Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/jeyUJwacfWwFwaNGnM0L5Edb5sE.roa
File: jeyUJwacfWwFwaNGnM0L5Edb5sE.roa (raw, json)
Hash identifier: IMKBy3FSS+5cG5Yl5NWWRSe94V0x1vZJnfEf1XSomXk=
Subject key identifier: 8D:EC:94:27:06:9C:7D:6C:05:C1:A3:46:9C:CD:0B:E4:47:5B:E6:C1
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019595528C377D6761F091850E7B9E116B9C
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/jeyUJwacfWwFwaNGnM0L5Edb5sE.roa
Signing time: Fri 14 Mar 2025 15:42:49 +0000
ROA not before: Fri 14 Mar 2025 15:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209906
IP address blocks: 5.182.164.0/24 maxlen: 24
5.182.165.0/24 maxlen: 24
5.182.166.0/24 maxlen: 24
5.182.167.0/24 maxlen: 24
185.238.144.0/24 maxlen: 24
185.238.145.0/24 maxlen: 24
185.238.146.0/24 maxlen: 24
185.238.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 10:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:95:52:8c:37:7d:67:61:f0:91:85:0e:7b:9e:11:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Mar 14 15:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dec9427069c7d6c05c1a3469ccd0be4475be6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:2c:f2:0a:66:83:d1:b3:15:5c:41:52:8b:
83:f5:ea:78:61:d5:58:83:84:96:10:b9:41:26:6e:
dd:ae:7b:37:79:92:2d:d6:47:57:ff:92:35:57:17:
5a:c6:b6:13:5e:8d:3b:c3:f7:9d:64:32:92:94:bc:
53:60:9e:29:15:21:b2:01:f2:f8:86:b2:e6:59:9d:
0c:99:00:1d:20:1e:fe:f0:bd:1a:c5:7c:5f:cc:4a:
2a:72:7f:83:0c:c2:1c:aa:2e:39:8b:31:8b:7e:ac:
2d:e1:38:c1:4c:a1:ac:9c:cc:11:44:74:9a:e2:15:
d2:a0:c4:41:b2:49:91:b5:dd:d8:2a:f0:0a:da:00:
1d:93:01:19:f9:81:08:53:c1:0e:fe:2a:ff:89:7a:
0f:d4:4b:f9:2e:65:08:b0:59:c3:3f:4f:64:60:a7:
e4:5c:39:2a:ec:d6:28:a3:fa:cf:c5:0f:de:10:bc:
66:58:19:da:39:8e:53:8e:a1:5e:2c:7d:63:78:4c:
c8:a6:aa:c8:37:34:23:d2:0f:cf:7b:53:1f:f9:65:
3c:8b:28:49:2a:9d:8b:56:18:66:cd:58:3a:34:2d:
c8:d7:15:c8:58:83:3d:a2:0e:81:80:87:da:fe:b8:
9e:4e:9f:c9:02:2a:99:e0:58:b4:0d:17:44:4c:0a:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:94:27:06:9C:7D:6C:05:C1:A3:46:9C:CD:0B:E4:47:5B:E6:C1
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/jeyUJwacfWwFwaNGnM0L5Edb5sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.164.0/22
185.238.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:f4:f0:f6:ee:b9:d1:4d:df:a5:a5:32:5a:6d:9f:a2:7f:1d:
83:cb:92:b4:a5:83:ee:41:cc:17:48:02:ff:05:df:ed:b7:3f:
51:15:bb:c9:d5:08:d1:20:3a:8c:ab:3a:f3:a2:8b:e8:7e:21:
5b:95:cc:d1:99:36:6c:0c:b1:2d:b8:7a:82:61:94:db:41:69:
17:ec:22:e3:66:2c:d9:25:51:ca:6c:e4:75:ea:e6:dd:62:ae:
83:ea:53:ab:4c:d9:df:c5:b3:b6:f4:04:aa:be:0f:81:53:a1:
53:e2:57:d7:70:4f:e6:e2:ae:e9:4c:60:4d:5a:b8:12:82:4e:
c5:4c:88:fe:e9:e2:9d:17:4e:d7:f2:48:d3:fe:d5:6f:09:4b:
98:6a:b1:1c:81:e9:da:a4:33:c1:29:8d:f3:fd:e7:98:2f:c0:
76:11:74:74:9e:eb:ed:fd:a1:9e:71:c8:05:7c:d2:35:7a:e9:
96:47:57:4c:af:65:ee:e6:29:cd:3a:01:74:4c:a9:33:9d:74:
56:fd:5f:09:f9:19:c1:0b:a3:fc:43:6f:d8:1f:1e:5f:1a:bd:
69:d9:0c:5d:49:cb:15:f7:9e:5a:11:4c:89:73:e1:94:d0:0f:
9d:a7:d4:b4:6d:82:a4:91:3e:06:90:5f:85:c6:45:ce:33:5b:
55:8f:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:03:06 2025 by rpki-client