Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/6pN85hKFa7K7Euw-gUwr13NF1QY.roa
File: 6pN85hKFa7K7Euw-gUwr13NF1QY.roa (raw, json)
Hash identifier: rsaqP1O4rYfx74g0d6CyI56rEnMevBErhopmhEt7GHg=
Subject key identifier: EA:93:7C:E6:12:85:6B:B2:BB:12:EC:3E:81:4C:2B:D7:73:45:D5:06
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 018E571606BEAFBE7EF7B4A56633E5B3E922
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/6pN85hKFa7K7Euw-gUwr13NF1QY.roa
Signing time: Tue 19 Mar 2024 14:20:45 +0000
ROA not before: Tue 19 Mar 2024 14:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209097
IP address blocks: 5.182.144.0/24 maxlen: 24
5.182.145.0/24 maxlen: 24
5.182.146.0/24 maxlen: 24
5.182.147.0/24 maxlen: 24
45.149.56.0/24 maxlen: 24
45.149.57.0/24 maxlen: 24
45.149.58.0/24 maxlen: 24
45.149.59.0/24 maxlen: 24
185.115.204.0/24 maxlen: 24
2a0e:5c00::/32 maxlen: 32
2a0e:5c01::/32 maxlen: 32
2a0e:5c02::/32 maxlen: 32
2a0e:5c03::/32 maxlen: 32
2a0e:5c04::/30 maxlen: 30
2a12:f280::/32 maxlen: 32
2a12:f281::/32 maxlen: 32
2a12:f282::/32 maxlen: 32
2a12:f283::/32 maxlen: 32
2a12:f284::/32 maxlen: 32
2a12:f285::/32 maxlen: 32
2a12:f286::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:57:16:06:be:af:be:7e:f7:b4:a5:66:33:e5:b3:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Mar 19 14:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea937ce612856bb2bb12ec3e814c2bd77345d506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:c0:fe:38:d3:c6:45:1e:6b:82:e4:5f:6b:
cc:e8:ca:a8:cb:6b:e3:7d:df:29:a8:76:34:70:f6:
75:6f:34:23:40:76:75:b1:66:fe:38:a6:f2:1c:2b:
f9:32:db:1a:83:42:2e:40:09:03:40:ac:8f:09:32:
a7:6b:d6:7b:58:25:19:48:80:48:1f:97:2d:f5:9f:
de:2d:f5:3f:af:a1:78:70:a5:32:9b:e3:b7:ce:f7:
1e:d2:ff:d6:1a:60:34:f9:a2:05:eb:58:73:4f:0d:
33:96:d7:12:94:1c:48:2e:bb:9c:8c:ec:c9:f2:c4:
b8:8e:92:15:5f:f5:73:91:6d:54:d6:4a:cd:bb:cf:
0e:d1:69:d4:70:bf:ee:f2:cb:1b:47:bc:37:a3:d9:
3a:f2:0e:b1:cc:6b:1b:ac:91:28:4f:43:b4:77:62:
13:8c:4e:66:0f:e5:b4:50:b3:9a:f2:7e:10:35:63:
7c:68:ff:37:43:ce:74:27:21:de:94:7b:4c:83:b7:
0a:29:9d:7a:2f:e2:08:39:b1:2b:7b:d2:48:ed:60:
d6:ec:ef:e8:cf:90:81:46:ef:04:26:51:19:73:a1:
88:15:71:38:e2:d8:d1:43:80:40:c5:98:32:47:bc:
5b:1d:c7:5a:df:ec:40:c2:88:15:8f:ce:6d:f0:f5:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:7C:E6:12:85:6B:B2:BB:12:EC:3E:81:4C:2B:D7:73:45:D5:06
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/6pN85hKFa7K7Euw-gUwr13NF1QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.144.0/22
45.149.56.0/22
185.115.204.0/24
IPv6:
2a0e:5c00::/29
2a12:f280::/29
Signature Algorithm: sha256WithRSAEncryption
53:6a:9a:bb:55:aa:59:25:4d:68:4c:67:16:04:76:b6:42:bc:
ff:48:5f:1d:7c:16:46:ae:5a:ab:f9:8e:f1:5f:01:7f:d4:82:
0d:a1:7c:8b:82:8c:37:3e:e4:01:6d:d9:47:f4:da:55:27:27:
34:63:d9:40:60:94:38:4b:d9:f9:eb:d7:a6:b3:c1:50:64:af:
77:62:d9:ed:81:28:76:69:50:0b:3b:d7:2c:03:f6:24:23:60:
a0:e5:64:09:e1:81:30:2a:46:dd:7d:62:b3:be:cc:ea:99:9b:
91:30:08:aa:1b:fa:e6:4c:24:ba:b5:ca:0c:56:6b:8d:30:0b:
b6:89:64:e2:57:fb:8d:b3:0a:2f:70:f6:a2:e3:41:da:be:40:
94:85:d0:35:0b:21:62:57:42:c0:d3:54:e1:e4:15:af:5d:50:
9f:58:25:3c:2a:c9:25:b2:65:cf:8f:0f:3d:87:30:ac:d5:e1:
23:2c:20:cb:09:95:ab:cf:59:d6:8e:b4:38:0a:a9:4e:45:08:
0c:fd:28:61:fa:2c:b7:ea:bc:17:56:72:3f:bd:6f:a7:7f:c7:
24:0c:2d:b6:de:3a:8c:53:1c:33:99:d3:23:33:8f:ea:97:84:
b9:68:ec:86:8b:07:54:ab:12:6b:ec:20:74:11:c0:62:45:90:
93:78:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:39:08 2025 by rpki-client