Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s2qAOJMKquPhYSJxT4KCIrOCYyc.roa
File: s2qAOJMKquPhYSJxT4KCIrOCYyc.roa (raw, json)
Hash identifier: gg0cEHCWfdcYz9DvieElrfmyB6yHBKLHwr2EB9uxENA=
Subject key identifier: B3:6A:80:38:93:0A:AA:E3:E1:61:22:71:4F:82:82:22:B3:82:63:27
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195147DCA246DB16B35CD37FA1792922752
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s2qAOJMKquPhYSJxT4KCIrOCYyc.roa
Signing time: Mon 17 Feb 2025 15:19:02 +0000
ROA not before: Mon 17 Feb 2025 15:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.145.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 16:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:7d:ca:24:6d:b1:6b:35:cd:37:fa:17:92:92:27:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 17 15:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b36a8038930aaae3e16122714f828222b3826327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:04:15:fc:68:ba:1b:a3:e2:7f:46:89:d4:
7f:00:e4:e2:57:d0:25:e0:01:a6:41:62:58:5f:15:
12:6e:f0:f0:90:d3:e0:27:b6:9c:70:34:4c:76:1d:
d5:b6:b1:a5:8f:89:bf:6d:ec:e7:b7:91:0e:23:cb:
cd:7e:b7:fd:a8:46:d7:2d:77:e1:6a:75:8e:ca:8e:
9b:79:83:6c:64:ed:92:dd:b7:50:db:4c:46:de:67:
60:aa:be:77:ce:b3:f9:65:ba:9e:55:ac:a9:2d:d2:
20:c0:57:03:c9:3c:2e:c5:d0:7a:52:e6:42:b0:e8:
89:46:26:51:8e:40:29:2b:38:d3:49:cf:10:3d:f3:
36:f5:e2:8d:83:06:30:13:65:17:7e:17:c2:d0:b8:
ba:5c:1f:45:73:cf:ca:a4:9e:c2:02:3f:22:24:d8:
27:8f:b9:d7:46:c2:33:16:b2:dc:bd:b1:e7:d3:26:
eb:4f:46:dc:ac:17:a1:96:50:94:61:87:61:3c:b4:
76:1a:5e:8a:cb:f6:ff:db:29:03:be:f7:46:39:5c:
cc:64:6d:1b:d5:e4:28:d5:4b:18:c7:50:46:a1:ae:
00:79:41:50:19:fa:34:23:d9:95:17:b8:6c:07:ec:
c6:4e:bd:4b:0e:c8:fc:38:97:a3:ea:ce:1a:47:bd:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:80:38:93:0A:AA:E3:E1:61:22:71:4F:82:82:22:B3:82:63:27
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s2qAOJMKquPhYSJxT4KCIrOCYyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.145.0/24
5.175.143.0/24
5.231.25.0-5.231.26.255
5.231.96.0/24
89.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:51:0b:ef:d6:f5:87:56:47:b7:5d:79:b6:65:6a:cf:36:9a:
c1:2f:37:cd:ff:e8:ba:1b:50:fa:96:34:4c:a4:9d:ee:05:b3:
e0:37:37:2f:ff:c4:f7:88:89:b6:d2:57:c6:49:38:ef:83:e5:
05:87:24:8e:34:95:8f:0a:51:15:03:1a:a8:d0:21:8e:ae:cc:
1f:e7:bb:df:ba:8d:04:c6:fa:f9:eb:7a:65:81:e2:30:4a:75:
b7:a6:52:d7:f1:eb:d7:5d:3e:79:86:b2:13:1e:39:57:0d:77:
6b:63:a8:78:4a:63:e8:61:8c:23:e9:58:fa:59:e1:fd:be:24:
aa:95:32:34:2d:9e:28:22:a3:8d:9f:8a:25:03:ca:38:a7:ef:
35:54:12:d2:7e:8e:a8:cd:76:b1:6b:92:77:5d:fa:59:78:86:
6b:91:84:16:d4:87:61:2d:6e:83:f1:25:00:da:66:f8:b8:d8:
e7:79:45:d5:7a:2a:eb:df:55:4f:07:2d:b4:58:30:cb:95:08:
a1:95:9c:ca:23:09:7b:cd:41:49:4b:74:06:ab:16:0c:04:93:
1f:f0:35:79:11:ed:68:76:24:92:fb:c0:2a:56:f6:a7:4c:e5:
c7:39:63:5a:c6:be:76:62:26:eb:9d:4b:07:31:39:34:d8:6c:
29:f2:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:26 2025 by rpki-client