Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/XJlOFWxqynZAahEntg2cPsKTO9k.roa
File: XJlOFWxqynZAahEntg2cPsKTO9k.roa (raw, json)
Hash identifier: v0H6eCTkQgwCKf5iH8J/iXq8wuf1ChUUuRqhOEiGXos=
Subject key identifier: 5C:99:4E:15:6C:6A:CA:76:40:6A:11:27:B6:0D:9C:3E:C2:93:3B:D9
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0196DDD733B788A3646F395D28CF9741262E
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/XJlOFWxqynZAahEntg2cPsKTO9k.roa
Signing time: Sat 17 May 2025 10:43:10 +0000
ROA not before: Sat 17 May 2025 10:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 19:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:d7:33:b7:88:a3:64:6f:39:5d:28:cf:97:41:26:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 17 10:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c994e156c6aca76406a1127b60d9c3ec2933bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:36:0c:79:0a:65:58:d4:d1:69:48:7c:f3:
8f:4c:0c:87:e4:8f:ad:9e:c6:27:13:cc:04:a7:c2:
a2:93:f1:a7:f7:de:a9:e3:1c:06:ea:f5:ba:8a:22:
78:b0:fd:df:be:80:93:83:ec:98:12:80:05:36:f9:
6a:f5:ba:9a:a3:1b:4d:cc:6e:89:2c:53:d6:5d:7e:
13:99:b1:3d:6b:a6:40:ea:ca:7d:7c:7c:5f:66:6a:
f1:a2:64:f4:70:34:86:5e:80:f5:e8:b9:35:2d:e0:
31:56:df:b2:ad:b8:96:b7:f9:b4:ea:c6:e3:ce:77:
f4:08:f1:54:29:87:09:0e:d4:1a:ca:e8:c2:46:f9:
2a:b7:f0:7d:2e:e7:79:39:b3:7a:78:79:93:4a:24:
58:64:b8:91:a6:aa:04:ab:d8:44:d0:34:57:1a:b0:
e5:ff:e9:93:20:1a:c0:93:c1:2a:a4:c4:d6:00:d8:
a8:20:1c:32:82:e9:b2:28:f1:ac:2c:0f:62:56:01:
40:b9:23:a7:1f:14:af:2e:db:6a:1b:83:b7:c3:ff:
99:cb:b2:54:eb:1e:a7:3f:0a:5c:8c:42:e7:fb:97:
42:07:a1:8c:17:63:4e:45:7a:b8:f2:6a:16:4c:27:
31:74:d0:4a:73:80:e9:ef:90:57:73:51:ff:d0:18:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:99:4E:15:6C:6A:CA:76:40:6A:11:27:B6:0D:9C:3E:C2:93:3B:D9
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/XJlOFWxqynZAahEntg2cPsKTO9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.137.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.169.0/24
94.74.171.0/24
94.74.182.0/24
94.74.191.0/24
109.203.163.0/24
176.46.136.0/24
176.46.138.0/23
176.46.141.0-176.46.142.255
176.46.144.0/24
176.46.150.0/24
176.46.152.0/24
176.46.155.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b4:a6:84:ef:4f:7d:f2:28:bf:b9:46:ea:d2:cb:ca:4a:02:
fb:c5:06:6d:30:59:ea:96:75:80:4d:df:dd:8d:26:47:d8:c2:
8e:b9:a4:92:c1:95:ce:68:d2:f8:39:26:26:ad:54:f3:91:19:
97:05:f6:00:e6:95:11:1e:c9:82:b0:2d:06:99:2d:91:6f:f9:
84:dd:03:69:f2:00:51:89:89:28:52:7d:25:e6:98:50:73:ea:
d7:87:21:6e:06:6f:ff:93:6a:54:27:8b:bc:1f:b5:17:5d:bc:
09:49:b5:f1:ff:ee:f5:24:94:6d:49:a7:67:1d:25:cd:9c:3d:
23:1f:6c:e0:05:ef:59:34:cb:be:1f:65:2e:80:13:1b:77:60:
ea:07:e0:44:4d:cc:6b:07:ed:5f:54:ba:58:f9:c6:82:f8:f0:
f7:6c:59:6e:29:cf:a8:9b:06:34:e1:2f:a1:8f:e1:f6:33:b4:
a8:33:dd:b1:fd:20:e7:06:20:60:38:fb:8b:67:e2:5b:57:44:
a3:f7:c9:94:6e:78:d7:98:48:3f:a7:6b:48:25:77:98:12:fb:
ec:1a:44:2d:ce:f8:b2:89:46:10:ee:b1:68:bb:d7:2e:81:0d:
1f:f5:a1:33:9a:83:3c:2a:43:dc:58:25:9a:4f:dc:99:ea:66:
1e:62:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:37:50 2025 by rpki-client