Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/FZdEGELPM-3iZo-44BCo4vVqBvg.roa
File: FZdEGELPM-3iZo-44BCo4vVqBvg.roa (raw, json)
Hash identifier: MJ2eWVPZaqMdA6AAKhdNIRJitAAt75TwZyRpkNh5Pns=
Subject key identifier: 15:97:44:18:42:CF:33:ED:E2:66:8F:B8:E0:10:A8:E2:F5:6A:06:F8
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0196F709C560CCC6C5BDA2C8476909DAE4FF
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/FZdEGELPM-3iZo-44BCo4vVqBvg.roa
Signing time: Thu 22 May 2025 08:08:54 +0000
ROA not before: Thu 22 May 2025 08:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 84.37.58.0/23 maxlen: 24
84.37.74.0/23 maxlen: 24
84.37.78.0/23 maxlen: 24
84.37.90.0/23 maxlen: 24
84.37.94.0/23 maxlen: 24
84.37.102.0/23 maxlen: 24
84.37.130.0/23 maxlen: 24
84.37.154.0/23 maxlen: 24
84.37.158.0/23 maxlen: 24
84.37.162.0/23 maxlen: 24
84.37.166.0/23 maxlen: 24
84.37.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 09:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:09:c5:60:cc:c6:c5:bd:a2:c8:47:69:09:da:e4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 22 08:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1597441842cf33ede2668fb8e010a8e2f56a06f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:f5:66:a5:a1:5e:f3:48:b9:fa:05:73:41:
58:94:bf:87:ac:ca:7e:de:ee:74:50:b7:c9:ff:e8:
a3:9b:90:0c:a1:f6:3c:42:12:f2:aa:d1:6f:83:77:
1a:13:35:fc:df:a7:1b:5f:3a:2b:8c:a6:b7:e7:62:
b7:20:0c:ed:21:2b:03:2a:cf:f8:1e:8c:aa:27:d5:
6d:b6:4d:9f:0a:e1:ca:f8:60:94:9c:3f:8a:22:05:
f5:77:23:44:25:1d:a3:9f:e1:d3:52:85:51:6f:e3:
48:b5:1a:7e:79:56:cf:44:c2:e4:a1:df:12:d5:7d:
1b:29:61:37:e0:66:92:17:98:0d:0b:ae:3e:fd:e9:
99:3a:ec:26:9a:4d:d2:3a:44:92:60:ef:fd:02:43:
03:2c:d2:ec:e7:65:02:38:39:cb:23:46:c1:0e:dc:
f1:d6:9d:e9:05:d3:81:98:cd:26:49:4a:3f:1f:d2:
79:77:92:fb:1d:82:ff:5b:14:f8:af:b9:33:21:19:
0a:6c:0e:a2:09:3d:00:6b:45:32:22:f3:11:5a:f7:
52:e2:ca:6a:72:29:c3:24:f7:fe:7e:5f:b0:d2:62:
2f:d9:52:15:a7:1a:22:40:c0:9b:4e:6e:54:f2:7f:
80:c9:b1:c1:73:44:01:2a:9d:a5:c4:d5:9d:a6:ce:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:44:18:42:CF:33:ED:E2:66:8F:B8:E0:10:A8:E2:F5:6A:06:F8
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/FZdEGELPM-3iZo-44BCo4vVqBvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.58.0/23
84.37.74.0/23
84.37.78.0/23
84.37.90.0/23
84.37.94.0/23
84.37.102.0/23
84.37.130.0/23
84.37.154.0/23
84.37.158.0/23
84.37.162.0/23
84.37.166.0/23
84.37.174.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:3e:09:f2:ac:b8:c1:bd:80:d2:39:38:00:2e:81:b7:c5:22:
da:05:e0:08:a3:13:2d:d6:20:e6:80:1e:55:c9:9f:1d:12:e9:
34:f2:81:9e:db:6f:e7:a1:d1:f3:97:e2:a9:cf:45:84:c4:54:
82:8d:74:be:38:7b:0e:f6:08:47:f7:c9:49:49:0b:de:42:4d:
94:02:82:2c:e4:b7:78:f6:27:78:02:fc:ff:c5:7a:95:a4:61:
0d:27:91:72:5d:a5:6a:7f:1e:b7:81:cc:f4:8b:44:79:d8:42:
93:de:6b:e8:ac:5b:62:67:68:38:32:59:4a:ec:4f:00:67:e9:
d7:9a:7e:f3:19:70:df:c9:a3:a1:03:ed:45:ea:b6:11:cd:c0:
30:94:86:7d:4a:fb:2e:ab:56:3f:9e:4d:f4:d8:6a:82:0c:d0:
66:e2:fd:d5:3e:55:10:5b:9b:06:66:66:a3:9a:96:c4:d4:cc:
73:29:fe:29:32:a4:14:f0:36:d2:f6:0d:1c:dc:6b:3c:dc:45:
53:5c:f3:7d:f5:94:e9:e7:a2:d5:6f:c6:93:d0:ec:09:99:ac:
1c:05:ff:99:56:d5:75:34:04:15:26:fb:9a:18:2a:40:90:75:
30:5f:ff:7c:a9:8a:bb:c8:28:24:2e:16:ce:37:78:a2:e8:22:
7b:b0:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:36:26 2025 by rpki-client