Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AN7Ldco3gVp_8F8Zqq3wbXZHoG8.roa
File: AN7Ldco3gVp_8F8Zqq3wbXZHoG8.roa (raw, json)
Hash identifier: a3EWwjB6dUAqBA4o5bN104gt95QhBVkL2oPYsHNWetE=
Subject key identifier: 00:DE:CB:75:CA:37:81:5A:7F:F0:5F:19:AA:AD:F0:6D:76:47:A0:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196A0DE61FDAE05D089A20C0D3AFF1103B9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AN7Ldco3gVp_8F8Zqq3wbXZHoG8.roa
Signing time: Mon 05 May 2025 14:34:10 +0000
ROA not before: Mon 05 May 2025 14:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 11:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:de:61:fd:ae:05:d0:89:a2:0c:0d:3a:ff:11:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 5 14:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00decb75ca37815a7ff05f19aaadf06d7647a06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:cc:df:d0:bc:2d:a5:45:c4:4e:7b:b1:00:
25:7c:7d:a4:bf:f9:27:65:a1:8c:4d:17:00:3d:54:
6f:d6:9c:c0:19:07:26:15:81:2c:86:1f:fa:4e:c4:
51:ea:a5:02:6e:40:0d:b7:56:ee:db:f3:fe:93:0d:
03:f4:54:72:12:03:c5:ac:df:c4:ec:b9:0e:00:f0:
f0:e7:40:da:9a:2c:f4:96:41:5c:9e:7e:ea:34:f1:
98:88:2f:61:ad:4a:40:a9:c1:a9:e0:e8:75:54:e1:
b1:b5:f5:0d:b6:65:ae:97:53:c9:41:00:b9:30:6f:
d6:6c:a0:9f:a6:5e:f4:c7:b0:1b:d4:19:1e:80:3f:
d1:cd:01:32:bc:f9:76:c4:51:18:6a:04:5b:84:b5:
c9:ad:d2:3a:fc:6d:89:29:85:b4:5f:8f:b3:aa:bf:
48:f5:5d:f9:3b:bd:cf:d7:97:de:5e:4d:15:c9:94:
e8:74:8a:e7:26:ee:66:e3:f7:fa:ff:d7:af:48:29:
7f:f4:f5:a3:ec:4d:c5:5c:64:39:23:c0:88:7c:4c:
68:de:ac:9c:5a:44:ac:2f:17:0d:b0:03:92:d1:7f:
79:89:fc:10:58:97:32:e0:fe:80:60:a1:3f:7e:b5:
2b:14:7b:13:9c:55:f2:75:16:ae:3e:a5:6a:ca:55:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:CB:75:CA:37:81:5A:7F:F0:5F:19:AA:AD:F0:6D:76:47:A0:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AN7Ldco3gVp_8F8Zqq3wbXZHoG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
77.90.33.0/24
Signature Algorithm: sha256WithRSAEncryption
21:25:aa:b3:66:bc:fb:fb:88:c8:1c:40:4b:4f:37:fb:0c:48:
16:e2:28:f5:a1:44:1a:2a:5e:e7:19:38:2f:16:22:0b:1a:62:
37:22:ae:15:8b:89:bc:cf:bf:99:c7:1c:b4:21:8e:c0:5f:13:
3d:f2:39:33:4d:67:bd:60:7d:c2:7d:2e:ca:36:22:ee:eb:af:
b2:76:77:7b:79:a9:84:3f:1c:88:2f:e9:15:9c:01:7c:07:f5:
e8:66:d6:7e:4a:1d:05:2a:8e:53:f1:3e:f2:25:7d:b1:6f:28:
61:20:6e:b6:77:39:c9:ba:0e:e3:95:de:41:81:1c:e8:83:d7:
8c:52:0d:68:91:9b:fe:be:6b:b2:cd:21:8c:a0:21:c4:ee:59:
ea:e4:d1:5f:e7:57:87:66:39:e5:96:9c:04:80:94:84:5e:60:
20:fa:54:00:26:61:a8:1d:0f:06:5e:db:3c:03:6c:b2:44:6a:
c0:3d:46:91:16:85:0d:01:7c:8c:bd:2b:06:86:cb:c4:e1:35:
91:76:4b:14:65:81:93:2f:b2:36:aa:d7:a0:e8:e8:49:5c:a0:
63:31:fc:45:7d:52:ed:a7:69:8f:3e:0f:1b:4e:c8:f5:34:8a:
44:0b:4e:5c:f3:e7:7b:ea:26:05:d7:6e:39:30:44:68:2c:b6:
8a:30:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:26:46 2025 by rpki-client