f:fa:7a:ce:7c:fe:cd:ba:e7:
18:6d:e7:69:00:d3:62:dd:f4:eb:d1:3b:9a:e0:1b:36:34:87:
4b:8d:4d:bb:e8:15:07:87:f5:bd:81:c5:9d:41:dd:9d:d8:90:
17:29:44:86:02:6c:f4:c7:fd:aa:27:77:c6:bb:c0:65:8f:89:
a4:b9:7e:28:b9:97:05:46:9a:9d:1b:6d:d1:e5:72:fa:11:34:
ce:3c:80:48:be:ef:73:2d:9a:86:11:3a:99:08:7f:84:d5:d6:
67:93:77:5d:54:21:e4:5a:20:4f:0c:58:3a:87:18:45:86:d6:
36:45:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:46 2025 by rpki-client