Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/5OTO7IkMv291hJcYui-36RgdmR0.roa
File: 5OTO7IkMv291hJcYui-36RgdmR0.roa (raw, json)
Hash identifier: fan+5G3sNvSv++0ChoSqNEPk+vjCUqnIqyfHgPukjHY=
Subject key identifier: E4:E4:CE:EC:89:0C:BF:6F:75:84:97:18:BA:2F:B7:E9:18:1D:99:1D
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 0196D8AA6F89CD141E8B6E0D57706ACCE8A0
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/5OTO7IkMv291hJcYui-36RgdmR0.roa
Signing time: Fri 16 May 2025 10:36:10 +0000
ROA not before: Fri 16 May 2025 10:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208666
IP address blocks: 31.193.185.0/24 maxlen: 24
83.229.2.0/24 maxlen: 24
147.236.164.0/24 maxlen: 24
147.236.165.0/24 maxlen: 24
213.255.192.0/24 maxlen: 24
216.150.30.0/23 maxlen: 23
2a09:b300::/29 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 15:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:aa:6f:89:cd:14:1e:8b:6e:0d:57:70:6a:cc:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: May 16 10:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4e4ceec890cbf6f75849718ba2fb7e9181d991d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:46:b9:18:d0:ce:fb:2f:2f:69:fc:45:fb:6c:
88:ea:09:e2:c9:2a:79:dd:e9:07:4b:80:ba:8a:94:
1a:d8:ba:1b:4d:0f:26:ea:d8:8b:65:79:9a:1b:f6:
1f:42:d4:dc:22:c4:d6:09:09:ec:5c:7e:7b:31:ef:
ce:26:15:27:3e:58:be:7c:75:64:d6:b8:47:bb:e2:
3b:da:b4:0d:63:4a:d5:8a:e1:49:25:a8:84:3a:73:
da:67:e9:66:84:68:25:04:df:9c:a0:30:cd:fb:2c:
59:2e:71:f4:1a:f1:57:ea:a4:c0:d6:66:66:77:7a:
79:1c:23:3b:64:e3:56:44:25:fd:73:95:72:7c:94:
6b:c1:53:62:d1:f3:2a:12:07:47:df:f4:eb:33:15:
8a:70:d1:e9:b0:4a:15:58:9e:97:fe:8d:a9:35:0b:
6e:ef:18:a8:bb:9a:f7:d6:28:d6:45:5d:86:4c:4f:
98:f2:87:98:e4:48:ff:75:fa:f9:4e:87:ee:49:5a:
fa:6b:1e:5c:7d:ae:8f:88:c2:27:b1:47:73:5d:46:
76:ff:1a:7a:1d:d6:28:39:b6:30:f1:d5:1f:ff:75:
9e:65:9b:63:1e:cb:33:00:f6:d2:ef:c7:70:25:73:
b0:9a:84:bd:38:d3:8b:ad:b0:7d:e2:62:45:d2:02:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:CE:EC:89:0C:BF:6F:75:84:97:18:BA:2F:B7:E9:18:1D:99:1D
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/5OTO7IkMv291hJcYui-36RgdmR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.185.0/24
83.229.2.0/24
147.236.164.0/23
213.255.192.0/24
216.150.30.0/23
IPv6:
2a09:b300::/29
Signature Algorithm: sha256WithRSAEncryption
98:d7:cf:a9:7d:8c:83:c7:0c:9f:00:e0:70:c4:93:16:9d:52:
17:44:9f:1f:5c:27:93:68:82:a7:36:e0:a0:fd:fb:a9:25:90:
c8:2e:81:c3:a2:df:b0:74:30:8a:11:ec:50:52:e5:d5:e5:b6:
53:8c:83:58:7b:00:0a:f5:bd:ec:92:51:60:aa:e6:c0:3a:63:
8b:b4:b6:19:f2:e0:b9:5d:11:83:e7:dd:71:24:c4:ed:51:07:
3e:dc:01:c6:7c:19:45:b7:d4:be:74:26:31:c5:bd:93:6b:3e:
44:39:1f:c7:5d:9f:52:43:44:7f:2c:d2:f5:53:ac:54:9f:41:
28:36:64:55:20:01:c1:58:0b:ac:50:72:b3:c1:16:6d:e3:5b:
4f:e7:7b:a8:64:53:ad:f5:60:3a:ce:fd:ee:db:91:a3:46:0e:
04:9d:fa:16:46:bb:45:fa:db:bd:6d:6c:8f:fe:09:4b:d1:ee:
63:af:0a:20:ce:43:77:69:6c:ef:a4:c8:3f:5d:10:a4:cc:ea:
4b:c5:88:bf:22:26:b6:58:48:29:9f:ae:42:97:4a:a4:34:24:
f4:2f:d5:3e:c8:2d:5a:f3:dd:25:cc:0f:a3:56:e3:68:50:34:
73:f4:85:53:31:d1:58:fc:27:ab:d6:dc:fb:44:c6:a1:f1:5d:
cb:cf:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:45:33 2025 by rpki-client