Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gKtUa2Xl4eyPdMW_ufzVAZmEhH4.roa
File: gKtUa2Xl4eyPdMW_ufzVAZmEhH4.roa (raw, json)
Hash identifier: ABI55WJg1I562sGC+89LIqHNj+zNj9//EJ50+gmh7eU=
Subject key identifier: 80:AB:54:6B:65:E5:E1:EC:8F:74:C5:BF:B9:FC:D5:01:99:84:84:7E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0197F8D79A227E01F111FD1914E43046C507
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gKtUa2Xl4eyPdMW_ufzVAZmEhH4.roa
Signing time: Fri 11 Jul 2025 09:36:08 +0000
ROA not before: Fri 11 Jul 2025 09:36:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.182.115.0/24 maxlen: 24
77.242.146.0/23 maxlen: 24
83.137.153.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 06:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:d7:9a:22:7e:01:f1:11:fd:19:14:e4:30:46:c5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 11 09:36:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ab546b65e5e1ec8f74c5bfb9fcd5019984847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:d9:4a:ed:1e:6f:83:61:1e:52:c5:c2:6d:
8f:eb:a7:d1:a3:8e:88:99:f1:71:1c:b7:9e:1b:2e:
b7:79:61:93:56:45:b2:ef:48:d8:69:b5:3e:df:b1:
a8:a5:7d:8d:63:ff:bc:da:9d:01:2b:3e:50:c5:b1:
a6:eb:ee:a6:e1:d8:96:34:ae:31:33:18:f8:cf:9c:
70:b8:df:a3:ad:99:75:74:b8:95:c8:d1:ac:e7:d4:
c7:6b:ec:37:6c:f3:30:21:90:1d:85:75:15:21:7b:
9d:10:82:68:52:1a:db:e8:38:48:21:d7:2b:2c:4e:
05:60:42:ab:2a:04:1b:c8:d8:f9:2b:a6:1a:5f:cd:
5e:9e:c7:d8:2b:f7:a0:72:41:a2:de:f4:22:d3:03:
5c:7c:b0:d4:b1:63:10:77:9a:ed:49:50:3b:9e:82:
e6:bb:4e:93:93:57:fd:a9:bc:9f:1c:0e:9a:3b:9d:
70:85:1d:a3:50:b6:f1:0c:7f:b9:bc:66:01:48:e5:
28:af:1e:e4:c2:c6:eb:cb:69:ac:75:7a:a0:d3:85:
88:16:14:33:43:db:2d:5c:02:41:5a:4a:ab:29:02:
9d:86:0b:4d:bb:17:12:5c:43:01:d6:dc:d6:02:56:
46:33:74:63:1f:e9:8f:20:0f:89:ee:93:7e:b8:68:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AB:54:6B:65:E5:E1:EC:8F:74:C5:BF:B9:FC:D5:01:99:84:84:7E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/gKtUa2Xl4eyPdMW_ufzVAZmEhH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
77.242.146.0/23
83.137.153.0/24
88.151.56.0/23
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b7:c4:c7:b1:bd:57:3b:3c:c7:05:a1:bd:60:df:3e:82:18:
02:53:64:8d:f8:e3:86:84:c7:70:50:0c:79:77:88:aa:0c:f4:
e0:73:2b:c3:43:99:ed:21:6c:bf:27:3d:9f:0c:6e:2f:d6:57:
a8:50:28:1d:35:f1:4a:c0:46:28:c3:1e:4e:86:3e:83:06:5a:
92:b0:3a:23:4b:a9:e1:87:28:5b:22:89:cc:11:70:d4:27:3e:
1f:ae:81:9a:4a:3f:4a:4b:45:2f:0e:a4:88:45:b0:67:e5:2c:
a8:67:d9:14:3d:81:fe:0e:b9:14:32:e1:57:c9:ed:9f:1d:9a:
0d:db:c0:e1:52:70:a1:4b:ef:e6:ec:87:4e:bd:54:6a:ca:b4:
18:7b:05:ce:73:ba:a7:65:dd:c1:19:cc:c7:46:a0:5e:aa:7d:
00:40:21:a7:d6:70:f1:c9:55:5a:0a:7d:63:b9:8a:4d:cc:44:
55:b2:a6:8c:f3:a4:5d:7c:ef:78:03:65:3a:0e:b9:f5:92:0a:
0e:04:c3:ef:59:35:1d:4d:a4:d8:21:26:a1:06:e8:30:25:9e:
f3:e4:cb:5f:81:ba:0a:56:0e:13:b8:20:de:c3:54:a3:7a:3d:
18:73:b4:1c:3b:3e:30:c2:d2:44:9d:15:3d:e3:4c:49:4c:ec:
14:1c:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:35:38 2025 by rpki-client