Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tNtdDejvF6YJ4c29pJYxWeTufNw.roa
File: tNtdDejvF6YJ4c29pJYxWeTufNw.roa (raw, json)
Hash identifier: ckemXPR6N521HNj8w70gF1HfGYWKzs1DvnirB+OZUes=
Subject key identifier: B4:DB:5D:0D:E8:EF:17:A6:09:E1:CD:BD:A4:96:31:59:E4:EE:7C:DC
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01942825309840559B0D26D64267A56EAC94
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tNtdDejvF6YJ4c29pJYxWeTufNw.roa
Signing time: Thu 02 Jan 2025 17:51:53 +0000
ROA not before: Thu 02 Jan 2025 17:51:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49687
IP address blocks: 5.157.136.0/21 maxlen: 21
5.157.137.0/24 maxlen: 24
5.157.138.0/24 maxlen: 24
5.157.140.0/22 maxlen: 22
5.157.144.0/21 maxlen: 21
5.157.224.0/22 maxlen: 22
37.35.44.0/22 maxlen: 22
146.66.216.0/23 maxlen: 23
178.157.127.0/24 maxlen: 24
188.74.153.0/24 maxlen: 24
188.74.154.0/23 maxlen: 23
188.74.170.0/24 maxlen: 24
188.74.191.0/24 maxlen: 24
188.119.176.0/22 maxlen: 22
2a03:8800::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 Jan 2025 12:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:30:98:40:55:9b:0d:26:d6:42:67:a5:6e:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4db5d0de8ef17a609e1cdbda4963159e4ee7cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:ba:3c:bf:93:09:c6:2e:e7:8e:b1:8d:36:
af:1c:35:98:ea:80:24:0e:a0:5f:e1:a6:af:fe:4a:
5b:65:f0:b4:38:3d:20:3f:30:36:9a:9c:c2:f9:0f:
2d:4e:d0:33:e1:7b:88:36:5d:f4:89:8a:4e:b7:4d:
bd:bc:b3:e0:d3:a0:6d:c5:81:cd:70:c6:84:69:38:
97:9e:18:25:28:bf:1f:ec:ac:78:7c:a2:32:87:e7:
9e:06:26:74:d1:03:bc:db:c1:05:35:bf:40:b3:35:
1d:5e:c2:14:3b:ba:2a:7f:df:1e:14:02:b7:eb:a6:
66:b5:58:dc:bf:4d:4d:44:ad:ce:16:3b:40:23:0a:
85:f6:db:45:0b:9c:11:e4:ec:0b:76:24:0e:7f:de:
2a:31:33:8e:04:c2:e3:18:67:ef:d6:ee:65:27:e1:
2f:88:b4:3c:66:b4:11:f2:43:d1:37:0d:ca:d1:57:
60:32:fe:fc:0e:6e:7f:01:4f:21:e2:90:2b:d0:27:
f4:4b:85:18:a5:ec:c6:fe:80:e3:42:42:75:35:58:
8c:9c:cd:04:7c:9f:c1:f8:da:b2:4d:1a:cf:85:43:
04:cd:3b:f7:b7:62:7e:10:42:f8:ae:4a:45:ab:15:
f5:73:2a:21:c9:91:9a:b5:3f:7f:f3:c8:a5:92:7d:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:5D:0D:E8:EF:17:A6:09:E1:CD:BD:A4:96:31:59:E4:EE:7C:DC
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tNtdDejvF6YJ4c29pJYxWeTufNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.136.0-5.157.151.255
5.157.224.0/22
37.35.44.0/22
146.66.216.0/23
178.157.127.0/24
188.74.153.0-188.74.155.255
188.74.170.0/24
188.74.191.0/24
188.119.176.0/22
IPv6:
2a03:8800::/32
Signature Algorithm: sha256WithRSAEncryption
9a:51:ce:a7:f7:1a:51:84:f0:2f:38:49:89:3e:47:3f:ca:75:
07:9f:db:ae:6b:75:17:a1:41:19:e8:38:63:3b:b1:dd:30:d6:
8e:1b:6e:03:a2:9b:e8:79:bf:15:93:5f:0f:50:5d:99:29:c2:
a2:6e:7b:e7:79:e0:02:8c:0a:a7:b3:03:d6:da:8e:77:ee:ab:
b1:2b:6a:69:62:70:5e:cf:2e:a7:15:0e:d2:da:29:8c:2f:fb:
86:c4:0c:2b:60:ae:d2:e4:5c:ea:f4:c7:47:4d:06:3f:e7:86:
b9:97:ef:57:69:5a:80:47:e4:25:b0:df:4f:db:f1:5e:ef:c7:
5b:c4:bf:7f:b4:cd:bf:f4:9a:90:b6:90:97:13:1f:c5:98:94:
05:3f:b7:c7:02:c6:6c:3b:b7:e6:ac:82:40:17:95:05:ff:31:
cd:5f:ff:f9:4e:29:88:3d:40:6d:c6:f4:01:ce:a6:e7:08:21:
cc:96:a0:fb:aa:06:bd:65:38:7d:eb:42:49:4c:50:53:6e:5a:
22:0c:ed:40:0f:f0:c1:f2:43:da:db:08:a6:9b:6e:a2:d0:60:
c8:ac:1a:5e:52:56:25:42:55:72:11:b0:c4:2d:8a:ed:5e:31:
c0:22:e8:45:e3:5e:d3:a3:68:a8:f3:84:27:13:f7:50:76:09:
a5:fd:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:23:21 2025 by rpki-client