Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6xRAAAPmh3g5NuQ2YTzXxyGVWTw.roa
File: 6xRAAAPmh3g5NuQ2YTzXxyGVWTw.roa (raw, json)
Hash identifier: A3ppwXwM6ZBCA6ZwIhbyNZm5qx44/BhpgVDQ5rvg3RA=
Subject key identifier: EB:14:40:00:03:E6:87:78:39:36:E4:36:61:3C:D7:C7:21:95:59:3C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01968BAA38091328AE426EEBDCE4C127948A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6xRAAAPmh3g5NuQ2YTzXxyGVWTw.roa
Signing time: Thu 01 May 2025 11:45:10 +0000
ROA not before: Thu 01 May 2025 11:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 12:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:aa:38:09:13:28:ae:42:6e:eb:dc:e4:c1:27:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 1 11:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb14400003e687783936e436613cd7c72195593c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:00:2c:c2:72:b3:73:72:39:e9:c3:ce:6a:
21:a0:52:ab:6e:b1:fe:21:45:8a:e1:8d:96:98:b2:
30:e8:60:ab:da:af:5f:61:c5:89:75:62:7f:d3:48:
22:4c:c3:29:ce:d0:19:74:3b:9d:5c:41:90:45:09:
15:d2:a3:8b:00:9a:84:48:ec:d2:05:00:5f:a3:7f:
2a:5f:58:85:e1:38:90:39:22:9d:9f:6f:bb:3a:ca:
0f:fe:fc:ea:3a:99:ef:dd:e5:ae:de:73:35:f3:e9:
25:0a:a2:2c:8f:9e:82:09:de:56:c5:be:de:89:25:
c2:4b:af:e0:94:cd:45:e1:37:71:88:35:30:ba:2d:
82:96:5a:08:93:f1:03:64:4c:c7:1a:8c:71:30:5c:
53:e7:d2:ae:9e:0e:8f:9a:46:ef:37:f2:1f:a7:2a:
55:ba:4c:f1:8e:2a:04:d9:11:f5:7d:9d:03:fe:a0:
fb:77:c8:4a:fe:16:e6:9d:3d:92:d7:df:31:75:68:
99:fc:aa:3b:fa:b2:f6:de:69:c2:24:bc:2b:8c:4f:
bf:36:da:53:e3:24:15:df:f3:47:91:72:38:25:f6:
59:d9:2a:bb:75:5d:92:66:ef:c8:dd:e1:1b:41:0a:
e8:bf:a4:c1:9c:4a:b6:b9:da:bb:70:02:49:a7:4d:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:40:00:03:E6:87:78:39:36:E4:36:61:3C:D7:C7:21:95:59:3C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6xRAAAPmh3g5NuQ2YTzXxyGVWTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0b:63:17:45:ff:de:3d:01:f2:ac:24:cd:01:bd:c7:c6:0c:
ee:bb:16:dd:31:bb:6b:a4:81:fe:3b:cb:e9:9d:6e:1d:75:97:
2d:f6:12:5d:96:c8:1a:56:ab:ce:af:8e:2e:77:03:1f:20:38:
41:40:51:58:2c:52:f5:2a:78:14:51:d3:0a:c2:7e:e7:dd:34:
19:71:30:ad:a4:5a:92:13:1d:3f:9b:3f:e1:bf:a4:55:44:de:
e8:51:be:f4:03:8a:92:df:92:02:9c:03:ec:3b:b0:23:1f:1b:
a3:58:78:48:e9:10:3f:57:c2:45:32:b3:08:ff:32:99:55:69:
53:41:40:59:2a:68:5b:37:d6:d8:59:22:d0:00:20:87:5c:03:
a4:65:fe:b6:fa:1f:50:be:a5:05:11:26:5b:b2:95:aa:13:04:
17:7b:6e:8a:ef:66:25:ee:63:b5:28:b8:06:b8:6a:e6:47:27:
fc:1e:f0:f2:e8:14:d6:c4:1c:42:74:8d:52:1f:a4:e5:bc:6a:
f8:5d:e9:12:54:46:de:02:a9:08:33:68:4e:37:ba:64:83:b7:
d8:df:83:ec:b7:8f:e3:de:b3:74:40:05:5c:04:a4:be:c9:3d:
22:cc:b6:89:57:1d:e6:25:e0:b2:5d:60:6b:be:ed:0e:24:09:
16:d1:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:54:13 2025 by rpki-client