Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6K5V7xDTW5C4qHUqMyr3dShwFjA.roa
File: 6K5V7xDTW5C4qHUqMyr3dShwFjA.roa (raw, json)
Hash identifier: swThshQ5Kg0h0vcFyiAWuavpnmtGcijknRmsv/K1hDs=
Subject key identifier: E8:AE:55:EF:10:D3:5B:90:B8:A8:75:2A:33:2A:F7:75:28:70:16:30
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0196AAF254D40786D10B38FB409731B05E4D
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6K5V7xDTW5C4qHUqMyr3dShwFjA.roa
Signing time: Wed 07 May 2025 13:32:10 +0000
ROA not before: Wed 07 May 2025 13:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58030
IP address blocks: 91.237.254.0/24 maxlen: 24
91.237.255.0/24 maxlen: 24
91.238.0.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 May 2025 13:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:f2:54:d4:07:86:d1:0b:38:fb:40:97:31:b0:5e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: May 7 13:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ae55ef10d35b90b8a8752a332af77528701630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bb:d9:c8:ae:9a:24:56:96:24:e4:87:6b:61:
5c:72:e7:21:bd:cd:12:45:95:ac:c0:e9:32:73:b8:
74:e0:6a:21:f3:e6:4e:f5:6e:1c:e3:cf:84:c6:67:
a9:ce:66:e2:38:a9:c8:86:b3:6f:5e:e3:9d:9f:be:
ea:aa:2f:50:8b:8f:e5:71:8a:ce:53:1e:cf:51:a1:
6b:93:19:07:9c:77:61:46:c2:8f:dd:af:77:48:38:
32:d3:cc:5f:89:83:3c:23:f6:b9:52:08:9b:5b:62:
b6:cf:06:ed:68:52:cd:20:67:8d:22:cc:cf:89:86:
8c:41:3a:59:04:ef:42:c0:9a:57:fa:09:15:f8:53:
96:99:8e:a6:f6:53:47:ce:61:ce:d9:0d:8e:11:ab:
79:75:4c:bd:64:89:8c:5e:3c:e6:f7:69:1e:30:14:
38:4a:f9:bb:b0:6e:33:0e:50:49:b3:d1:cf:a4:05:
aa:c0:f3:8d:f9:15:6b:7f:68:0e:69:be:0a:f4:ec:
34:2e:86:a0:95:65:a1:57:9b:e9:87:86:70:fb:1e:
ac:86:1f:bd:d0:e4:c9:ca:5d:f6:46:95:b0:87:d5:
f0:75:83:9f:2d:5c:5f:74:b4:0a:f2:8a:e5:aa:51:
95:82:b0:5b:4d:15:c2:16:33:ba:a8:c4:ee:99:35:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:55:EF:10:D3:5B:90:B8:A8:75:2A:33:2A:F7:75:28:70:16:30
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/6K5V7xDTW5C4qHUqMyr3dShwFjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.254.0-91.238.0.255
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
18:67:e4:b3:d2:c6:30:73:a7:ca:b3:7d:ce:ee:ee:7e:79:5f:
5c:0b:a6:85:85:9e:9b:b0:9c:04:c5:a4:df:68:fa:d4:68:84:
e9:dc:ab:9a:78:26:3b:1a:a9:cc:d7:35:4b:1e:b1:2b:c7:ef:
71:c7:b2:77:61:88:e3:84:da:d8:4b:5a:10:7f:98:19:82:45:
a9:36:2b:89:d0:12:fe:b2:ed:4d:ee:d6:e7:ae:3b:8e:7b:de:
ae:1d:dd:f5:2b:aa:5b:dc:cf:25:74:92:6f:50:bf:73:c7:e7:
27:3e:42:46:40:fa:99:f3:69:4f:c1:ed:d6:0b:13:b3:9c:7e:
bd:98:dc:68:bd:0e:87:d0:a0:86:56:d4:a1:c1:66:e8:95:de:
60:ef:26:f6:27:55:fd:b3:ee:a7:39:06:c7:b2:8d:23:68:24:
2e:9b:76:ba:8a:1e:cb:41:e1:33:73:34:a8:8c:0b:08:25:0a:
5f:2f:95:f6:46:f1:fa:ed:53:34:64:e6:cf:aa:08:e6:84:bb:
81:6d:df:09:75:e8:72:75:09:b5:6a:af:c6:6b:56:9e:fd:b6:
c4:59:d5:78:5f:d6:82:a6:d3:61:24:d5:7a:0c:95:a6:49:c4:
e9:54:f0:ea:5f:2f:de:0e:b2:d4:88:49:37:e5:1f:e1:eb:bd:
f6:45:1c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:15 2025 by rpki-client