Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TEjT5YeMk0MAgB2f7Rvh6GRHhVw.roa
File: TEjT5YeMk0MAgB2f7Rvh6GRHhVw.roa (raw, json)
Hash identifier: ik7U259vuup/9OPdLKwDtr9Im6J4jDsvfgEMRz8+XzE=
Subject key identifier: 4C:48:D3:E5:87:8C:93:43:00:80:1D:9F:ED:1B:E1:E8:64:47:85:5C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01945C195659C2C18C8FEDD88BA12078F0D8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TEjT5YeMk0MAgB2f7Rvh6GRHhVw.roa
Signing time: Sun 12 Jan 2025 19:59:11 +0000
ROA not before: Sun 12 Jan 2025 19:59:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.47.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 20:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5c:19:56:59:c2:c1:8c:8f:ed:d8:8b:a1:20:78:f0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 12 19:59:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c48d3e5878c934300801d9fed1be1e86447855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e7:43:a1:52:e7:e6:14:1c:13:4d:13:41:eb:
b0:02:1b:d4:46:e8:4d:09:d4:f3:1d:78:01:06:f2:
a7:7a:05:59:b3:30:f3:8b:3f:d1:f3:a5:82:bd:86:
96:8f:c3:ca:5c:88:4f:9d:46:bb:24:4b:fb:5a:dd:
0f:ca:46:03:82:4e:df:3e:6e:da:54:ec:3d:34:f0:
84:fd:14:a0:43:d8:d8:fe:29:3c:af:1a:cd:93:4e:
9a:20:e3:fb:75:ac:10:6f:13:44:45:ff:4a:f0:5e:
b1:3e:f0:21:56:cb:83:25:49:70:00:ae:bc:c2:5c:
01:7b:be:c5:4a:5c:3d:c3:d5:d7:b9:ef:5a:13:e9:
94:74:63:d6:8e:12:f7:71:30:3b:50:92:65:72:ec:
f8:b9:e0:81:26:90:09:7f:b2:bc:a5:e0:65:92:61:
87:af:c5:22:52:37:9c:74:02:9f:5b:47:6f:58:e0:
9b:31:ef:56:8a:d4:01:c0:de:a0:3b:ca:f6:1a:81:
41:db:54:a5:99:cf:9b:6d:f1:1e:4a:ae:4f:e8:25:
26:ed:11:0a:07:e6:cb:81:00:2b:9c:16:49:dd:b8:
8b:d0:b2:2f:7e:98:af:6b:e5:48:c4:e8:e8:dd:57:
da:1b:1d:d3:ef:7c:8d:f3:e2:53:39:f5:89:b4:48:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:D3:E5:87:8C:93:43:00:80:1D:9F:ED:1B:E1:E8:64:47:85:5C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TEjT5YeMk0MAgB2f7Rvh6GRHhVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
77.90.15.0/24
77.90.37.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e6:0b:4b:d7:8f:a2:78:a0:37:1d:16:b3:9b:2f:2c:9a:2e:
d6:f3:0c:45:7a:da:a3:88:e3:02:fb:84:47:89:68:e9:04:06:
ef:15:3e:79:1d:0c:77:77:70:d1:a2:5d:6c:f5:c5:95:84:fd:
55:13:0d:1f:ac:31:51:44:d3:90:15:93:22:e5:45:b6:82:cd:
ce:48:9e:d1:e7:81:0b:86:4f:8f:16:ac:07:79:70:d6:65:97:
65:d0:63:5f:1c:a7:b7:48:9a:65:f4:6f:96:72:88:fc:08:f7:
b3:5a:27:fe:dd:3f:8a:98:01:4d:d7:2f:8e:0e:71:66:44:5f:
32:7b:7b:39:7a:3c:02:e0:57:89:76:ef:bf:be:ac:e7:ef:91:
a7:fc:68:48:4e:17:c7:b8:3e:d8:e1:c9:1b:a4:dd:5a:21:b9:
79:49:9c:b1:47:df:47:af:7d:bb:25:50:13:34:3f:3a:05:bd:
00:3b:7f:02:8b:d6:9d:19:92:e4:8a:c4:ab:6a:2b:c6:9d:3f:
4f:1d:06:ed:97:de:0a:1d:07:b7:96:7b:4d:48:0b:af:fb:ff:
0d:d2:c5:20:d3:42:06:9c:71:41:14:83:e9:88:5d:d2:6d:d0:
2e:96:f8:60:1f:f5:5b:a7:d8:e1:cf:b9:1b:82:69:5f:86:16:
b3:a2:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:17 2025 by rpki-client