Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6F0bFEJG4qqYz6-YzxEdPZDdZOM.roa
File: 6F0bFEJG4qqYz6-YzxEdPZDdZOM.roa (raw, json)
Hash identifier: NpraIAKnwgrBKNjJe2e4NTRDpG+1lajiOXHAm78BowA=
Subject key identifier: E8:5D:1B:14:42:46:E2:AA:98:CF:AF:98:CF:11:1D:3D:90:DD:64:E3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01955D2F0EF4B6440E38DD98904BF720FF62
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6F0bFEJG4qqYz6-YzxEdPZDdZOM.roa
Signing time: Mon 03 Mar 2025 18:05:19 +0000
ROA not before: Mon 03 Mar 2025 18:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb05::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Mar 2025 12:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:2f:0e:f4:b6:44:0e:38:dd:98:90:4b:f7:20:ff:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 3 18:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e85d1b144246e2aa98cfaf98cf111d3d90dd64e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:29:ab:0f:e8:ab:4b:2f:fa:8d:7d:e8:88:
e0:c9:99:87:1d:7e:bc:fb:1c:92:78:73:25:e6:03:
b9:31:e1:f2:c5:d7:4f:90:3a:03:d1:9d:82:5b:7c:
2a:2a:84:05:10:3a:9f:ae:44:ad:65:15:08:05:f0:
9f:5a:01:f1:61:03:6b:f4:e3:50:70:59:79:a2:33:
a4:02:64:5b:8b:13:ef:66:91:ca:fa:43:c3:ff:6e:
b0:52:79:ee:8e:8e:52:bb:70:54:8d:6d:4a:c7:50:
5d:8d:54:09:eb:de:1c:e7:35:02:69:cb:59:3c:d3:
8a:05:b1:c9:1b:36:ee:ab:9e:c9:08:cb:ee:a4:77:
67:a2:fc:e0:b9:55:2b:a3:c8:56:08:12:c6:5d:dc:
f8:9d:ca:eb:55:63:78:e1:cd:dd:01:d9:26:3c:6c:
f7:1a:d0:e6:a2:5e:57:68:ad:f6:cf:67:2e:4e:ac:
47:06:a2:0e:db:de:af:fd:4f:b3:5d:a4:9c:9e:9d:
fa:c2:36:78:16:27:46:99:c1:d3:ad:9c:db:19:fd:
ee:70:48:b5:e5:43:eb:ed:71:dd:3c:6c:1f:e2:3b:
94:2f:d9:6e:a9:41:be:89:4e:4b:cd:de:03:2e:d8:
40:ae:16:6d:f3:05:7b:b1:d3:e3:e4:89:ba:f3:8f:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:1B:14:42:46:E2:AA:98:CF:AF:98:CF:11:1D:3D:90:DD:64:E3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6F0bFEJG4qqYz6-YzxEdPZDdZOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
54:23:eb:3b:ea:3f:79:50:e5:6c:75:fd:66:4a:41:c1:ad:09:
2b:e6:1c:2f:2f:33:c0:cc:ca:e6:33:a7:db:4a:5b:4e:e8:60:
ca:b3:07:fb:02:74:00:a8:6e:d2:23:d5:d1:50:6d:1c:cf:95:
48:c5:e6:9a:ae:14:34:e7:0a:96:f9:dc:e3:e7:bb:e5:d8:f9:
dd:72:fc:c1:ef:f2:a1:bf:71:78:78:41:3d:89:7d:2f:b0:05:
34:8d:69:95:ae:a4:5e:1b:7e:5c:a9:47:74:bc:e6:8a:e6:cb:
96:6d:b7:dd:1a:d4:78:01:60:8c:70:61:27:8d:33:c0:13:f1:
97:cf:d8:35:7e:f7:a5:8d:7e:c5:1c:f0:6f:5c:ea:6b:6d:32:
f6:ab:fc:83:dc:3d:0b:6a:bc:fb:a1:c1:59:26:a9:98:76:ec:
4d:c0:c9:25:8b:25:30:e5:50:53:3d:fe:f3:59:d6:a9:8e:46:
6e:f8:e5:94:40:f6:1b:69:0c:09:cb:98:0d:0a:bb:a9:1e:44:
ad:99:00:1b:58:3d:54:05:aa:d1:47:30:a6:6c:c1:21:14:45:
1d:9d:32:13:d5:d8:b2:77:c5:2f:14:dc:6b:c3:f8:08:c4:1b:
a1:6a:44:b9:56:b4:e9:b7:3b:af:ce:3f:22:67:5e:48:e8:8e:
fb:2b:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:25 2025 by rpki-client