Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/b5n5OoMWuINQ3lwDTUeziD6CjHs.roa
File: b5n5OoMWuINQ3lwDTUeziD6CjHs.roa (raw, json)
Hash identifier: zbZU+Q6CpqLrNWulyIZZFHxROja/i4lR/jvySeChbxI=
Subject key identifier: 6F:99:F9:3A:83:16:B8:83:50:DE:5C:03:4D:47:B3:88:3E:82:8C:7B
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0196F70C844D74C5DB3A4D287997BB242D73
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/b5n5OoMWuINQ3lwDTUeziD6CjHs.roa
Signing time: Thu 22 May 2025 08:11:54 +0000
ROA not before: Thu 22 May 2025 08:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 84.37.0.0/23 maxlen: 24
84.37.6.0/23 maxlen: 24
84.37.18.0/23 maxlen: 24
84.37.26.0/23 maxlen: 24
84.37.30.0/23 maxlen: 24
84.37.56.0/23 maxlen: 24
84.37.60.0/23 maxlen: 24
84.37.72.0/21 maxlen: 24
84.37.76.0/23 maxlen: 24
84.37.88.0/23 maxlen: 24
84.37.92.0/23 maxlen: 24
84.37.96.0/23 maxlen: 24
84.37.100.0/23 maxlen: 24
84.37.128.0/23 maxlen: 24
84.37.152.0/23 maxlen: 24
84.37.156.0/23 maxlen: 24
84.37.160.0/23 maxlen: 24
84.37.164.0/23 maxlen: 24
84.37.172.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 09:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:0c:84:4d:74:c5:db:3a:4d:28:79:97:bb:24:2d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 22 08:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f99f93a8316b88350de5c034d47b3883e828c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:a1:27:c9:b4:30:24:09:16:87:7a:b3:1c:
e4:e6:4a:ed:52:cf:91:d6:7c:27:04:ac:23:f6:7c:
d9:ab:1c:35:bf:ce:ed:89:ef:26:98:22:84:54:2f:
cd:f8:80:aa:5c:5d:ac:9b:21:72:13:4f:37:69:15:
e2:82:88:bd:bf:0b:89:22:c5:23:45:0d:cb:52:bb:
1a:3d:76:81:49:22:5c:ca:db:34:31:7d:e5:93:8e:
f4:2b:01:c4:10:47:b6:42:b7:23:9d:1d:ba:ea:11:
7f:5e:3b:8d:cb:0d:24:b7:2b:36:82:70:71:f2:47:
12:f7:4e:25:d1:00:f0:5f:45:3d:ea:9b:06:bb:55:
46:55:dc:12:12:3a:21:62:da:43:c7:ff:f3:75:04:
68:06:1d:3b:f5:1e:87:6f:28:7f:59:e8:c5:2d:06:
81:a7:76:e8:a5:ed:5c:88:aa:3c:df:16:d0:af:7d:
85:62:10:78:7e:1f:eb:dd:64:d7:e3:8f:0d:fc:e3:
f1:7b:b3:b3:d8:0a:58:f1:c7:d7:ee:9f:4c:45:36:
9f:c0:05:4f:e6:86:d8:5f:e4:88:ff:d7:56:08:fc:
68:41:3f:4f:9d:ed:7a:68:a2:e7:8b:7c:15:98:17:
a1:46:0e:42:2c:57:eb:8c:80:cf:3c:ae:ae:a2:d3:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:F9:3A:83:16:B8:83:50:DE:5C:03:4D:47:B3:88:3E:82:8C:7B
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/b5n5OoMWuINQ3lwDTUeziD6CjHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.0.0/23
84.37.6.0/23
84.37.18.0/23
84.37.26.0/23
84.37.30.0/23
