Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/SgHaSkeg71bn-S3S0tkJfMcF0NU.roa
File: SgHaSkeg71bn-S3S0tkJfMcF0NU.roa (raw, json)
Hash identifier: 1WPsKwfAOhgKByDBMQMZNamh8OtD8AakLw/WTjVlseU=
Subject key identifier: 4A:01:DA:4A:47:A0:EF:56:E7:F9:2D:D2:D2:D9:09:7C:C7:05:D0:D5
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019705EEF189E436877A6D4495B4378B2C4E
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/SgHaSkeg71bn-S3S0tkJfMcF0NU.roa
Signing time: Sun 25 May 2025 05:33:54 +0000
ROA not before: Sun 25 May 2025 05:33:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 95.38.144.0/23 maxlen: 23
95.38.144.0/24 maxlen: 24
95.38.145.0/24 maxlen: 24
95.38.147.0/24 maxlen: 24
95.38.148.0/22 maxlen: 22
95.38.148.0/23 maxlen: 23
95.38.148.0/24 maxlen: 24
95.38.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 06:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:05:ee:f1:89:e4:36:87:7a:6d:44:95:b4:37:8b:2c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: May 25 05:33:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a01da4a47a0ef56e7f92dd2d2d9097cc705d0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:62:60:a0:ab:4e:c4:63:b5:79:67:e3:68:
0f:50:cc:71:ee:7c:b7:01:63:1b:43:e7:3a:30:e0:
c0:04:f9:fa:57:bf:dc:32:a7:b6:19:a1:73:b1:82:
bc:09:46:1d:f5:25:21:45:04:fd:fb:3e:1c:98:f6:
94:ff:c9:28:a5:c5:ea:96:04:9e:6d:d6:8d:1a:52:
a1:85:a9:61:e0:06:5b:4f:22:d0:4f:85:5b:1d:7e:
5d:3d:9e:ab:50:e5:83:17:b0:ea:64:18:ea:b9:eb:
fe:9d:c7:de:33:d8:c7:ea:96:63:af:ea:07:ee:51:
10:32:55:6c:1b:36:27:e1:81:64:b3:2d:49:78:8e:
ef:a6:2f:3d:b9:7a:dc:3a:b9:7e:01:96:01:ef:74:
a1:25:2e:cc:ec:26:3c:73:33:0e:01:e0:22:20:dc:
07:26:b5:09:03:8c:64:1b:95:d5:2a:b4:27:a2:0d:
51:70:ce:6f:80:52:a2:c5:b1:c6:0f:a3:65:00:a0:
07:e3:90:95:c7:4f:0d:78:2a:4a:0e:f3:87:f1:12:
07:2b:99:c2:39:e5:2d:d8:ce:8e:66:72:b2:20:2d:
f4:6c:1c:46:bb:e1:7d:0f:d2:78:41:cd:00:0f:ce:
7e:5b:83:55:31:0a:e5:ef:57:7d:fa:2b:8f:ad:38:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:01:DA:4A:47:A0:EF:56:E7:F9:2D:D2:D2:D9:09:7C:C7:05:D0:D5
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/SgHaSkeg71bn-S3S0tkJfMcF0NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.144.0/23
95.38.147.0-95.38.151.255
Signature Algorithm: sha256WithRSAEncryption
1a:ad:80:66:ff:25:c4:b5:1a:14:d3:7f:07:b0:83:87:1a:3e:
83:02:ec:20:ec:03:e7:a5:5d:ea:fc:b8:cd:7f:14:9b:53:75:
2a:da:09:30:c0:33:53:70:12:12:f3:43:0e:6f:65:99:87:a3:
81:0f:bf:86:40:ee:ff:cf:0c:ad:39:57:6f:a2:ec:fb:e4:c6:
c2:c7:7a:3f:cc:ff:4f:ad:7d:30:45:69:18:41:73:71:6f:ad:
29:3a:eb:67:d8:8c:a6:7c:82:1c:88:59:24:8e:0b:75:0e:23:
48:f4:b0:84:02:a4:15:54:b2:6d:4a:b9:5b:1b:b3:8c:98:a4:
57:39:e1:f6:59:9f:31:fe:d4:65:09:a6:aa:1d:df:5d:3f:db:
49:e1:c0:e5:89:a2:f7:b2:c0:60:20:2f:fb:09:8a:86:72:82:
de:1a:6d:0e:6f:ea:11:5f:d9:7e:21:4f:ec:a6:90:cd:8f:60:
7d:a9:4c:81:df:7d:3f:da:a5:02:a1:0e:46:5e:ec:95:f9:aa:
0b:1c:75:cd:ac:57:02:c6:75:93:e9:57:ce:1e:63:20:2b:35:
84:f8:75:42:7e:78:c6:5e:6c:55:2c:44:1f:41:2c:49:70:a8:
71:af:77:0c:d7:35:18:ba:1e:21:ac:f8:3d:26:13:b6:d7:f3:
a7:76:0a:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:37:04 2025 by rpki-client