Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mCs5Y2BxotfIhnEnowrae3ddKLg.roa
File: mCs5Y2BxotfIhnEnowrae3ddKLg.roa (raw, json)
Hash identifier: 0IcJqQViVxakRloZFGReMFt7FZgvViY1zqwGG4mlbWU=
Subject key identifier: 98:2B:39:63:60:71:A2:D7:C8:86:71:27:A3:0A:DA:7B:77:5D:28:B8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194A909E9BF398D0302FC160DC46C8ACFDF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mCs5Y2BxotfIhnEnowrae3ddKLg.roa
Signing time: Mon 27 Jan 2025 18:33:06 +0000
ROA not before: Mon 27 Jan 2025 18:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213519
IP address blocks: 5.175.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 13:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:09:e9:bf:39:8d:03:02:fc:16:0d:c4:6c:8a:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 27 18:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=982b39636071a2d7c8867127a30ada7b775d28b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:17:88:55:12:b0:7f:8c:72:39:54:e3:e1:
08:41:20:c8:ec:b8:99:6f:2c:96:4f:b2:95:39:54:
27:73:11:3a:38:49:86:21:be:75:a4:09:08:66:bd:
13:a7:80:84:f2:4a:d8:ff:99:e2:c5:89:d8:53:ba:
dc:95:db:bf:9e:c4:ea:19:4c:cb:8f:82:1b:c8:40:
48:26:3b:5d:e0:76:33:87:7f:38:f5:7e:37:0e:0d:
db:35:ff:46:1c:84:30:d0:99:d5:24:50:ec:1b:09:
b6:bd:06:fd:25:b9:ad:29:98:52:e3:b3:9a:f5:78:
44:98:ef:2a:fb:f1:27:7d:25:55:32:26:9c:f7:cb:
ea:53:bc:5c:4c:9b:38:f9:55:7e:f5:79:29:3b:1a:
f4:1c:1d:4d:68:dc:15:d8:13:16:e7:80:dd:66:b3:
ee:6a:20:71:54:d6:f8:cf:65:c7:0a:d5:47:11:ea:
09:6c:5b:b6:77:cd:47:51:f4:f5:4a:85:f7:b1:a4:
13:72:c7:15:71:4f:ab:5b:ec:48:8e:1a:14:4a:fe:
f8:5a:b6:c9:65:97:a6:01:05:82:d8:40:01:bc:bc:
ae:95:cb:7e:59:85:fa:0b:03:2a:56:de:bf:58:51:
45:fb:58:50:00:01:d7:97:c7:3b:b0:0f:d4:64:3e:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2B:39:63:60:71:A2:D7:C8:86:71:27:A3:0A:DA:7B:77:5D:28:B8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mCs5Y2BxotfIhnEnowrae3ddKLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
Signature Algorithm: sha256WithRSAEncryption
79:87:02:34:34:25:a1:8a:30:ea:80:1b:46:7b:37:0f:92:4a:
4a:13:d0:d3:37:a7:97:54:69:78:cb:81:10:4b:04:65:2a:b6:
d6:5c:9e:f8:6f:4c:81:c8:9e:7a:28:d9:17:90:1e:93:dd:74:
3c:20:8d:f3:2b:43:a2:15:3a:70:95:42:08:9f:0f:a4:4d:78:
89:45:94:ca:10:27:c0:e7:a5:65:de:84:2e:2a:ad:1c:18:25:
52:e7:13:ef:78:27:0a:fc:7b:0b:99:7c:84:02:39:8d:59:22:
9c:bb:7a:ec:67:7e:37:76:c2:39:e3:78:0b:fc:26:f0:ac:c3:
1e:9f:37:93:a5:bc:45:6a:c7:dc:3b:7f:15:5e:9f:73:2b:a3:
31:e8:36:4a:9e:cb:33:0c:55:fc:95:ee:b3:4b:5e:54:e0:67:
41:b3:47:0b:51:bb:44:5e:a2:14:9e:c5:17:34:48:24:97:0a:
da:bb:20:fb:39:66:b2:19:f9:48:56:91:6e:31:33:44:6f:ae:
e9:64:14:76:dd:ca:47:14:98:c7:b2:b4:91:02:e6:0e:98:1a:
4c:b2:b3:5a:2b:52:dd:bb:1c:c6:36:fe:d6:f7:d9:3c:6f:32:
fb:f4:90:b7:2a:17:69:6f:36:e9:a0:a1:a1:e1:2c:2a:93:80:
21:f7:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:48 2025 by rpki-client