Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/5agQsBTndlVplATj4d_RnuEezpY.roa
File: 5agQsBTndlVplATj4d_RnuEezpY.roa (raw, json)
Hash identifier: TL46W9AII63cPjryF6LGUZLkk0MmaToMTw7dm18yuy8=
Subject key identifier: E5:A8:10:B0:14:E7:76:55:69:94:04:E3:E1:DF:D1:9E:E1:1E:CE:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019475B72D7B170F8A6DEE523B28CC92EB6F
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/5agQsBTndlVplATj4d_RnuEezpY.roa
Signing time: Fri 17 Jan 2025 19:22:06 +0000
ROA not before: Fri 17 Jan 2025 19:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12989
IP address blocks: 2.59.22.0/24 maxlen: 24
212.104.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 16:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:b7:2d:7b:17:0f:8a:6d:ee:52:3b:28:cc:92:eb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Jan 17 19:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5a810b014e77655699404e3e1dfd19ee11ece96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:9f:af:c3:0a:47:c4:61:53:e0:0b:2b:34:
f7:fc:38:2c:df:5b:e0:9f:c4:6a:b5:5a:b8:0f:16:
10:60:f2:bd:1b:90:dd:b5:70:d9:63:51:e6:e7:5c:
cd:e0:c1:8d:57:8e:90:e9:c5:14:42:cb:a8:43:bc:
bc:b1:8f:e4:ec:9b:90:ea:e2:b4:2f:46:60:95:10:
b3:d6:10:76:a5:ed:43:38:44:1c:fb:8c:8a:40:15:
e7:ca:c9:71:b6:33:51:cb:06:2f:89:74:60:93:c4:
07:b7:54:33:20:20:42:b7:d9:36:ea:e2:c6:19:d6:
09:2a:ca:5b:08:b8:b4:50:81:63:87:be:6b:f1:f0:
6f:93:b0:d4:8d:0a:8d:25:53:df:c5:ad:3a:7a:a9:
35:87:20:60:ac:f6:7c:31:03:29:b1:58:ba:2f:cf:
ad:5a:96:9a:84:71:cf:b9:1f:1e:1f:7a:ed:ff:ad:
04:89:55:66:66:a8:b7:0f:a6:8f:a8:78:52:3d:da:
2f:a5:75:09:a2:6d:db:63:aa:37:72:d3:dd:6f:a3:
df:61:c8:72:45:3a:d6:af:af:65:eb:a4:ba:88:86:
29:67:b9:80:48:b3:4c:0b:89:a8:9a:d2:22:ac:cb:
fe:35:f2:2d:ac:43:f1:e3:03:b0:ce:d2:05:14:55:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:10:B0:14:E7:76:55:69:94:04:E3:E1:DF:D1:9E:E1:1E:CE:96
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/5agQsBTndlVplATj4d_RnuEezpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.22.0/24
212.104.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ff:eb:a7:75:8e:b2:f7:ff:67:87:dd:53:4b:ed:79:aa:31:
bb:76:10:dc:8c:28:e9:47:81:2a:f6:ea:5b:95:a7:7f:3d:e7:
80:a6:ef:31:b9:03:0c:52:1a:60:72:65:35:c7:22:5a:fd:5f:
77:cf:2c:40:f0:69:c6:c1:be:1a:72:83:98:7b:2a:1d:26:92:
c2:d5:c5:c5:db:a1:b0:64:f3:d8:2e:73:54:6c:48:d6:c6:9a:
e7:17:3e:d8:00:56:fd:d5:5e:c9:b3:65:92:e3:b7:fa:6d:06:
2d:cf:9e:cb:9d:9f:d4:a4:9c:1b:46:6e:7c:dd:21:df:3e:17:
6d:83:f8:20:24:59:30:b7:fb:76:4f:e0:45:7d:2e:ca:a5:81:
41:43:b5:02:96:77:bb:b0:aa:47:58:2d:f9:1b:c7:bc:c3:e1:
14:17:b0:97:9a:b9:fa:5e:2e:b1:48:58:89:d5:99:50:6e:b5:
63:26:db:2d:90:12:6d:fe:43:79:80:16:de:35:6e:50:70:e3:
90:49:e3:ee:81:4d:cf:8e:ab:7f:f2:3f:28:2a:6b:75:03:3e:
3a:f5:f3:17:f9:25:81:14:0c:1f:a9:b1:cc:dd:f7:2f:86:77:
f3:3f:c0:06:7f:4b:47:32:08:48:55:19:77:9c:b8:32:fb:06:
d5:46:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:26:16 2025 by rpki-client