Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ulhoHpZFLWGbiyfuvOKfGrSFeaw.roa
File: ulhoHpZFLWGbiyfuvOKfGrSFeaw.roa (raw, json)
Hash identifier: V6GaVMmKjf046DUekzyD80Cj1i+yj00qof1YFWJbRt4=
Subject key identifier: BA:58:68:1E:96:45:2D:61:9B:8B:27:EE:BC:E2:9F:1A:B4:85:79:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196906BDF5EF7A83CEBBECD54872C10FC77
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ulhoHpZFLWGbiyfuvOKfGrSFeaw.roa
Signing time: Fri 02 May 2025 09:55:10 +0000
ROA not before: Fri 02 May 2025 09:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 04:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:6b:df:5e:f7:a8:3c:eb:be:cd:54:87:2c:10:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 2 09:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba58681e96452d619b8b27eebce29f1ab48579ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:4f:8c:c8:d5:dc:26:3f:e6:99:2e:32:b1:
59:9b:37:ec:81:f7:ee:b7:b5:19:e7:c7:bd:73:c4:
9b:72:85:43:57:cb:27:69:54:5f:9f:59:3d:12:5e:
eb:07:8a:a8:99:db:83:ea:0e:09:96:3c:7d:f5:cc:
a2:3f:6d:d1:3a:86:2e:7b:f0:ef:2d:dc:48:a4:87:
11:c6:81:d5:45:f2:b6:ce:3c:83:4a:f1:83:e2:31:
7a:16:27:9b:4c:85:55:03:9a:fe:a1:a8:e4:6d:b3:
15:2d:3e:57:5f:a0:ba:28:12:55:9a:19:3b:c2:74:
b8:c5:fc:fb:d1:f9:88:aa:25:52:7f:f3:bc:ba:d2:
f7:19:27:3c:a8:25:6e:fd:74:23:72:11:87:53:ed:
d3:f9:bb:99:5c:50:b1:9c:27:28:1f:aa:41:cd:d1:
03:47:4a:18:c2:1b:65:d8:f3:6b:d2:79:82:c5:fd:
39:d1:c7:66:b4:b8:7a:e5:32:14:c0:21:3e:28:2a:
34:19:53:87:28:80:ba:e3:b5:9f:f9:b7:23:94:e5:
f2:fc:f4:ba:23:a2:76:f0:b4:80:38:c7:d8:fb:86:
4e:19:dc:5a:e2:e4:6e:48:e6:94:8d:2e:b3:60:58:
32:02:0f:25:b8:24:4d:fd:dc:5b:e0:49:bb:8e:01:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:68:1E:96:45:2D:61:9B:8B:27:EE:BC:E2:9F:1A:B4:85:79:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ulhoHpZFLWGbiyfuvOKfGrSFeaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:de:0e:61:66:37:b7:8d:6a:7f:ad:d4:52:a6:31:08:a1:61:
0a:85:04:9a:bb:90:5a:00:21:80:20:ec:5f:7a:18:e6:b4:55:
f8:1e:b5:e6:54:a4:e5:5f:43:64:60:ba:32:d8:ec:68:4c:81:
7a:2b:79:c5:e5:fc:69:05:2f:f1:dc:2e:81:14:e4:ad:ff:60:
5d:b3:80:4c:f5:1b:ab:83:d5:f3:b5:fc:56:60:ce:83:c4:23:
9a:f1:e2:12:e7:b5:9b:8a:d1:ec:99:a9:80:d4:9f:c0:91:22:
d8:d4:95:77:e6:db:57:56:01:58:81:0f:f2:c9:15:b2:b1:c4:
8a:07:19:55:a8:98:28:6e:74:0d:f2:d4:9f:e2:58:c4:8f:6b:
44:28:93:84:f3:61:87:91:c5:9f:ba:4a:33:09:ee:9e:50:4e:
b2:39:18:4a:ab:ad:60:5f:0a:f4:47:38:55:e1:70:11:e0:52:
9f:75:6a:dd:76:f8:70:90:0b:47:45:5e:d1:d5:be:0d:99:6f:
16:b6:0f:de:ad:09:d2:94:bd:aa:7c:d8:c6:ce:c2:e9:53:5e:
38:f4:f6:ce:31:d0:0c:9d:0c:07:64:29:03:99:3d:a3:26:e8:
10:3f:f5:30:ca:93:38:23:d9:55:69:e0:f8:5e:8c:01:f0:7f:
6f:02:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:55:39 2025 by rpki-client