84.37.56.0/23
84.37.60.0/23
84.37.72.0/21
84.37.88.0/23
84.37.92.0/23
84.37.96.0/23
84.37.100.0/23
84.37.128.0/23
84.37.152.0/23
84.37.156.0/23
84.37.160.0/23
84.37.164.0/23
84.37.172.0/23
Signature Algorithm: sha256WithRSAEncryption
95:f1:e8:50:2c:72:ba:cc:3f:de:ea:db:c8:59:03:f8:4c:8d:
92:5f:4a:f0:55:c3:ed:00:87:5b:88:72:85:a0:aa:b8:91:dc:
d4:5f:00:b0:db:79:d4:3f:06:05:f0:6a:a6:57:a1:6a:2e:c2:
bb:de:66:15:36:86:8f:ed:07:56:fe:d2:7a:56:09:f0:40:47:
ea:67:4c:65:ea:2b:26:51:bc:d6:09:6a:1f:ac:bb:8a:82:fd:
1c:57:36:19:fd:03:eb:ee:35:58:34:87:3b:11:e3:53:00:24:
1d:37:a9:9a:b3:3f:05:97:18:c0:77:bf:b6:88:81:6c:8d:3a:
db:75:db:35:6d:b7:7b:c5:5c:a2:03:67:27:88:cb:cc:23:07:
48:53:71:7e:c8:f9:64:25:8f:89:48:f7:d1:81:56:14:c5:a3:
c0:ec:28:88:f6:5d:5b:a2:d6:45:42:2a:86:aa:27:11:b2:66:
df:78:90:06:4b:97:8d:fb:44:cb:e1:95:38:2a:27:09:83:62:
de:e2:e6:26:4f:17:7c:dc:06:28:e7:a0:5c:8c:8c:ed:b2:c4:
75:ad:35:9a:ab:8f:8c:a4:97:42:27:06:e9:db:34:11:0c:6d:
17:57:f5:38:33:1f:53:35:a8:b0:78:16:7f:9f:6b:6e:49:c9:
c7:ec:65:27
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZb3DIRNdMXbOk0oeZe7JC1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjUwNTIyMDgxMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjk5ZjkzYTgzMTZiODgzNTBkZTVjMDM0ZDQ3YjM4ODNlODI4YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmihJ8m0MCQJFod6sxzk5krtUs+R
1nwnBKwj9nzZqxw1v87tie8mmCKEVC/N+ICqXF2smyFyE083aRXigoi9vwuJIsUj
RQ3LUrsaPXaBSSJcyts0MX3lk470KwHEEEe2QrcjnR266hF/XjuNyw0ktys2gnBx
8kcS904l0QDwX0U96psGu1VGVdwSEjohYtpDx//zdQRoBh079R6Hbyh/WejFLQaB
p3bope1ciKo83xbQr32FYhB4fh/r3WTX448N/OPxe7Oz2ApY8cfX7p9MRTafwAVP
5obYX+SI/9dWCPxoQT9Pne16aKLni3wVmBehRg5CLFfrjIDPPK6uotNAnwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFG+Z+TqDFriDUN5cA01Hs4g+gox7MB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvYjVuNU9vTVd1SU5RM2x3RFRVZXppRDZDakhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAVQlAAME
AVQlBgMEAVQlEgMEAVQlGgMEAVQlHgMEAVQlOAMEAVQlPAMEA1QlSAMEAVQlWAME
AVQlXAMEAVQlYAMEAVQlZAMEAVQlgAMEAVQlmAMEAVQlnAMEAVQloAMEAVQlpAME
AVQlrDANBgkqhkiG9w0BAQsFAAOCAQEAlfHoUCxyusw/3urbyFkD+EyNkl9K8FXD
7QCHW4hyhaCquJHc1F8AsNt51D8GBfBqplehai7Cu95mFTaGj+0HVv7SelYJ8EBH
6mdMZeorJlG81glqH6y7ioL9HFc2Gf0D6+41WDSHOxHjUwAkHTepmrM/BZcYwHe/
toiBbI0623XbNW23e8VcogNnJ4jLzCMHSFNxfsj5ZCWPiUj30YFWFMWjwOwoiPZd
W6LWRUIqhqonEbJm33iQBkuXjftEy+GVOConCYNi3uLmJk8XfNwGKOegXIyM7bLE
da01mquPjKSXQicG6ds0EQxtF1f1ODMfUzWosHgWf59rbknJx+xlJw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:27 2025 by rpki-client