Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uvj8vgXMwgPQ-gtrEON_WJmoirE.roa
File: Uvj8vgXMwgPQ-gtrEON_WJmoirE.roa (raw, json)
Hash identifier: 3GcURVV1NWybMNoMFh2Gp6iqyA4M1LIV1Ep8ycLXTTQ=
Subject key identifier: 52:F8:FC:BE:05:CC:C2:03:D0:FA:0B:6B:10:E3:7F:58:99:A8:8A:B1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019679EFF537E85E025ADCA28224F10F6197
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uvj8vgXMwgPQ-gtrEON_WJmoirE.roa
Signing time: Mon 28 Apr 2025 01:08:10 +0000
ROA not before: Mon 28 Apr 2025 01:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.242.0/24 maxlen: 24
5.231.243.0/24 maxlen: 24
5.231.244.0/24 maxlen: 24
5.231.245.0/24 maxlen: 24
5.231.246.0/24 maxlen: 24
5.231.247.0/24 maxlen: 24
5.231.248.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 07:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ef:f5:37:e8:5e:02:5a:dc:a2:82:24:f1:0f:61:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 28 01:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f8fcbe05ccc203d0fa0b6b10e37f5899a88ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:93:cc:f0:43:28:3f:c6:10:f6:92:a6:03:
a5:dd:aa:23:36:92:f1:4e:e9:73:3b:ab:a6:5f:5a:
01:0a:b8:c1:9b:e6:f0:38:95:90:e4:f3:df:fb:96:
55:20:a1:2d:41:3f:6d:1f:c9:80:fe:36:89:d7:fe:
90:ea:ec:49:ec:25:15:db:4a:8a:b1:64:c0:e7:b9:
d4:32:53:79:6f:2a:c1:19:cf:5e:e4:74:29:18:a0:
9b:f6:d6:7a:cb:2b:23:46:57:97:e0:94:8a:fa:e6:
de:c0:3c:05:20:4c:dc:d0:07:b5:fd:b1:a8:79:ab:
55:80:4d:4d:c3:44:58:54:65:51:43:41:3b:48:d7:
3b:22:9f:13:76:fc:a4:ce:03:9c:95:35:71:9a:5a:
ab:9c:ec:53:de:dc:46:94:16:ba:0e:01:d6:0b:8a:
cf:8f:ce:d3:b1:4c:2e:2e:d0:a5:53:b0:e5:99:b8:
60:f0:5d:ca:65:d1:82:ae:2f:7d:be:aa:e1:cc:cd:
47:fd:0d:be:e7:38:61:69:17:47:fd:bd:a1:8d:d5:
ea:2b:30:49:c1:ef:2b:21:8f:09:5f:d8:ec:d9:24:
44:17:34:29:46:de:9c:bd:3a:0f:9f:09:04:e6:98:
3d:77:9e:ed:e9:b9:2a:90:85:db:ca:5c:08:83:7b:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:FC:BE:05:CC:C2:03:D0:FA:0B:6B:10:E3:7F:58:99:A8:8A:B1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uvj8vgXMwgPQ-gtrEON_WJmoirE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.238.0/24
5.230.164.0/24
5.231.61.0/24
5.231.71.0-5.231.75.255
5.231.79.0/24
5.231.92.0/24
5.231.240.0-5.231.248.255
85.93.5.0/24
85.93.31.0/24
89.106.90.0/24
89.144.5.0/24
89.144.11.0/24
94.249.168.0/23
94.249.237.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fd:78:5e:4c:0e:32:15:36:a5:3d:f9:24:8c:8f:e1:97:d9:
95:fb:da:36:6a:fc:9b:a9:96:25:18:32:4c:bc:1a:2e:fd:1d:
9d:d1:1f:65:01:52:11:1a:01:2b:7e:5a:ae:b9:9a:d5:b5:35:
e3:a2:d5:36:f7:86:9b:f0:65:7c:ad:0f:c7:ac:60:31:0b:dd:
70:f0:98:1a:17:9a:1f:e9:72:19:67:61:21:7e:5a:dd:6f:63:
a6:ae:2a:53:ff:54:fe:3e:fa:37:ee:72:cd:8b:f5:26:a3:36:
56:08:d8:e9:63:e9:2f:d2:56:2d:33:4e:cd:be:ec:e2:92:c9:
79:14:11:71:20:7c:9b:71:8b:37:7e:e1:26:40:1d:b8:3f:11:
09:f9:5b:7f:cf:dd:04:a5:e0:e9:91:90:24:42:93:10:b4:cd:
1e:5d:58:2b:9e:48:b6:91:d2:c6:19:76:19:d8:47:7f:16:95:
59:23:e9:c3:f3:08:6f:1b:be:a0:6c:bf:a9:99:cc:ab:ca:17:
0b:22:5b:61:df:d2:8b:10:2e:0c:55:c1:ef:ab:9d:9a:2c:20:
bd:e1:80:bd:c5:e0:64:e1:0a:9c:e7:84:3c:7b:60:a4:59:b9:
01:3f:47:e7:ba:b7:67:80:7c:c0:e2:f4:c8:62:c8:bd:2c:e1:
ea:5b:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:49:41 2025 by rpki-client