Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tApMtXiyUTkgI5b1F25MDfk9aHk.roa
File: tApMtXiyUTkgI5b1F25MDfk9aHk.roa (raw, json)
Hash identifier: I2MfWPGQHGAqTH9P3FEPsvAwm+nVHOjT/qhfl5VuEbs=
Subject key identifier: B4:0A:4C:B5:78:B2:51:39:20:23:96:F5:17:6E:4C:0D:F9:3D:68:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193FEF13E803A1A5B500E0AFFEDCE08CA64
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tApMtXiyUTkgI5b1F25MDfk9aHk.roa
Signing time: Wed 25 Dec 2024 17:50:43 +0000
ROA not before: Wed 25 Dec 2024 17:50:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 02:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fe:f1:3e:80:3a:1a:5b:50:0e:0a:ff:ed:ce:08:ca:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 25 17:50:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b40a4cb578b25139202396f5176e4c0df93d6879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:72:57:07:03:ac:5d:79:11:53:f6:d1:1f:
67:1f:52:e3:bb:1a:f6:b4:af:15:9e:a7:50:7d:bf:
88:f7:81:0a:fd:aa:c0:9d:7f:94:61:0f:be:06:8f:
02:9f:55:ba:2e:bc:47:6e:77:88:69:91:1e:b9:c5:
44:08:93:13:03:68:19:44:88:0e:b4:e7:55:d9:a1:
eb:e6:5c:b5:89:90:2e:ba:7e:40:f8:63:f0:f0:d9:
dc:d9:b2:79:17:1a:36:3d:cf:eb:09:6e:76:97:cf:
51:b2:a6:9d:68:7e:6e:d6:4c:16:98:78:a4:d0:c8:
68:6a:7f:d5:1d:5b:36:26:9e:34:29:00:59:81:78:
a4:d6:9f:9f:3b:92:26:f8:bb:b9:0a:bd:46:62:94:
81:39:88:03:6b:54:7d:b5:cc:55:45:d0:37:34:ab:
ae:d4:bf:eb:d6:d9:df:3b:90:db:9c:2e:ba:14:1d:
90:e6:0b:38:68:0a:15:d8:e4:35:8a:94:87:89:7f:
bb:91:eb:a9:33:b7:c8:4b:ec:b9:07:79:fa:ab:5c:
c9:20:25:d9:c1:09:df:f3:d3:89:c4:bf:57:03:78:
17:dd:57:d4:ea:ef:f2:e6:ed:e8:b6:3a:bf:04:3d:
49:fa:55:84:ac:c1:05:92:79:cd:6a:f1:36:c8:d6:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:4C:B5:78:B2:51:39:20:23:96:F5:17:6E:4C:0D:F9:3D:68:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tApMtXiyUTkgI5b1F25MDfk9aHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.130.0/23
89.106.69.0/24
94.103.163.0/24
94.249.148.0/24
94.249.153.0/24
94.249.212.0/24
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:30:55:6a:6e:83:dc:62:1f:bd:2f:61:a1:54:42:cf:3a:8e:
17:f1:c6:db:35:03:db:cc:cf:68:d5:8b:02:22:16:f5:a6:86:
b2:60:08:f1:7e:1e:eb:dc:34:62:3f:5d:f7:8d:96:e1:7e:3d:
00:79:ce:44:75:d6:6e:0c:3f:ec:0d:23:ea:4e:3a:f3:22:39:
e3:28:4a:26:4d:be:da:42:60:42:61:5d:eb:08:73:ab:b7:51:
c3:94:d8:bf:16:c6:60:7e:53:d4:37:83:03:89:5f:dc:b6:fd:
e7:a9:c0:a4:fa:01:0f:6b:03:8f:c7:4d:82:bd:58:40:95:b1:
6b:2b:3d:70:f9:31:47:76:34:74:d8:de:04:3c:33:34:01:54:
7b:8a:40:c8:82:3d:b2:e9:f7:97:b1:8f:6e:78:2d:c5:9e:2e:
3f:65:a0:b1:56:8f:15:34:f5:3b:c9:9b:7a:77:94:55:95:67:
c0:fc:76:5a:ff:94:bf:e2:ce:bf:67:b0:bd:ce:40:36:8a:f3:
a3:0a:55:ee:53:04:80:47:81:3b:b3:5d:2e:74:35:32:b5:8a:
af:b9:94:ab:65:a9:d7:03:0b:06:99:b3:7b:e5:55:79:17:e2:
5d:eb:5b:ba:e6:5f:45:f5:9c:2c:b8:cd:1f:64:cc:39:96:08:
7c:c9:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:52 2025 by rpki-client