Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SxCW0yUsRD8i0SH_dJ_g5WJ5NOQ.roa
File: SxCW0yUsRD8i0SH_dJ_g5WJ5NOQ.roa (raw, json)
Hash identifier: QZCg1gCApO5yDCHPYsQhVqxwI11IQCyNc8Mqhjv0Ve4=
Subject key identifier: 4B:10:96:D3:25:2C:44:3F:22:D1:21:FF:74:9F:E0:E5:62:79:34:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197A84F54A0E2D419E00038875CAE867BC5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SxCW0yUsRD8i0SH_dJ_g5WJ5NOQ.roa
Signing time: Wed 25 Jun 2025 18:17:40 +0000
ROA not before: Wed 25 Jun 2025 18:17:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.231.92.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
94.249.244.0/24 maxlen: 24
94.249.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 01:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:4f:54:a0:e2:d4:19:e0:00:38:87:5c:ae:86:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 25 18:17:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b1096d3252c443f22d121ff749fe0e5627934e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:bb:a0:74:6f:b1:67:61:fb:cc:d2:a3:a7:
02:3f:73:3e:f6:b1:5e:9a:e8:be:ba:d8:1c:4e:fe:
39:07:db:08:64:de:f1:0c:5c:c1:b9:7a:83:b5:76:
79:60:d7:57:e7:11:09:ae:d2:80:ea:c4:2c:a1:ec:
bd:c4:34:91:15:b1:83:b7:9d:d2:f0:47:6c:82:7f:
17:7f:cb:cc:7e:1c:da:0d:d7:4b:a7:ce:c6:7c:f7:
fd:06:4a:56:5a:46:62:4c:be:9d:58:42:2f:d5:dd:
f2:8f:9d:ec:e3:44:bf:53:6a:f0:12:5f:5b:ad:83:
c3:b7:dd:f1:5a:62:ac:e4:e3:be:b0:ca:7b:0f:a8:
e6:c6:3d:02:34:91:09:b8:96:a8:31:85:76:5b:ab:
eb:0b:30:c7:ac:f3:cd:46:98:4e:d5:5e:6a:18:44:
3a:82:6b:1d:70:09:24:35:9d:6a:d6:62:9b:d0:e7:
58:6e:3e:26:38:18:f8:7d:b2:e6:6b:57:76:e1:f6:
a8:0a:81:50:b6:89:f2:06:4a:8f:fd:0e:67:d4:b6:
1d:0c:e1:51:ad:42:1e:15:cb:7c:ba:98:b2:03:b6:
3c:d1:95:cb:ba:38:29:8f:35:cb:7e:00:33:6e:39:
a7:40:a1:f5:ff:ac:5e:e2:22:3b:43:2f:f8:a1:20:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:96:D3:25:2C:44:3F:22:D1:21:FF:74:9F:E0:E5:62:79:34:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SxCW0yUsRD8i0SH_dJ_g5WJ5NOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.92.0/24
5.231.116.0/24
94.249.190.0/24
94.249.195.0/24
94.249.229.0-94.249.230.255
94.249.238.0/23
94.249.244.0/24
94.249.246.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c2:fb:50:ce:67:9d:e2:a9:e1:39:b0:d5:06:7a:01:9f:ef:
78:0b:9c:b0:6a:0f:26:55:2e:50:59:dc:c6:fd:92:fe:11:6b:
6a:95:c1:c3:47:31:1e:1f:e5:94:6a:15:da:a7:1b:24:23:59:
87:5b:2e:41:01:72:5c:eb:4b:14:68:ca:b0:65:15:42:78:8c:
c9:84:18:36:71:80:46:43:a0:86:da:94:29:74:95:16:50:c1:
04:74:2e:bf:6a:21:2f:48:47:c9:66:9f:6c:69:9a:e2:00:81:
e9:9e:0b:90:3d:30:73:26:7c:38:f4:ab:e9:2f:3a:35:db:92:
4b:db:93:f8:04:3b:90:62:d1:18:18:d3:6a:44:75:6f:22:68:
99:b4:d1:42:52:9a:f4:57:72:21:07:77:f1:78:85:5a:8e:02:
34:3b:0d:9c:c5:a4:3e:1c:80:c6:3e:02:2f:13:ee:72:62:9e:
38:f1:ff:d0:2f:53:fc:36:79:c9:32:e4:28:39:36:d0:1d:20:
4b:6a:29:7b:ac:7f:1f:0e:66:93:a7:e9:ea:22:bf:39:4d:7d:
bc:7b:5a:ba:da:12:4f:0e:71:51:6d:90:eb:6e:44:a3:ff:a3:
b1:a5:1f:9a:34:5f:a5:ac:f9:ca:2a:ad:5c:4e:fe:e2:56:e3:
68:bb:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:24:34 2025 by rpki-client