Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M6MTqERKixQzxNs85nqVKo1ZyoU.roa
File: M6MTqERKixQzxNs85nqVKo1ZyoU.roa (raw, json)
Hash identifier: ehHzzzqEHEbgF6oli9ZNg0NtaTSDFuGfuPyFGnnjiX4=
Subject key identifier: 33:A3:13:A8:44:4A:8B:14:33:C4:DB:3C:E6:7A:95:2A:8D:59:CA:85
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01945C186C2F1AA93FF1767E336DF712533C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M6MTqERKixQzxNs85nqVKo1ZyoU.roa
Signing time: Sun 12 Jan 2025 19:58:11 +0000
ROA not before: Sun 12 Jan 2025 19:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 5.231.46.0/24 maxlen: 24
77.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 13:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5c:18:6c:2f:1a:a9:3f:f1:76:7e:33:6d:f7:12:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 12 19:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a313a8444a8b1433c4db3ce67a952a8d59ca85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:9e:9d:03:a3:3f:30:95:26:65:a8:cc:8a:
15:ff:30:0a:ee:85:49:1c:f3:97:36:b9:63:d1:4e:
b3:fb:fb:3c:e6:ab:ec:7b:d8:74:90:32:a7:6b:bb:
ec:34:f4:e7:fa:3f:d1:9a:11:e4:a3:af:2a:e1:bb:
a7:46:de:45:4f:f8:a3:2d:ba:c2:dd:33:c7:8a:3a:
ea:3e:66:42:35:8c:52:ea:46:32:7f:29:41:42:00:
b1:f2:f8:ef:5c:58:40:1e:f9:e0:ea:0f:2b:d5:68:
19:80:db:89:56:28:4c:3b:da:c9:e6:10:58:c1:08:
de:6b:44:5e:4e:13:03:cd:a9:5c:d2:95:e4:ec:23:
fe:8f:38:33:48:7a:90:b6:c1:7b:25:8a:a3:00:a2:
23:05:2b:81:ec:04:72:60:66:2a:e3:d2:0b:6a:7b:
28:80:9b:2d:a5:8d:97:2f:ab:30:9c:6a:79:15:3a:
ea:da:c4:4e:df:15:5f:0d:91:82:a6:47:e9:74:10:
58:41:18:3a:cb:87:b0:21:b7:13:fa:cc:21:66:25:
97:d4:c8:43:cb:61:46:b2:ae:c8:9d:bc:ff:60:d8:
a0:e5:b0:c6:a7:90:1b:30:be:52:20:be:b8:cc:8d:
4a:05:57:30:b0:9b:d2:49:28:7d:23:3b:07:17:b8:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A3:13:A8:44:4A:8B:14:33:C4:DB:3C:E6:7A:95:2A:8D:59:CA:85
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M6MTqERKixQzxNs85nqVKo1ZyoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.46.0/24
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:de:53:de:2e:2f:bc:3b:0f:83:84:a7:4f:af:d9:f1:81:b4:
9f:26:7e:4b:9e:62:49:4a:f0:1d:73:fd:6d:61:66:fe:e3:79:
96:18:3a:d3:36:65:b5:66:93:8c:9a:cc:91:6e:ae:d4:64:cd:
2d:a0:4a:b9:f0:c9:06:f1:7e:07:1d:2b:73:4b:20:6a:1d:d3:
10:97:fe:f9:bd:f8:63:92:3a:64:41:96:6b:b2:af:17:ff:c2:
65:17:0f:bb:4f:b0:0a:31:9a:65:f8:8a:29:40:f6:3a:26:16:
dd:5b:f3:b5:71:a2:f0:c1:72:29:17:a0:04:eb:56:6a:6a:9e:
91:22:f5:70:51:93:15:77:33:5f:14:34:d0:7d:96:2f:98:38:
b7:9c:cf:97:ee:34:78:21:f2:14:25:8e:62:f4:5f:18:ee:47:
08:76:73:79:76:43:96:df:9d:f5:10:a0:9a:6f:3a:8c:10:ad:
65:45:a5:86:1d:35:6f:f9:b8:e9:02:bd:f3:70:77:bb:49:ca:
78:d6:d0:64:73:b3:e5:8e:02:6d:9d:da:a5:ea:c5:c4:d0:e0:
25:3b:c8:53:e8:29:a2:21:2a:48:db:a4:ff:f2:96:96:9c:5a:
75:6b:04:d2:be:3a:7d:0d:fe:30:51:38:02:7c:71:b9:fa:22:
05:0c:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:56 2025 by rpki-client