Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/J5KwnnaXPKPmQzrXb-rxXGCTpLk.roa
File: J5KwnnaXPKPmQzrXb-rxXGCTpLk.roa (raw, json)
Hash identifier: F94GshLFvilb6KXdIRFnJqQxR0TE6C6UiNko9lMxhoQ=
Subject key identifier: 27:92:B0:9E:76:97:3C:A3:E6:43:3A:D7:6F:EA:F1:5C:60:93:A4:B9
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0193A45DAB5473DDA3C216242C828F83BE4D
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/J5KwnnaXPKPmQzrXb-rxXGCTpLk.roa
Signing time: Sun 08 Dec 2024 03:43:42 +0000
ROA not before: Sun 08 Dec 2024 03:43:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 5.255.63.0/24 maxlen: 24
91.92.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a4:5d:ab:54:73:dd:a3:c2:16:24:2c:82:8f:83:be:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Dec 8 03:43:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2792b09e76973ca3e6433ad76feaf15c6093a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:17:13:43:84:11:cf:c8:28:32:ea:9b:31:
b4:4f:00:8a:cb:ee:ae:16:23:17:91:c7:4d:16:46:
33:c8:7b:7c:82:9b:83:04:16:76:01:0f:8e:94:b5:
66:fd:5d:5f:3c:77:24:e0:f8:d3:2d:1d:bf:b0:32:
4a:73:68:fe:d4:f4:48:c7:e3:d0:82:bb:37:6a:ac:
fd:e0:7b:56:41:77:bf:73:db:79:06:40:69:ec:a8:
b5:8a:59:38:b1:ae:84:45:5f:d7:79:94:03:38:35:
e9:5a:3a:f9:8b:02:9a:a7:ea:22:0c:7f:e5:f0:68:
6b:14:39:e9:71:f0:d9:ec:11:f7:66:b0:48:ec:e4:
a3:25:06:62:b6:a4:78:d1:59:f2:1a:41:b4:5c:53:
4f:d2:9e:26:de:25:4b:6e:fb:60:00:65:00:30:2c:
c6:11:03:bf:44:e5:cf:1e:68:3f:86:d2:39:aa:17:
78:26:91:92:9c:89:7d:6a:4f:58:60:aa:7d:ff:8c:
32:b6:e7:8b:6d:64:92:cf:bc:1d:c9:b9:57:d6:8e:
6f:47:dc:8b:47:aa:a3:05:35:ae:86:dd:c7:c9:ea:
6e:1e:38:7a:d3:7e:0b:a8:3c:30:fd:ef:41:4f:af:
62:3e:61:74:36:01:e9:d5:a0:38:76:83:f8:18:80:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:B0:9E:76:97:3C:A3:E6:43:3A:D7:6F:EA:F1:5C:60:93:A4:B9
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/J5KwnnaXPKPmQzrXb-rxXGCTpLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.63.0/24
91.92.112.0/24
Signature Algorithm: sha256WithRSAEncryption
61:92:52:b1:e6:8b:5e:0d:3f:b3:d2:ce:03:02:bd:8a:b7:55:
0b:09:77:de:24:93:a5:26:9c:da:1f:3d:dd:23:62:a7:02:c4:
f4:12:10:82:21:93:5a:09:71:61:59:9a:48:51:b5:08:ec:df:
c9:e1:89:01:a4:2a:48:67:e3:c6:ec:37:03:94:3f:cc:b2:09:
56:d9:51:47:c3:8e:17:47:70:b6:c7:cc:83:42:d4:ae:85:89:
5e:8d:ea:8a:da:17:a7:54:ae:fb:61:e9:ba:02:87:f6:c1:fb:
18:cd:fb:fc:cd:7f:a4:39:1e:7e:5c:c2:12:a2:30:98:00:a9:
87:88:07:7c:81:73:45:38:3a:79:89:c9:d4:18:5b:66:7c:4b:
3f:05:3e:78:ae:29:a9:db:ac:58:67:38:d2:13:d5:33:39:41:
e6:95:4f:fc:9b:e8:fb:c6:4f:4e:aa:a5:bb:63:d7:9d:ba:94:
40:d7:49:3d:f5:0d:d6:c0:f4:89:10:cf:08:2e:8a:4f:d4:25:
14:35:44:41:86:b7:69:08:6c:93:0c:a7:2a:1a:b1:6c:d3:99:
bd:48:bb:84:40:b4:2d:e3:44:99:3d:38:9e:24:5b:9f:d1:e3:
de:82:d0:57:41:da:d8:75:93:8c:39:52:44:50:24:99:a2:45:
0e:c3:54:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOkXatUc92jwhYkLIKPg75NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjQxMjA4MDM0MzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzkyYjA5ZTc2OTczY2EzZTY0MzNhZDc2ZmVhZjE1YzYwOTNhNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUIXE0OEEc/IKDLqmzG0TwCKy+6u
FiMXkcdNFkYzyHt8gpuDBBZ2AQ+OlLVm/V1fPHck4PjTLR2/sDJKc2j+1PRIx+PQ
grs3aqz94HtWQXe/c9t5BkBp7Ki1ilk4sa6ERV/XeZQDODXpWjr5iwKap+oiDH/l
8GhrFDnpcfDZ7BH3ZrBI7OSjJQZitqR40VnyGkG0XFNP0p4m3iVLbvtgAGUAMCzG
EQO/ROXPHmg/htI5qhd4JpGSnIl9ak9YYKp9/4wytueLbWSSz7wdyblX1o5vR9yL
R6qjBTWuht3HyepuHjh6034LqDww/e9BT69iPmF0NgHp1aA4doP4GIBZgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCeSsJ52lzyj5kM612/q8Vxgk6S5MB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvSjVLd25uYVhQS1BtUXpyWGItcnhYR0NUcExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABf8/AwQA
W1xwMA0GCSqGSIb3DQEBCwUAA4IBAQBhklKx5oteDT+z0s4DAr2Kt1ULCXfeJJOl
JpzaHz3dI2KnAsT0EhCCIZNaCXFhWZpIUbUI7N/J4YkBpCpIZ+PG7DcDlD/MsglW
2VFHw44XR3C2x8yDQtSuhYlejeqK2henVK77Yem6Aof2wfsYzfv8zX+kOR5+XMIS
ojCYAKmHiAd8gXNFODp5icnUGFtmfEs/BT54rimp26xYZzjSE9UzOUHmlU/8m+j7
xk9OqqW7Y9edupRA10k99Q3WwPSJEM8ILopP1CUUNURBhrdpCGyTDKcqGrFs05m9
SLuEQLQt40SZPTieJFuf0ePegtBXQdrYdZOMOVJEUCSZokUOw1RB
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:15 2025 by rpki-client