Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RX9FJI7eG1sVPRFQK674XyVV4Gk.roa
File: RX9FJI7eG1sVPRFQK674XyVV4Gk.roa (raw, json)
Hash identifier: mzqcfB+FY2HL9MuCDE0TZ1vgYR5RRdStuluncEG0Lpw=
Subject key identifier: 45:7F:45:24:8E:DE:1B:5B:15:3D:11:50:2B:AE:F8:5F:25:55:E0:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019377A0D97334847F49DD5595163EA68266
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RX9FJI7eG1sVPRFQK674XyVV4Gk.roa
Signing time: Fri 29 Nov 2024 11:14:10 +0000
ROA not before: Fri 29 Nov 2024 11:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 09:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:a0:d9:73:34:84:7f:49:dd:55:95:16:3e:a6:82:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 29 11:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=457f45248ede1b5b153d11502baef85f2555e069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:7b:e2:a9:b2:c6:8c:45:ee:e1:df:2a:c5:
bb:65:84:f2:7e:7e:15:fa:47:c9:40:09:67:eb:e1:
23:a7:aa:12:2c:d2:0b:36:c7:9a:87:34:89:27:d8:
3b:dc:97:b6:2c:08:ef:33:a7:63:e2:01:76:0c:48:
88:b2:03:8e:72:91:29:98:7e:68:81:7f:27:98:7e:
0e:a5:53:cb:79:89:6e:d8:06:41:36:bb:71:94:91:
36:25:45:44:1e:aa:a6:f9:65:f3:a2:b3:a5:37:e7:
88:42:14:dd:9e:43:51:58:df:d2:52:f8:52:36:91:
1e:cf:67:f4:e3:32:fe:e7:da:4e:04:6d:c4:ca:d8:
2c:e5:95:27:04:13:0a:04:d5:42:4f:b9:1e:c5:bd:
14:39:87:20:e1:28:ca:21:d8:5f:f2:c3:9e:10:db:
c0:ab:d8:f9:64:1f:c5:84:fb:5c:0d:27:66:9a:6f:
58:d4:32:db:ca:bc:39:dd:07:95:68:5a:e1:07:56:
09:8a:25:d3:48:e7:65:56:2c:98:b8:c9:04:f5:58:
03:6c:1c:f0:02:28:cf:a4:1d:3a:b2:71:a7:d4:e1:
6c:13:ba:ff:30:80:15:a8:6a:f2:a3:66:4e:eb:6a:
84:86:06:33:68:ef:fc:d3:65:ce:83:d6:0b:18:20:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:45:24:8E:DE:1B:5B:15:3D:11:50:2B:AE:F8:5F:25:55:E0:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RX9FJI7eG1sVPRFQK674XyVV4Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.142.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:68:e6:75:82:4c:9e:94:34:c3:35:1b:41:cc:29:e2:49:f0:
f8:41:4b:9f:f9:e7:97:52:e9:d2:1f:17:fa:a3:03:40:b6:f2:
6f:5d:d7:0e:e9:b8:f4:17:44:d0:35:f7:e7:48:b7:6b:75:62:
07:80:37:ae:b7:c9:d2:da:a5:1d:b8:6f:7c:7b:27:6a:f2:21:
59:62:b3:0a:0d:c4:db:64:c5:d6:54:d8:3a:25:fa:7a:42:f5:
68:df:91:48:91:cc:ee:fb:19:c3:5a:3e:56:d7:b8:15:86:bf:
d9:a9:fa:90:c7:9d:1b:f1:58:fc:63:d8:53:8d:5f:8f:47:90:
84:1d:47:58:b2:c4:4b:55:0c:a1:56:c8:a4:34:47:ed:e3:49:
86:b8:47:e7:0c:0d:a7:19:d8:ec:6f:da:a0:c0:83:3d:25:8f:
48:1c:d8:13:4f:03:79:c1:db:66:9a:6e:af:35:60:f7:f8:b4:
05:91:13:99:1f:58:96:78:0c:3c:2a:45:5f:cf:c3:e1:53:c8:
2c:71:d8:35:cc:95:7c:73:de:15:c7:14:02:6f:98:5c:01:68:
73:51:91:0e:4f:2b:2c:6d:6f:e8:fa:c8:26:0a:82:85:72:fd:
72:c8:e1:80:86:a8:57:89:87:6b:3a:71:c7:2d:01:7f:8b:3e:
4e:cf:5b:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN3oNlzNIR/Sd1VlRY+poJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTI5MTExNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTdmNDUyNDhlZGUxYjViMTUzZDExNTAyYmFlZjg1ZjI1NTVlMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUh74qmyxoxF7uHfKsW7ZYTyfn4V
+kfJQAln6+Ejp6oSLNILNseahzSJJ9g73Je2LAjvM6dj4gF2DEiIsgOOcpEpmH5o
gX8nmH4OpVPLeYlu2AZBNrtxlJE2JUVEHqqm+WXzorOlN+eIQhTdnkNRWN/SUvhS
NpEez2f04zL+59pOBG3Eytgs5ZUnBBMKBNVCT7kexb0UOYcg4SjKIdhf8sOeENvA
q9j5ZB/FhPtcDSdmmm9Y1DLbyrw53QeVaFrhB1YJiiXTSOdlViyYuMkE9VgDbBzw
AijPpB06snGn1OFsE7r/MIAVqGryo2ZO62qEhgYzaO/802XOg9YLGCCnkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEV/RSSO3htbFT0RUCuu+F8lVeBpMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUlg5RkpJN2VHMXNWUFJGUUs2NzRYeVZWNEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBa+OMA0G
CSqGSIb3DQEBCwUAA4IBAQDdaOZ1gkyelDTDNRtBzCniSfD4QUuf+eeXUunSHxf6
owNAtvJvXdcO6bj0F0TQNffnSLdrdWIHgDeut8nS2qUduG98eydq8iFZYrMKDcTb
ZMXWVNg6Jfp6QvVo35FIkczu+xnDWj5W17gVhr/ZqfqQx50b8Vj8Y9hTjV+PR5CE
HUdYssRLVQyhVsikNEft40mGuEfnDA2nGdjsb9qgwIM9JY9IHNgTTwN5wdtmmm6v
NWD3+LQFkROZH1iWeAw8KkVfz8PhU8gscdg1zJV8c94VxxQCb5hcAWhzUZEOTyss
bW/o+sgmCoKFcv1yyOGAhqhXiYdrOnHHLQF/iz5Oz1t6
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:48 2025 by rpki-client