Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sSVXACkcISyyWDSXC39NDiGY3-4.roa
File: sSVXACkcISyyWDSXC39NDiGY3-4.roa (raw, json)
Hash identifier: YUy1sysE4W6FKdJ1ccxPgFSXd0q8zz3r1LDBUqA3ymU=
Subject key identifier: B1:25:57:00:29:1C:21:2C:B2:58:34:97:0B:7F:4D:0E:21:98:DF:EE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194D70E23B356466D70938B84AB6B3C0764
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sSVXACkcISyyWDSXC39NDiGY3-4.roa
Signing time: Wed 05 Feb 2025 17:00:15 +0000
ROA not before: Wed 05 Feb 2025 17:00:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 05:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:0e:23:b3:56:46:6d:70:93:8b:84:ab:6b:3c:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 5 17:00:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1255700291c212cb25834970b7f4d0e2198dfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:a9:38:af:d3:77:f3:dd:99:58:0e:a7:50:
43:0b:33:e6:c2:dc:57:9c:ef:10:dc:6d:7d:d2:f4:
c0:fc:1a:b4:7e:a6:c1:66:dd:50:90:ae:46:b1:80:
97:cd:d5:43:d5:a2:c4:06:8b:00:f1:bb:ea:6d:77:
72:ef:df:53:90:ae:4f:af:cf:a1:76:da:97:ab:40:
41:66:fe:05:79:66:8c:59:82:d5:16:d1:dc:1d:d2:
0f:b3:92:cd:f1:2f:75:de:ed:25:02:79:5a:43:2a:
0d:2a:54:1a:88:f6:41:0d:ce:07:65:03:59:94:9f:
a7:96:04:d9:e3:15:2b:2a:ce:37:42:25:35:66:68:
5b:e8:63:2e:a6:0d:5f:ca:84:0f:2e:81:a5:92:11:
9c:81:d1:da:5c:d3:0a:8f:5a:97:9e:85:d5:fa:12:
5e:ec:26:e8:13:a5:cb:da:59:bb:71:44:54:57:40:
29:0c:bc:57:ec:ac:f9:7e:ef:c2:f1:86:86:a3:88:
b8:06:e8:b7:0f:17:6b:ba:cb:d5:fc:05:74:0b:c0:
ba:2f:d6:12:cd:cb:05:ba:16:26:12:79:46:4c:12:
86:74:e4:09:69:20:c5:f7:52:53:01:c4:82:45:90:
3a:56:ff:0d:dd:34:6b:3d:e9:4d:42:bb:75:98:7b:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:57:00:29:1C:21:2C:B2:58:34:97:0B:7F:4D:0E:21:98:DF:EE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sSVXACkcISyyWDSXC39NDiGY3-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
89.106.69.0/24
94.103.163.0-94.103.164.255
94.249.148.0/24
94.249.153.0/24
94.249.158.0/24
94.249.195.0/24
94.249.214.0/23
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
185.47.143.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ff:9e:83:9f:99:0a:25:50:fc:4a:89:98:56:04:a8:ad:64:
a5:3a:53:78:b6:af:9f:c6:4f:c6:01:a2:a1:89:08:6b:1e:97:
b6:40:96:5c:45:57:e3:7c:a2:63:7a:77:43:47:67:60:af:89:
4d:4d:40:7b:8b:f0:2e:df:f4:1b:ad:f2:25:e2:2f:93:c4:75:
83:d3:6d:cc:d3:7b:c6:6c:e3:3b:64:5e:89:b6:fd:f5:8e:5c:
2f:ea:f5:c0:59:57:04:16:2d:13:8d:58:0a:9f:e2:aa:db:a6:
28:c7:eb:cd:bd:2c:57:8d:b3:12:49:c0:1c:45:dc:57:9e:04:
f6:e3:ab:83:77:52:2a:4a:78:6d:3a:9f:46:d6:0b:81:7f:9d:
67:29:f6:70:1a:56:6d:1b:90:d7:eb:c1:8e:74:d1:58:d5:c6:
fc:4b:28:a4:ce:1b:20:c6:25:97:f3:dc:af:77:7b:97:81:a5:
a6:09:94:cb:17:03:40:39:6a:84:fc:58:03:82:19:e4:8d:26:
64:75:c0:9a:89:36:28:f7:e2:7d:58:4b:0a:b8:f4:ee:17:7c:
eb:5b:3f:e7:a6:74:e8:7b:4c:53:ba:59:6d:23:67:41:a5:e5:
0a:d5:08:c4:6e:92:bb:0a:6e:e2:05:76:6d:af:aa:19:66:8b:
7d:4e:72:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:15 2025 by rpki-client