Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MIlvdLhUx6OH3KCo8OjooGdGm2M.roa
File: MIlvdLhUx6OH3KCo8OjooGdGm2M.roa (raw, json)
Hash identifier: wvM3bd9u3vVu166TDDRtUBICd0TeD03zZsdLdJT7+fY=
Subject key identifier: 30:89:6F:74:B8:54:C7:A3:87:DC:A0:A8:F0:E8:E8:A0:67:46:9B:63
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B3A29E4F60A699CFF366428306D02429
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MIlvdLhUx6OH3KCo8OjooGdGm2M.roa
Signing time: Wed 29 Jan 2025 19:56:06 +0000
ROA not before: Wed 29 Jan 2025 19:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214971
IP address blocks: 5.231.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 11:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:a2:9e:4f:60:a6:99:cf:f3:66:42:83:06:d0:24:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 29 19:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30896f74b854c7a387dca0a8f0e8e8a067469b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:ce:20:ec:09:7a:28:68:16:b1:ec:fb:18:
6d:eb:af:ce:95:33:c1:ae:21:eb:ef:da:b8:25:8b:
f0:32:25:cc:16:b7:0c:b4:c0:a4:59:df:a5:78:97:
b2:47:6f:6a:e4:0a:38:ed:b6:a8:04:ef:8d:55:45:
6c:8c:2b:24:35:f7:f8:1e:11:d1:eb:84:c4:9f:95:
a8:f6:48:9c:c2:32:f4:b1:b7:24:e3:2e:61:73:1d:
f0:20:47:40:26:b5:3b:a1:d4:0b:b4:ee:19:05:9d:
f4:e9:c9:c9:41:86:d2:2e:7e:f5:6a:de:1b:c6:fc:
4e:e0:8d:5e:ae:dd:7e:b1:87:6c:e4:f5:9d:4e:a4:
de:95:64:ef:2f:39:5d:80:71:15:61:c1:0a:2e:05:
86:83:81:94:b2:f0:ce:6f:b4:79:df:47:53:c5:43:
2f:b5:61:fe:ce:10:2b:11:2f:d8:47:68:dc:fb:58:
65:30:fb:25:63:e9:25:a2:7f:62:98:fa:6c:2a:bf:
96:b6:93:45:5d:88:08:93:a7:3d:d7:54:e9:88:7a:
36:69:e1:50:73:be:18:f5:4c:91:8c:8b:cf:69:10:
2c:73:ef:e6:ea:b2:e5:9b:04:17:d3:a9:9c:d8:82:
01:97:b5:1d:a4:ea:d3:80:06:1a:8c:b4:ed:9e:d9:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:89:6F:74:B8:54:C7:A3:87:DC:A0:A8:F0:E8:E8:A0:67:46:9B:63
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MIlvdLhUx6OH3KCo8OjooGdGm2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:45:7c:9c:56:e1:af:cc:ef:9e:3a:ab:59:c5:64:a1:d3:1c:
43:db:a0:b8:7a:86:b9:0a:da:2d:11:4e:0f:64:9b:f5:89:e0:
4c:9e:09:35:c6:fb:2a:a0:2d:98:1f:30:16:ea:8d:04:6f:dd:
48:68:4b:29:89:84:ee:1a:a8:32:f8:4b:43:3b:d7:7f:fb:01:
64:95:5f:e5:6f:a0:a4:94:64:0b:1f:7d:e3:ea:4e:79:9a:f7:
fb:47:c4:9c:24:68:4e:97:68:6f:d9:33:9f:d0:cc:32:37:81:
c5:a2:04:de:d7:6b:1d:ba:56:ef:11:50:ce:62:74:b6:74:b3:
04:e9:1c:9f:87:08:f2:4d:1a:c2:38:20:eb:5c:e3:dc:b0:ae:
b7:08:9d:fb:50:67:cd:2f:46:f6:27:4d:1d:13:46:36:82:48:
e4:02:0d:06:3d:08:9d:25:11:a8:c0:34:68:0e:88:d8:42:1f:
1c:7e:24:0c:4d:87:52:f0:26:ee:e5:4f:9e:fb:27:42:4e:21:
52:f5:c5:16:a4:b7:45:21:ad:c6:5a:fe:91:55:a2:d7:5d:c4:
93:8e:e2:58:9c:99:74:8b:90:5e:d3:6b:76:f1:6d:19:22:f1:
32:59:24:b8:4c:f9:1c:03:4f:77:fa:f9:5b:7b:b4:2a:2f:b8:
c5:d9:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:23:01 2025 by rpki-client