Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4MwoWZhysxmaC1EphZaiUujz8r0.roa
File: 4MwoWZhysxmaC1EphZaiUujz8r0.roa (raw, json)
Hash identifier: GS6W96m+kVo0a0IQEalcE0oZb7VWlotgayHYrl3F4Uw=
Subject key identifier: E0:CC:28:59:98:72:B3:19:9A:0B:51:29:85:96:A2:52:E8:F3:F2:BD
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019707446FAD634F2B5CE68229A283D6B41E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4MwoWZhysxmaC1EphZaiUujz8r0.roa
Signing time: Sun 25 May 2025 11:46:54 +0000
ROA not before: Sun 25 May 2025 11:46:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 5.57.38.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
178.239.145.0/24 maxlen: 24
178.239.146.0/24 maxlen: 24
185.215.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 14:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:44:6f:ad:63:4f:2b:5c:e6:82:29:a2:83:d6:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 25 11:46:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0cc28599872b3199a0b51298596a252e8f3f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:d5:ff:48:73:c8:d7:47:ef:2c:b4:87:54:
8d:7c:44:99:73:24:e5:1b:0d:58:2f:19:ce:72:95:
ad:6a:17:5f:3c:fd:7d:e7:4d:c3:e9:52:e8:0b:4b:
36:e1:b3:0f:7c:93:99:db:cf:88:f3:90:5d:62:05:
86:45:e4:83:f1:e8:a1:17:16:ea:63:1d:45:b7:ad:
29:06:46:3c:3c:71:dd:a6:f0:9e:cc:35:6c:40:02:
93:cc:be:eb:9e:85:34:ca:f3:fb:79:f7:b8:16:97:
15:8f:17:b7:f1:ab:60:53:7f:ee:24:ee:57:22:b6:
c6:ec:b7:d1:bf:ca:9f:2f:d5:c9:b6:ba:b7:8f:e9:
ab:2b:37:4f:8c:24:ce:a9:7c:12:c0:d2:e3:6b:e8:
01:62:fc:36:5a:a0:25:25:5b:99:a9:d6:ed:52:25:
84:46:65:60:e5:46:4a:4d:01:0c:7b:ec:c0:b4:64:
02:a8:89:e5:7e:f2:78:2f:8b:6e:30:94:3a:12:a8:
93:00:a3:48:ce:8b:ed:b8:0f:b8:17:b2:56:a8:4d:
cd:10:d9:64:35:eb:2e:ba:00:aa:2d:d7:89:aa:cd:
67:21:f7:08:91:ec:75:6b:8b:45:51:b1:7a:7e:22:
c5:a9:3f:cf:71:7b:d4:17:07:64:b0:19:4b:1a:f7:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:28:59:98:72:B3:19:9A:0B:51:29:85:96:A2:52:E8:F3:F2:BD
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4MwoWZhysxmaC1EphZaiUujz8r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.38.0/24
37.32.47.0/24
178.239.145.0-178.239.146.255
185.215.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4a:35:c4:be:83:87:c4:96:3a:9d:05:69:38:41:15:a1:3c:
a6:0d:49:71:a0:01:44:b1:75:45:3c:f9:9c:d5:c5:f9:5f:7d:
ca:06:c7:06:64:3f:7a:ef:80:4c:b4:96:7f:58:83:ef:3f:2a:
70:8a:78:1d:94:46:ac:7d:bb:34:71:8f:04:b5:9c:60:4a:4f:
85:9f:40:4f:37:7c:8f:7a:b5:d4:96:cd:78:e4:53:45:d7:56:
ee:6e:5b:fe:3e:30:ed:a1:aa:eb:e2:ea:5b:8d:ea:f6:32:e4:
a2:fa:be:07:7a:6d:ce:8c:24:98:3e:a8:10:29:61:6e:4f:9a:
b6:e5:9d:f8:70:34:77:18:e0:d8:4a:89:54:1a:d5:e1:c8:59:
26:d6:e3:df:81:57:34:4b:25:5b:39:5a:a8:9a:2b:6a:ac:e1:
f9:69:4e:38:ae:ca:23:fb:8f:96:b9:d9:89:77:9d:8c:95:71:
b2:6a:b8:95:5e:b0:8b:d9:cb:54:ee:66:e6:07:91:05:e1:0d:
08:17:bf:c4:81:38:a6:a6:c8:37:f7:6c:58:ab:2a:2c:65:30:
49:31:55:f0:0f:06:29:8e:55:b4:b6:c8:a4:5f:7c:6f:0a:e7:
d8:4c:ac:15:e0:20:66:ec:fb:10:bf:4e:9d:ea:8b:02:4d:be:
b7:5f:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:11:08 2025 by rpki-client