Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A61nptpr60KbJslbWDzhSXxYRrs.roa
File: A61nptpr60KbJslbWDzhSXxYRrs.roa (raw, json)
Hash identifier: tCSMACLS0cAw9eBZBQKXktn99s4aiOhJ8cWMWmulVLI=
Subject key identifier: 03:AD:67:A6:DA:6B:EB:42:9B:26:C9:5B:58:3C:E1:49:7C:58:46:BB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200C17D91E4D344217D8964C2A37F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A61nptpr60KbJslbWDzhSXxYRrs.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 5.83.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 05:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0c:17:d9:1e:4d:34:42:17:d8:96:4c:2a:37:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ad67a6da6beb429b26c95b583ce1497c5846bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:17:0c:65:e0:c7:0d:09:f2:17:24:39:82:
6f:49:19:37:cf:38:94:06:fe:83:00:2c:bf:d5:7a:
75:24:e0:4f:30:27:d0:65:70:9f:8a:f5:e2:49:a3:
1f:43:b5:ad:7f:6d:16:7d:f2:92:20:a2:a9:a1:2c:
34:96:33:e2:48:28:59:4f:1e:9c:c0:ca:f4:56:a8:
ee:28:a3:2e:80:77:9e:93:54:22:73:d1:43:ef:dd:
62:86:ee:e1:ab:5d:dc:dd:3b:9b:60:d7:d5:97:73:
07:b5:e1:07:e7:20:50:72:d9:5f:ed:01:c5:71:39:
c8:ca:1e:0f:a2:09:0a:7c:80:5e:b0:4e:f0:15:d8:
8d:58:8b:76:46:fb:1c:92:8a:60:6a:7d:51:1a:eb:
07:7f:83:dd:55:4c:0e:b3:3c:bb:14:39:0a:36:da:
d4:0b:a8:e0:48:ad:39:d6:f3:c0:7c:ec:e2:66:b9:
67:a7:b5:ac:16:2e:3e:c4:a2:ed:e6:d7:fc:8f:1b:
2c:f6:8c:4c:a5:20:a9:7a:38:7f:5b:43:8a:36:b8:
cb:44:d3:0a:2a:34:9f:db:0c:31:20:ff:ae:3d:91:
d6:92:6a:c3:db:27:98:ad:4c:13:70:9b:5a:78:65:
82:a8:10:91:5c:aa:bc:ee:9d:14:e3:d2:01:cc:12:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:67:A6:DA:6B:EB:42:9B:26:C9:5B:58:3C:E1:49:7C:58:46:BB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A61nptpr60KbJslbWDzhSXxYRrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ed:be:40:55:d0:79:30:2f:0c:12:4b:36:b2:74:33:6a:69:
21:78:92:af:7c:15:16:ac:1c:2e:d0:69:12:27:e8:fd:2c:05:
89:4c:9e:eb:fa:aa:94:34:27:34:df:a9:91:47:8c:27:cb:b8:
0b:a3:72:f7:56:4e:95:3c:87:07:f5:f2:ba:7c:62:64:b6:a5:
1c:81:a7:31:4e:50:19:22:e3:77:f1:6b:5b:82:5c:7a:48:07:
83:f5:cb:c0:a0:9d:f3:33:92:70:be:73:99:54:f7:07:ed:29:
9e:ff:0f:51:08:01:f6:40:48:d4:ac:cf:83:9d:56:91:cb:ff:
33:c3:74:97:c9:dc:bf:e3:25:90:4f:70:a0:da:88:ad:fe:a2:
6e:46:7c:07:36:4a:4f:7f:4d:aa:d2:86:64:8d:79:3a:8e:b1:
ab:fc:26:1e:10:95:47:c1:13:9a:6f:4e:0d:1c:40:87:a6:30:
06:ea:f2:ed:dd:10:68:2e:7f:6a:e6:86:68:6e:1a:31:97:3b:
6f:1a:e4:01:4e:bf:39:30:8f:b8:f1:59:de:a8:a9:2a:06:99:
30:c6:66:4c:76:58:a1:13:ff:5a:47:d8:92:16:3b:54:bd:3b:
cb:49:f8:85:21:a7:f0:a4:dd:2c:9f:71:bc:17:5a:27:2b:0c:
dd:7f:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:25 2025 by rpki-client