Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4Kuo7uzlWpz8pYLSLSeJOPL_XME.roa
File: 4Kuo7uzlWpz8pYLSLSeJOPL_XME.roa (raw, json)
Hash identifier: Dd/VxO4hYy0X4ZFV+GAUaYFAfwdQ6J2e8ikyjZfSbvg=
Subject key identifier: E0:AB:A8:EE:EC:E5:5A:9C:FC:A5:82:D2:2D:27:89:38:F2:FF:5C:C1
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0196A385B2C7712E29D1A7FD65A60109C341
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4Kuo7uzlWpz8pYLSLSeJOPL_XME.roa
Signing time: Tue 06 May 2025 02:56:10 +0000
ROA not before: Tue 06 May 2025 02:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
45.248.52.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
94.154.182.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
162.218.90.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 13:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:85:b2:c7:71:2e:29:d1:a7:fd:65:a6:01:09:c3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 6 02:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0aba8eeece55a9cfca582d22d278938f2ff5cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:fc:ae:e0:c0:9b:ce:c6:c3:ad:4d:76:a3:
9c:92:f9:6b:3b:cf:7a:ff:ae:16:bd:24:6e:4c:b4:
db:b4:7b:cf:d2:05:00:d6:cc:2d:6c:a0:c2:bc:57:
3f:f3:df:63:9f:ab:31:68:49:dd:de:d5:5b:90:10:
51:f3:1b:7c:9e:4d:14:01:e4:b6:ad:09:46:c9:94:
0d:91:9f:08:92:53:ef:14:8b:be:cd:fb:b1:6c:cd:
c3:a3:11:c2:16:e2:1c:9e:84:29:40:1a:6e:1d:ab:
70:cf:ba:6e:d4:5c:1f:e5:d2:8f:54:5a:8a:58:55:
d5:4b:4e:f6:07:9d:e4:94:20:3f:67:11:e6:05:71:
59:25:5e:66:b8:5a:9b:78:a0:42:f4:c7:0a:78:39:
2e:25:62:b6:73:f4:9d:9c:09:68:45:27:cf:c1:cb:
d1:37:e4:e7:a4:c6:85:62:e8:ef:91:c6:ce:cf:ec:
3e:28:d9:02:00:1c:72:ff:2e:00:1c:ca:19:c6:ee:
a8:3d:75:3b:8c:28:e9:b4:e1:e3:7d:5e:b9:e1:d2:
f3:bf:92:e4:c0:76:23:43:2b:8e:06:63:be:ae:09:
36:15:f8:b0:55:ba:26:ec:f1:97:3d:c1:c5:74:00:
9b:a5:4f:db:33:f0:b2:dd:b4:a9:f4:c0:1a:84:96:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:A8:EE:EC:E5:5A:9C:FC:A5:82:D2:2D:27:89:38:F2:FF:5C:C1
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4Kuo7uzlWpz8pYLSLSeJOPL_XME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.248.52.0/24
92.249.31.0/24
94.154.182.0/24
147.78.205.0-147.78.206.255
162.218.90.0/24
185.187.212.0/24
185.205.205.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:68:10:5e:91:5f:d6:a7:5e:0a:bf:30:bf:17:a3:04:87:76:
60:9b:0d:38:07:15:2c:bc:a4:76:31:69:74:83:16:8d:d3:ef:
4b:90:84:16:c4:cb:9e:c0:48:9a:11:59:04:96:a6:69:13:4f:
7d:9d:1b:9a:35:05:47:5c:8d:12:0e:9a:69:47:26:55:13:2d:
52:04:bc:79:24:12:48:ff:40:c5:e8:c1:33:f1:d2:1c:93:a6:
1f:fb:b4:7d:84:99:9f:e0:c0:c6:28:c3:96:f5:85:9c:8a:bf:
a6:25:5b:7d:52:8d:c4:cf:10:a1:72:e9:ee:24:aa:0c:3e:56:
5f:fc:f8:5b:0b:fb:e5:6c:f8:1c:38:5a:66:3a:a3:3b:bd:8a:
cb:f3:4f:ff:72:9c:97:94:e6:7a:da:1d:2f:fc:fb:c0:6d:94:
46:fe:80:4e:4f:27:a1:fd:f2:4e:30:0c:a7:2a:b6:68:71:5c:
b5:1c:36:4b:e1:3c:55:be:36:fa:4c:aa:bb:e8:15:50:d7:33:
ed:a5:5e:c6:3f:2c:da:4f:3c:01:29:9c:0b:ca:87:f4:db:05:
81:fe:1c:36:5b:69:78:f9:4d:70:72:4e:73:82:2a:fb:6a:ad:
ac:2b:ae:ff:0f:3a:07:40:cf:2e:ba:56:a3:64:78:96:65:0b:
26:5e:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:40:25 2025 by rpki-client