Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5IVO_KLlJqt7W6YhOOzUvJ_13HA.roa
File: 5IVO_KLlJqt7W6YhOOzUvJ_13HA.roa (raw, json)
Hash identifier: hV4TaYDjcznyhC+70cyJ1Gx4vP/0mgJRQ6D+7f8hBS8=
Subject key identifier: E4:85:4E:FC:A2:E5:26:AB:7B:5B:A6:21:38:EC:D4:BC:9F:F5:DC:70
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9F891724EC2E9E94DC4CBE3017838
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5IVO_KLlJqt7W6YhOOzUvJ_13HA.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8280
IP address blocks: 151.236.29.0/24 maxlen: 24
2a03:f80:30::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 13:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f8:91:72:4e:c2:e9:e9:4d:c4:cb:e3:01:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4854efca2e526ab7b5ba62138ecd4bc9ff5dc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:05:31:7f:eb:6e:93:79:74:d3:80:d5:08:
88:6e:79:d8:6a:c5:d6:f3:d5:b4:11:a0:85:24:48:
68:56:f7:c0:49:bd:49:0e:f9:db:f0:6a:3b:51:11:
22:45:93:a7:ec:5f:c2:91:f2:78:2e:70:77:b9:0d:
69:5d:11:cf:c2:97:22:78:69:89:0d:e6:e9:f6:71:
c7:bf:c7:5f:79:23:af:dc:3d:82:4e:e5:5b:cb:03:
56:52:75:a6:01:6d:b0:b0:93:0c:2e:98:e9:6d:f7:
f2:fe:3e:8b:ae:84:a6:8c:d6:ba:a1:57:57:fd:cb:
54:1a:a3:32:01:c7:43:b2:00:39:8d:27:ec:a5:8d:
10:93:f3:51:e4:79:16:80:53:61:86:05:75:be:dc:
1d:ac:0a:81:78:46:77:39:5e:2b:4e:05:58:c1:37:
b9:62:69:c2:93:4c:7c:8c:d3:68:99:21:5e:4b:f4:
3a:73:16:93:dd:0b:d6:45:0e:62:16:8c:7d:cb:1c:
68:ce:f7:f5:11:2d:27:e2:59:d5:9a:ac:17:c1:eb:
6b:87:32:68:2c:21:80:5c:80:bd:7e:f0:7b:5c:dd:
ce:04:d0:80:92:c2:fc:73:61:15:69:ab:ca:de:d4:
ce:cd:12:06:c0:df:c6:ea:57:89:27:d6:fd:78:7b:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:4E:FC:A2:E5:26:AB:7B:5B:A6:21:38:EC:D4:BC:9F:F5:DC:70
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5IVO_KLlJqt7W6YhOOzUvJ_13HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.29.0/24
IPv6:
2a03:f80:30::/48
Signature Algorithm: sha256WithRSAEncryption
67:7d:09:78:da:12:3f:b1:e8:73:76:04:6b:97:0b:03:be:fb:
41:65:78:3e:8e:29:14:01:0d:39:86:45:d6:5d:dd:9b:6f:8a:
f2:75:d4:e6:94:2c:46:39:b6:15:07:7b:8f:af:d1:3a:40:c7:
8b:90:55:b7:0e:d0:1e:cb:c2:3f:fe:7d:c5:d8:73:31:39:52:
b5:fe:71:79:db:8d:f6:37:17:b7:d6:92:1f:f2:f5:80:ac:15:
84:23:1c:c0:0c:87:1b:c7:04:df:1c:d4:1b:53:3b:59:84:98:
ba:cd:e1:87:6a:be:6d:24:a9:22:6d:3c:75:16:52:33:df:c6:
86:3c:11:c5:7a:47:d7:6c:27:a6:80:57:83:cd:ce:f5:ad:9d:
fe:5b:06:93:90:97:5a:3c:60:30:25:05:87:ce:d7:f7:d4:70:
ec:5f:33:af:e2:54:b9:9b:d9:39:a0:c3:4c:f8:97:d0:8f:f7:
75:7a:13:fb:35:03:57:48:18:c1:f3:26:38:0f:3a:5d:24:59:
5b:eb:a5:98:d9:07:49:75:a7:e2:6f:c7:f4:27:05:c7:42:fe:
34:7b:c0:a9:93:a1:ce:01:02:a6:1b:62:3d:4d:79:48:98:da:
af:5a:0e:d0:44:62:d6:d9:2c:57:59:44:6b:ee:72:e4:99:c9:
02:ae:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:11:42 2025 by rpki-client