Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/udc4o8XtMEzsmY_kQYJLKzu9spg.roa
File: udc4o8XtMEzsmY_kQYJLKzu9spg.roa (raw, json)
Hash identifier: lAM1JWdz7pww3TyZ26p5MXe6mavid6f1RU2ZV6d/Y1w=
Subject key identifier: B9:D7:38:A3:C5:ED:30:4C:EC:99:8F:E4:41:82:4B:2B:3B:BD:B2:98
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01951549F43EEA6A9996C03A01ECAB777073
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/udc4o8XtMEzsmY_kQYJLKzu9spg.roa
Signing time: Mon 17 Feb 2025 19:02:02 +0000
ROA not before: Mon 17 Feb 2025 19:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.253.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
89.144.61.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:49:f4:3e:ea:6a:99:96:c0:3a:01:ec:ab:77:70:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 17 19:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9d738a3c5ed304cec998fe441824b2b3bbdb298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:49:37:25:a1:5d:66:9a:cd:83:64:2b:15:
48:a5:83:4b:2e:a6:c7:6b:01:fe:39:b4:61:8e:3f:
66:4d:78:80:0f:be:a0:22:43:28:4b:85:5f:f0:c4:
23:d5:ac:0d:14:59:fd:2d:f2:03:cd:93:00:8f:c2:
da:be:a5:46:b3:76:63:6e:86:00:c2:98:79:22:9e:
9c:9b:90:ff:fc:24:a5:a9:29:75:06:78:f4:ef:d9:
c4:53:fb:49:11:18:8c:57:8c:ef:8c:be:fe:64:07:
be:50:06:f4:e6:36:5d:83:98:1d:14:86:0f:34:91:
13:33:ac:ae:57:97:36:f9:b4:6d:f2:85:eb:7f:0a:
35:fb:8d:93:a6:9d:ac:91:e0:ba:8b:96:f2:29:fd:
de:c6:94:a1:66:6d:37:ac:42:27:30:86:8a:67:ab:
6c:bb:57:18:96:5f:98:85:29:df:70:4b:4b:49:c2:
bd:03:5a:0e:d6:49:e3:72:03:20:e5:cf:15:e4:4a:
4f:62:8e:26:34:26:3b:56:e8:45:57:04:e1:05:ce:
c5:2a:a4:79:96:90:85:cf:0e:0b:33:1e:74:ba:3b:
a5:a2:9f:cd:e4:f1:e6:3c:9c:6c:99:22:41:c1:9d:
2b:cb:f0:3a:ca:e4:74:86:46:e1:df:5f:0a:e9:91:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:38:A3:C5:ED:30:4C:EC:99:8F:E4:41:82:4B:2B:3B:BD:B2:98
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/udc4o8XtMEzsmY_kQYJLKzu9spg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.253.0/24
77.90.60.0/24
89.144.61.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3e:d3:c7:e1:7e:c7:57:9b:3c:70:55:b9:c1:e3:c6:76:d6:
35:0b:6f:2d:29:eb:99:3f:e4:e5:8c:64:c3:c5:02:bb:c5:d9:
ad:d7:ec:0a:a9:16:59:95:e6:a4:15:50:1e:9f:1c:21:9d:48:
df:06:29:5d:18:39:1d:c9:91:bb:c2:9c:9b:ae:ce:ac:2e:a7:
ec:cf:bc:f9:30:e7:fb:fd:77:5d:83:a5:d9:c8:c8:a0:1e:45:
20:fa:10:e6:95:99:5d:b6:77:e6:ea:33:c2:8c:db:3b:3d:68:
5d:27:6c:69:81:29:62:b1:93:69:7b:9f:a3:3f:d1:65:47:e1:
e5:dc:bd:20:92:e5:98:2f:02:d2:e9:4d:ec:6b:8f:49:5f:c8:
c4:fb:4d:7f:a8:30:e2:48:5b:f3:00:7a:cb:19:c7:17:59:fb:
75:33:1e:53:fb:bf:f4:9a:70:29:85:6e:0a:6f:17:26:13:03:
69:b5:95:93:8a:0b:d2:b8:ee:f6:80:3e:4a:a8:8a:2c:39:0b:
0f:2b:83:de:63:33:46:a3:9c:cd:07:14:49:85:f4:ad:57:fc:
3a:c0:81:f3:92:97:55:ec:bf:b0:08:b1:e0:26:45:7b:ee:68:
fd:27:16:08:40:05:37:7d:c1:cc:13:0e:4c:2b:c8:53:b8:ad:
16:6f:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:39 2025 by rpki-client