Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/I5aOdmSp50rBt5farxcrH0vzKOQ.roa
File: I5aOdmSp50rBt5farxcrH0vzKOQ.roa (raw, json)
Hash identifier: 3uW6NQMtbWkBIsVSzvpz/LKgkiVtkrlz0vmqigmmocY=
Subject key identifier: 23:96:8E:76:64:A9:E7:4A:C1:B7:97:DA:AF:17:2B:1F:4B:F3:28:E4
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C2F9CDE54AF6F68522C4477556516
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/I5aOdmSp50rBt5farxcrH0vzKOQ.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214304
IP address blocks: 5.144.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 14:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2f:9c:de:54:af:6f:68:52:2c:44:77:55:65:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23968e7664a9e74ac1b797daaf172b1f4bf328e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:76:7d:02:50:b5:d8:41:8b:70:75:2a:15:
21:4d:36:3e:ff:b2:33:c4:f1:8f:06:b1:cc:6b:cf:
90:6f:fb:80:29:72:50:e9:08:89:b3:73:3d:70:7c:
d4:6a:de:6d:96:b8:be:45:de:63:1d:98:2d:07:f2:
6a:e0:3d:51:2f:3b:4d:da:32:b5:fd:09:05:db:59:
35:02:b1:ac:f6:09:02:35:52:cb:89:c0:c0:a8:4e:
4a:31:df:9c:35:fc:81:41:35:8b:42:52:bb:d6:c7:
a5:04:fc:dc:c6:43:85:9f:e4:81:49:6b:5a:ce:e6:
20:4f:20:c8:d3:cd:e3:5f:2d:86:50:40:3b:09:61:
d3:a1:07:2f:f3:6d:9f:38:d2:b0:f6:4d:b2:8a:9c:
89:b1:be:e3:b2:c0:f1:30:37:16:3e:23:74:f2:33:
c0:5e:7d:c2:2d:cd:f0:ea:66:90:6e:eb:d2:fd:02:
8e:2a:e1:74:3e:4c:41:a7:47:28:bc:d5:47:fb:3e:
5e:7f:04:cd:5c:95:ea:7b:4d:62:1d:f2:81:6f:de:
2a:b2:92:fb:47:9c:0d:25:10:c7:fa:33:57:f5:91:
2c:66:be:e6:03:56:22:96:48:f6:68:5a:8e:f5:41:
4e:df:f9:90:f7:c0:3c:54:ab:0b:5a:6a:f5:a1:45:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:8E:76:64:A9:E7:4A:C1:B7:97:DA:AF:17:2B:1F:4B:F3:28:E4
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/I5aOdmSp50rBt5farxcrH0vzKOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.177.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:fd:6d:eb:b6:e6:84:55:c9:92:82:3e:6c:42:af:a8:27:ce:
f9:ef:61:6d:f6:c0:3a:95:e4:82:3d:b6:e0:96:4d:31:67:fd:
36:f8:aa:0c:85:be:4c:cf:0a:de:17:23:96:ff:04:68:0c:27:
4b:34:b4:72:dd:4c:94:5f:bf:57:00:ed:52:1f:2c:ed:08:0f:
d5:56:f8:12:0c:4d:ef:21:1b:da:84:d8:7f:32:90:64:25:79:
0c:e1:89:89:a0:e6:79:3c:41:33:09:2e:b4:08:77:76:31:89:
ea:25:1f:95:32:95:c0:47:fa:34:d1:66:c0:73:aa:d0:31:81:
12:12:ac:b1:89:fc:af:67:e8:ac:37:e3:25:84:b5:8d:c4:4f:
81:bb:8a:0e:71:92:3d:6e:dd:1d:5a:5a:3c:5c:f6:10:37:a0:
aa:f5:85:32:11:9e:86:5a:6f:63:1d:64:66:76:15:5e:5c:f7:
1a:fc:d9:06:9e:b0:07:c6:d0:35:30:84:47:11:34:8c:52:b7:
97:3f:32:50:da:c4:f8:e3:34:c9:4e:62:ce:4c:ed:53:19:73:
65:24:ee:d0:21:3d:06:c6:a4:1f:77:bb:88:ab:58:f7:2f:33:
44:f0:b2:9f:97:fa:35:3f:c1:be:e6:d4:0f:5c:bf:0c:0b:45:
ee:51:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:38 2025 by rpki-client