Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5GXgdhJ2nbjbhXa7rx_-N9BQ9PY.roa
File: 5GXgdhJ2nbjbhXa7rx_-N9BQ9PY.roa (raw, json)
Hash identifier: OWNWckkJlVanoRI478dVcpPd43vOjhLDi6uDk5HbFRk=
Subject key identifier: E4:65:E0:76:12:76:9D:B8:DB:85:76:BB:AF:1F:FE:37:D0:50:F4:F6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019685FB716867F4A754FA937222B66C4752
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5GXgdhJ2nbjbhXa7rx_-N9BQ9PY.roa
Signing time: Wed 30 Apr 2025 09:16:10 +0000
ROA not before: Wed 30 Apr 2025 09:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 11:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:fb:71:68:67:f4:a7:54:fa:93:72:22:b6:6c:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 30 09:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e465e07612769db8db8576bbaf1ffe37d050f4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:7c:47:be:31:15:34:a0:48:d3:1a:ad:e6:
c2:db:39:53:63:41:82:30:6c:e1:be:4f:4f:d5:d2:
b4:7a:2a:e6:72:ca:3e:ec:eb:29:73:9b:b7:5d:d7:
5f:68:93:14:c5:a8:b5:8a:b2:8e:c7:14:46:4b:4e:
19:d5:82:fb:23:19:15:84:47:3d:57:43:ba:77:98:
94:4b:2e:36:f5:5e:40:71:44:c8:27:e3:1a:3d:9b:
00:1a:4f:16:92:f6:15:92:45:c8:01:1b:10:5a:86:
cf:bf:01:c8:f2:62:1f:65:bf:43:ab:ca:90:2d:db:
b5:6a:f1:61:da:c6:9b:a1:3f:0e:85:8e:ff:30:d1:
e0:ba:f5:a6:a8:1d:e3:0e:77:80:ef:9e:10:fd:bb:
f0:1f:92:e1:29:34:6c:f5:f6:d2:bf:4c:0c:50:38:
e4:4a:cb:4f:a6:55:6a:1a:6e:da:4c:33:30:5b:b0:
f6:a9:b8:eb:71:2d:55:8e:e3:13:be:91:2d:ef:ce:
12:1b:33:7a:c0:37:4a:27:e1:b2:21:ab:e4:b5:41:
23:f1:b7:0b:da:d2:0d:7f:6b:95:2a:50:cb:ce:65:
bc:d5:ac:8d:16:40:7c:99:06:86:b1:53:4d:86:3e:
58:70:6e:79:09:42:68:58:2b:89:de:c5:0f:1b:4a:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:65:E0:76:12:76:9D:B8:DB:85:76:BB:AF:1F:FE:37:D0:50:F4:F6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5GXgdhJ2nbjbhXa7rx_-N9BQ9PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
91.223.110.0/24
195.177.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:20:4e:ce:2f:07:49:53:ee:3e:9f:d3:50:f6:a7:08:ee:7a:
a8:e5:fb:66:79:55:46:27:59:3c:e7:30:69:b9:74:d8:6e:3b:
fa:39:c3:09:af:54:13:18:32:a0:29:24:ec:1f:05:8e:12:8e:
3d:b2:b4:36:a2:73:84:df:45:06:68:3a:49:73:9b:f6:5a:7c:
75:bc:28:42:d5:70:db:03:98:77:f5:cf:cf:7e:8f:77:ff:86:
14:fa:36:f9:70:e8:2c:c1:55:97:92:6c:1e:e9:51:c0:17:a2:
38:53:08:70:17:ef:8c:da:8c:5a:5b:24:7b:1c:17:d6:ac:59:
b3:2b:ba:6b:77:68:3c:6a:94:46:65:9c:1b:74:b6:a2:6c:67:
1f:0e:8a:15:22:35:a1:2c:ac:33:ea:a4:30:06:86:ac:a1:1a:
58:89:3b:49:c7:96:39:18:5b:a8:6d:3c:00:33:a5:48:44:98:
82:fd:89:d6:23:eb:49:57:40:e5:8c:5c:8c:ee:6d:39:c5:82:
a8:e8:47:d5:f4:c7:89:0e:af:fc:f7:f6:72:60:73:93:b9:47:
43:72:23:97:13:1c:8f:d4:92:c1:29:63:cd:b1:26:be:24:ee:
1d:be:fe:f1:ef:24:97:1c:87:03:dc:a8:ba:ac:82:f4:d0:0f:
b7:12:23:7c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZaF+3FoZ/SnVPqTciK2bEdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwNDMwMDkxNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDY1ZTA3NjEyNzY5ZGI4ZGI4NTc2YmJhZjFmZmUzN2QwNTBmNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo18R74xFTSgSNMarebC2zlTY0GC
MGzhvk9P1dK0eirmcso+7Ospc5u3XddfaJMUxai1irKOxxRGS04Z1YL7IxkVhEc9
V0O6d5iUSy429V5AcUTIJ+MaPZsAGk8WkvYVkkXIARsQWobPvwHI8mIfZb9Dq8qQ
Ldu1avFh2saboT8OhY7/MNHguvWmqB3jDneA754Q/bvwH5LhKTRs9fbSv0wMUDjk
SstPplVqGm7aTDMwW7D2qbjrcS1VjuMTvpEt784SGzN6wDdKJ+GyIavktUEj8bcL
2tINf2uVKlDLzmW81ayNFkB8mQaGsVNNhj5YcG55CUJoWCuJ3sUPG0qIIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFORl4HYSdp2424V2u68f/jfQUPT2MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvNUdYZ2RoSjJuYmpiaFhhN3J4Xy1OOUJROVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBbVUAwQA
W99uAwQAw7FdMA0GCSqGSIb3DQEBCwUAA4IBAQBbIE7OLwdJU+4+n9NQ9qcI7nqo
5ftmeVVGJ1k85zBpuXTYbjv6OcMJr1QTGDKgKSTsHwWOEo49srQ2onOE30UGaDpJ
c5v2Wnx1vChC1XDbA5h39c/Pfo93/4YU+jb5cOgswVWXkmwe6VHAF6I4UwhwF++M
2oxaWyR7HBfWrFmzK7prd2g8apRGZZwbdLaibGcfDooVIjWhLKwz6qQwBoasoRpY
iTtJx5Y5GFuobTwAM6VIRJiC/YnWI+tJV0DljFyM7m05xYKo6EfV9MeJDq/89/Zy
YHOTuUdDciOXExyP1JLBKWPNsSa+JO4dvv7x7ySXHIcD3Ki6rIL00A+3EiN8
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:26:50 2025 by rpki-client