Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/5P4LaPbE_GtqwDU9uJDlwmo2Lmk.roa
File: 5P4LaPbE_GtqwDU9uJDlwmo2Lmk.roa (raw, json)
Hash identifier: WOyB1OuBZZq8Ki3RECrCsE/A2dm3Jw9CwesbZDy0zPM=
Subject key identifier: E4:FE:0B:68:F6:C4:FC:6B:6A:C0:35:3D:B8:90:E5:C2:6A:36:2E:69
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01958440479D7B770C13FCCFE36258C263CA
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/5P4LaPbE_GtqwDU9uJDlwmo2Lmk.roa
Signing time: Tue 11 Mar 2025 08:09:19 +0000
ROA not before: Tue 11 Mar 2025 08:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400536
IP address blocks: 5.178.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 10:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:40:47:9d:7b:77:0c:13:fc:cf:e3:62:58:c2:63:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 11 08:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4fe0b68f6c4fc6b6ac0353db890e5c26a362e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:71:89:c7:1f:20:c8:4d:40:8e:bb:b5:9b:
8e:55:7a:22:3b:ae:9b:b2:e8:c2:bf:95:c3:9f:23:
4e:30:8f:c6:af:d1:1a:11:9b:f1:e4:2e:b0:6c:21:
b8:05:07:cd:fe:43:42:e4:c7:c0:d5:68:c8:e9:be:
26:2f:3b:5f:6d:5e:37:19:a3:fc:b1:29:b3:93:d6:
56:f4:2f:cc:19:da:ac:78:a8:df:29:2e:59:04:36:
65:ba:e2:e9:47:f3:7b:f1:a4:12:bf:0d:ce:16:3a:
ec:f8:38:25:2f:bc:a5:06:55:20:34:23:f3:c6:a1:
8d:8c:1f:bd:cf:9f:9c:c7:c0:ad:60:eb:bb:da:f2:
42:2b:ae:00:79:27:49:d0:a9:9a:6c:7f:78:62:f2:
04:8f:29:ed:eb:8c:29:30:85:56:9e:8f:f9:9a:e0:
c5:aa:45:a9:1c:f9:4f:31:a2:0b:4f:2b:90:b3:bf:
8c:96:98:f8:b8:39:3a:b8:ec:e4:fb:80:28:ed:ac:
18:ad:9c:da:2b:f3:99:4f:e8:43:0d:a7:92:0c:55:
fd:67:af:d9:6a:e1:84:54:12:e0:9e:5c:d5:94:76:
e2:e2:52:e5:9c:d2:96:68:5e:7d:ee:60:38:1b:a9:
3a:c9:3a:2f:1f:18:af:95:24:ab:a5:d2:8c:54:9f:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FE:0B:68:F6:C4:FC:6B:6A:C0:35:3D:B8:90:E5:C2:6A:36:2E:69
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/5P4LaPbE_GtqwDU9uJDlwmo2Lmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.107.0/24
Signature Algorithm: sha256WithRSAEncryption
42:df:dc:4c:7a:9b:6b:91:26:35:20:09:ec:20:1f:3d:d7:d6:
84:42:2c:98:42:80:ed:c9:3b:81:59:23:3a:0c:31:26:2a:9c:
ef:c6:96:59:46:ca:5c:89:09:35:c3:52:da:06:52:49:5c:0c:
54:79:58:76:ad:c9:da:24:99:a9:0a:9c:45:98:94:9d:10:24:
ca:ec:90:82:e1:0e:9e:ee:af:e7:40:d7:6a:c0:25:0e:61:1a:
3d:ae:8d:28:e4:e7:dd:28:6d:15:e0:2a:0e:4a:2b:58:af:06:
26:e2:21:9e:54:55:c4:91:32:30:52:08:15:68:44:db:ad:ad:
44:5b:00:4b:98:fe:1c:a9:51:dd:8b:5d:3c:08:39:e7:c3:8b:
45:0f:80:b3:24:02:98:a7:55:5b:1b:b9:1e:0d:45:75:6d:76:
a2:44:d1:b1:3b:1c:85:d7:ec:ad:05:28:18:86:5c:e7:03:12:
17:c4:50:17:d8:20:de:47:74:f9:ba:f1:8e:d6:92:f9:04:41:
de:df:88:64:bd:46:cf:1e:ea:43:bb:34:32:c6:07:34:79:1d:
42:41:5e:5b:ce:5e:58:d7:3c:e1:d6:26:2c:f7:25:f6:87:a0:
9b:e9:79:1a:5b:26:ca:3d:ba:8b:16:e0:7f:ab:13:e8:18:c3:
e7:41:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:16:57 2025 by rpki-client