Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4JBq7YCo5MSEqtDQ2vcFqDN2lEE.roa
File: 4JBq7YCo5MSEqtDQ2vcFqDN2lEE.roa (raw, json)
Hash identifier: tjI1WqELXlgdlMuPhqFy65Am5sSzkX/pOQ6qB63kHlA=
Subject key identifier: E0:90:6A:ED:80:A8:E4:C4:84:AA:D0:D0:DA:F7:05:A8:33:76:94:41
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01967CFA267D103A814CE766A8223D19842B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4JBq7YCo5MSEqtDQ2vcFqDN2lEE.roa
Signing time: Mon 28 Apr 2025 15:18:10 +0000
ROA not before: Mon 28 Apr 2025 15:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 5.8.66.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.48.0/23 maxlen: 23
5.188.60.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
46.161.41.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:fa:26:7d:10:3a:81:4c:e7:66:a8:22:3d:19:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 28 15:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0906aed80a8e4c484aad0d0daf705a833769441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:5c:16:c8:f7:ba:06:f6:0f:47:13:c0:ad:
e4:15:04:ce:23:63:30:70:69:db:a5:64:f5:d4:14:
6b:0a:8c:c8:63:a5:f8:35:89:71:04:90:70:0d:db:
ff:d3:55:da:51:fd:13:15:a1:0c:06:22:05:15:64:
d2:49:8b:b2:45:09:86:d7:b7:aa:81:ae:2e:51:23:
4e:d0:ed:12:ed:f1:31:47:c5:57:d8:02:0b:27:ae:
80:d6:54:44:58:0d:40:b1:93:d0:65:bd:92:fb:5d:
25:2e:91:0b:86:ba:35:d8:f6:b0:d2:00:b1:71:f8:
e9:59:b8:fe:6c:2a:5a:5a:92:fd:f2:06:7e:02:6d:
71:37:b8:b7:e0:b0:99:13:35:01:05:25:03:7f:e1:
c3:c2:7a:e6:e4:f4:88:26:c9:00:0d:8c:d7:8f:32:
df:6c:6d:11:2f:0c:61:c3:4d:fd:8b:f2:4b:8f:ae:
dd:79:b1:70:cb:6c:48:1c:46:d9:cc:bb:43:7b:11:
49:eb:95:b1:01:44:38:aa:75:69:c5:9a:c7:63:5a:
77:e0:61:1c:f8:e8:d6:83:41:51:8f:98:6b:7b:ee:
70:46:1b:1f:0b:bf:64:31:f8:ce:20:4f:c5:59:11:
2f:8c:eb:16:cc:29:04:e4:f7:c3:c0:d1:c8:93:05:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:90:6A:ED:80:A8:E4:C4:84:AA:D0:D0:DA:F7:05:A8:33:76:94:41
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4JBq7YCo5MSEqtDQ2vcFqDN2lEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.66.0/23
5.188.10.0/23
5.188.48.0/23
5.188.60.0/23
46.161.26.0/24
46.161.41.0/24
91.243.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:9c:32:dc:ee:4f:93:5e:06:e4:fd:98:8f:26:43:c0:9a:4e:
b6:37:ab:79:2d:01:81:87:38:3d:14:bd:b9:2b:21:8c:66:5a:
fa:3c:f2:e7:88:ea:a7:ad:7e:39:f6:a5:9d:a7:b6:4e:fe:f5:
a7:8f:8c:5e:4c:e2:a3:88:ea:df:42:81:4f:24:a1:a0:ac:fe:
15:e5:06:03:6a:69:e2:17:fa:f8:f8:6f:b0:ad:ce:58:19:62:
fe:ca:ee:54:74:a1:ad:ec:ff:63:58:e6:94:7f:1b:23:9e:99:
22:8b:47:14:00:73:63:a2:31:9a:a2:f7:70:a3:b5:99:35:33:
1c:04:04:5f:c8:de:ce:ed:5a:ea:e7:4b:00:6c:21:38:a5:52:
86:a4:78:dd:a2:74:a8:cf:db:8d:39:9b:ac:87:46:a5:b8:30:
9a:37:cb:6a:ed:0f:e4:ca:ab:48:4c:b2:a3:eb:9c:cd:11:e2:
02:99:2d:6f:9a:be:0d:5e:64:96:42:63:b7:68:e5:b3:99:59:
31:4a:ca:59:14:85:79:7c:e5:2a:2d:c3:5e:66:61:10:a9:cb:
20:52:65:02:fe:20:37:a3:7e:fd:98:91:77:06:39:29:f5:31:
bc:2d:0b:03:d5:30:bf:4f:ad:c1:31:a4:1f:37:77:5c:a5:df:
f5:3b:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:21:39 2025 by rpki-client