Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4lv3qnHdWYqt3JaEn20gXC4EM7w.roa
File: 4lv3qnHdWYqt3JaEn20gXC4EM7w.roa (raw, json)
Hash identifier: MXsWx2ngMggw+Esld+MWqvRQYP3bievxW9erCHxjsOU=
Subject key identifier: E2:5B:F7:AA:71:DD:59:8A:AD:DC:96:84:9F:6D:20:5C:2E:04:33:BC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197A6A59CE2FF10D8D8531CF1EB36E4B2C9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4lv3qnHdWYqt3JaEn20gXC4EM7w.roa
Signing time: Wed 25 Jun 2025 10:32:40 +0000
ROA not before: Wed 25 Jun 2025 10:32:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:a5:9c:e2:ff:10:d8:d8:53:1c:f1:eb:36:e4:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 25 10:32:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25bf7aa71dd598aaddc96849f6d205c2e0433bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:4d:88:73:52:47:00:e8:97:1b:b8:8d:9b:
66:b0:c6:52:4f:a1:0e:67:3b:bb:db:dd:0f:62:16:
45:3c:f4:86:3a:62:cc:7e:8e:31:9a:4b:04:1e:5e:
01:e4:6f:7e:a7:21:fa:bb:61:e5:d2:06:4b:20:01:
6c:c6:e6:e3:0b:dc:4b:3f:5b:80:00:79:ff:88:38:
00:71:83:cc:93:12:f6:6c:50:45:63:07:08:8c:36:
c9:1d:48:05:a6:51:56:65:44:03:45:6c:e6:9e:b3:
33:4d:5e:eb:04:73:a8:c2:99:96:b8:70:f4:df:0f:
c6:98:f3:32:d2:9b:3d:de:43:ef:bd:86:7b:85:1b:
bf:2a:14:be:29:b4:54:0b:db:5d:28:d4:7a:a8:12:
8c:06:da:b9:50:98:9f:f9:af:6b:e6:75:85:c5:0b:
99:1c:2c:e5:f6:4c:e6:b1:8d:62:ea:d1:4f:72:45:
b4:5f:fe:7b:60:2b:82:bf:ea:dc:a5:93:58:1f:94:
a3:5d:01:5a:a6:c9:eb:de:ad:be:4e:5d:8f:b0:0a:
be:21:03:a7:e9:9f:07:36:54:93:fe:1c:7b:ff:6a:
7a:b2:0f:cc:23:78:82:aa:91:48:09:a2:c3:d2:5f:
06:cc:4a:50:4e:97:be:fb:b1:41:ab:4c:b1:08:f3:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:F7:AA:71:DD:59:8A:AD:DC:96:84:9F:6D:20:5C:2E:04:33:BC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4lv3qnHdWYqt3JaEn20gXC4EM7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.231.30.0/24
5.231.94.0/24
77.90.54.0/24
87.239.131.0/24
94.249.233.0/24
95.215.34.0/24
185.47.143.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:43:bb:32:c5:55:6e:3d:cf:c0:98:1e:9f:1a:45:5a:bf:d5:
21:2e:7d:49:58:e9:ca:15:9c:b9:13:4b:38:f2:22:23:76:2f:
d7:0d:c6:ea:fc:0a:13:c0:59:ac:c8:3c:b2:44:f7:ff:3e:07:
e0:1c:92:2f:80:4b:7e:17:0e:a2:78:38:d4:9c:0c:8f:35:14:
58:07:bd:e8:6b:a6:d6:02:aa:7d:f0:8b:ba:20:7b:50:93:46:
22:bc:45:8e:2f:f5:96:7f:c2:65:cc:38:c9:36:29:ba:3c:6a:
53:4c:db:5d:96:01:33:f2:9c:70:6b:68:62:53:ec:28:61:d3:
cd:5f:c8:c9:94:10:c6:88:e8:8f:59:f0:8b:d3:9d:ee:a8:a3:
d4:94:41:8e:32:f8:2c:aa:ff:20:18:af:95:52:c4:52:45:72:
c1:00:eb:46:98:d7:55:7d:60:5f:a5:6d:82:be:a6:53:3d:ea:
79:96:65:2f:16:9b:12:38:c1:41:02:97:4b:64:26:80:c6:ee:
34:be:10:c8:4a:14:3a:ca:95:fa:57:79:d8:51:87:27:ef:75:
87:2f:d8:a5:1e:90:63:7d:12:16:aa:38:a9:3b:b5:b7:9c:c0:
d8:c0:e5:a3:5d:4e:bf:c1:9c:77:de:6c:88:52:42:50:87:58:
01:76:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:58:09 2025 by rpki-client