Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s_XFlj-RV1X3pt2mHb7x_B7uoKE.roa
File: s_XFlj-RV1X3pt2mHb7x_B7uoKE.roa (raw, json)
Hash identifier: C1hyAECyNwaAH2RcNwwbfsst75XsI96Hv5b3/oFU2wI=
Subject key identifier: B3:F5:C5:96:3F:91:57:55:F7:A6:DD:A6:1D:BE:F1:FC:1E:EE:A0:A1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019504627B6201B8BBFF6243E9F86C3AE576
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s_XFlj-RV1X3pt2mHb7x_B7uoKE.roa
Signing time: Fri 14 Feb 2025 12:15:17 +0000
ROA not before: Fri 14 Feb 2025 12:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 05:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:62:7b:62:01:b8:bb:ff:62:43:e9:f8:6c:3a:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 14 12:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f5c5963f915755f7a6dda61dbef1fc1eeea0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:62:0d:2e:4b:1a:6f:c6:ff:62:79:82:3f:
07:1e:32:27:a9:b9:cf:53:9d:a1:92:5c:ab:1f:01:
fb:e8:72:8b:17:a0:2b:f9:70:27:e5:37:cf:c3:3c:
ec:4d:31:72:46:91:fc:b2:61:6d:6e:16:a9:96:7e:
f7:97:38:e5:e7:59:f1:28:76:4a:32:99:45:d2:07:
88:6b:4d:c7:30:00:5c:c0:71:68:ec:3e:c0:95:24:
6f:5b:0c:c7:e6:97:de:f4:9a:99:fb:ce:5f:b6:96:
67:e0:7b:f3:18:20:26:d9:d8:a2:c1:4f:c5:4b:ce:
1d:82:8b:10:ca:15:0e:3a:26:97:cc:06:21:7b:75:
e5:32:12:ed:89:5a:f1:3c:de:69:82:ef:ea:33:87:
48:ae:e7:86:51:3a:b8:25:75:c4:e7:e8:c8:75:eb:
4e:92:b1:bf:7a:70:4c:e4:b8:d3:64:dc:d6:7d:8a:
63:ae:9f:09:b7:03:dc:55:6f:80:b8:80:8c:b1:76:
41:d1:0f:bb:49:bf:45:2f:2c:31:7e:16:0a:dc:6c:
f8:b6:24:31:61:e7:cd:f8:55:e3:fe:41:c5:eb:2c:
c3:67:c4:d8:47:52:09:ee:38:bc:90:94:6c:00:4c:
7f:6b:ad:12:8a:75:e8:6e:fb:b6:1d:e4:f6:16:f7:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:C5:96:3F:91:57:55:F7:A6:DD:A6:1D:BE:F1:FC:1E:EE:A0:A1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/s_XFlj-RV1X3pt2mHb7x_B7uoKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
89.106.69.0/24
94.103.163.0/24
94.249.153.0/24
94.249.158.0/24
94.249.195.0/24
94.249.215.0/24
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
185.47.143.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:f1:68:b0:18:48:a3:72:80:a7:a2:7e:26:f3:0c:26:1d:db:
50:ff:ff:62:7f:73:a3:b0:14:46:72:3b:bb:40:37:c6:dc:44:
ef:da:b3:e7:cc:41:86:d7:6c:ff:40:9e:ed:a1:b4:b5:2f:d1:
77:46:21:15:9d:b2:21:34:0c:b1:c2:ff:6c:7f:29:a2:c0:9a:
20:e1:32:a6:c7:3d:98:4f:56:e8:be:d4:26:d9:5a:53:99:5a:
e3:64:e3:8d:27:11:28:0e:76:d5:29:52:b8:ce:82:6a:f8:4f:
f1:62:1e:5e:f5:a9:2d:c1:85:da:ff:17:2b:f1:1b:e6:84:2e:
0d:0e:d0:f1:4a:2f:06:47:3d:2c:c8:68:09:0b:24:18:06:48:
8f:f1:0a:95:52:61:17:da:2f:a0:79:3e:f7:37:b4:ed:47:22:
4f:6e:70:44:ab:3d:a7:0e:a0:22:46:03:9f:94:93:87:cf:eb:
ed:41:25:25:ee:6b:0a:9a:d6:7f:96:91:9e:0a:29:26:57:d7:
20:af:50:c8:10:60:e7:01:6d:ca:d1:82:ae:f1:25:f1:78:14:
e9:ca:a1:0d:e3:f2:bf:e6:ff:5c:c4:3d:e0:00:f3:53:e2:fb:
27:85:a4:ef:92:50:a7:6b:46:a7:6f:c1:5b:9c:bf:ae:46:e1:
d9:ed:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:31 2025 by rpki-client