Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nA2BFAB6-LTjOWsMWIO1WHzVj9k.roa
File: nA2BFAB6-LTjOWsMWIO1WHzVj9k.roa (raw, json)
Hash identifier: RgcGYcGxZaUlk4ftTTjmcEDIB4CSEp9y6ZwQwv2KS5c=
Subject key identifier: 9C:0D:81:14:00:7A:F8:B4:E3:39:6B:0C:58:83:B5:58:7C:D5:8F:D9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01930787836FF3DF17728DA2827D5B308C83
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nA2BFAB6-LTjOWsMWIO1WHzVj9k.roa
Signing time: Thu 07 Nov 2024 16:49:01 +0000
ROA not before: Thu 07 Nov 2024 16:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 5.231.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 11:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:87:83:6f:f3:df:17:72:8d:a2:82:7d:5b:30:8c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 7 16:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c0d8114007af8b4e3396b0c5883b5587cd58fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:ef:d6:27:86:a7:14:4a:6d:e2:8b:bc:43:
30:b0:11:3f:51:61:07:6a:20:7e:e4:05:dd:6e:6d:
59:8d:29:51:55:48:5c:32:e3:56:75:7c:ef:03:b2:
7d:dd:75:d5:7a:38:37:cc:1e:15:24:ed:51:15:ce:
8b:0e:14:b7:21:e3:b8:01:67:da:09:02:63:9c:8e:
9b:6f:50:34:cc:ff:a4:7b:76:24:9c:a5:ee:3d:40:
cc:22:c3:39:e0:7e:1b:8f:a4:57:0f:43:6d:39:a6:
c5:ef:ce:d6:a1:e5:f3:a8:ac:6a:cb:1f:4e:7f:6d:
3d:aa:4d:aa:83:4a:56:66:17:31:a7:71:43:4c:4f:
da:7a:86:0f:76:ad:a4:17:6f:e1:8b:94:ef:d2:64:
73:ea:77:d6:16:6f:00:93:2f:05:ca:28:98:5c:68:
30:80:47:0c:ef:3c:0c:96:6c:0c:2c:2f:58:71:89:
2e:bb:48:7a:9a:72:12:a7:8b:6a:bd:72:95:8a:c5:
4a:83:4a:6e:b4:ce:9c:bf:69:5a:c0:c2:21:cf:3a:
40:05:46:d5:87:ae:90:f7:7f:60:af:31:06:41:f9:
d6:53:a5:29:43:d1:38:21:4a:27:48:7c:bb:32:36:
f2:5c:99:22:62:3c:a7:af:5b:95:e8:ea:f6:e9:22:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0D:81:14:00:7A:F8:B4:E3:39:6B:0C:58:83:B5:58:7C:D5:8F:D9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nA2BFAB6-LTjOWsMWIO1WHzVj9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:a5:18:e7:da:39:83:1d:25:69:e9:c1:7b:9f:60:35:71:e0:
85:73:9a:85:d8:d5:9a:1c:76:f1:57:f8:d4:09:fc:b3:d1:54:
fb:96:d1:fd:c7:dc:07:3e:aa:e6:a8:27:53:bd:31:74:38:34:
7e:4f:47:56:0c:3c:8c:ba:64:26:3d:4b:49:30:35:6a:f8:0c:
f7:e8:d3:8e:ce:45:a9:c4:f6:48:8f:39:98:86:7d:35:08:d7:
7a:aa:2e:d0:2e:04:81:d8:e3:4b:3f:f4:a8:5f:4b:2d:39:cb:
aa:30:fb:66:21:f0:7c:72:5c:18:7b:b2:49:cf:9d:20:e5:f7:
cb:f8:df:7e:5f:4a:f5:a8:9a:be:9a:8a:00:76:a8:cf:6e:02:
1c:56:84:40:8d:ae:b4:74:90:1f:6b:97:fb:bc:7c:73:e5:56:
5f:76:39:3e:df:6f:3c:84:21:d5:77:fd:c5:6e:94:ce:70:85:
14:e2:50:69:54:3c:66:7c:11:6f:4b:8e:a2:d7:db:e8:c2:30:
85:97:61:e8:4a:90:28:d9:57:ac:56:ca:4e:5f:79:ed:b4:75:
1e:7d:72:b2:50:81:f6:f4:e7:1f:48:c8:c9:05:17:93:d7:6b:
7a:13:d9:6c:d0:75:19:1f:d4:72:54:3e:08:fb:01:92:1b:8b:
08:92:1e:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMHh4Nv898Xco2ign1bMIyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTA3MTY0OTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzBkODExNDAwN2FmOGI0ZTMzOTZiMGM1ODgzYjU1ODdjZDU4ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupDv1ieGpxRKbeKLvEMwsBE/UWEH
aiB+5AXdbm1ZjSlRVUhcMuNWdXzvA7J93XXVejg3zB4VJO1RFc6LDhS3IeO4AWfa
CQJjnI6bb1A0zP+ke3YknKXuPUDMIsM54H4bj6RXD0NtOabF787WoeXzqKxqyx9O
f209qk2qg0pWZhcxp3FDTE/aeoYPdq2kF2/hi5Tv0mRz6nfWFm8Aky8FyiiYXGgw
gEcM7zwMlmwMLC9YcYkuu0h6mnISp4tqvXKVisVKg0putM6cv2lawMIhzzpABUbV
h66Q939grzEGQfnWU6UpQ9E4IUonSHy7MjbyXJkiYjynr1uV6Or26SJwlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJwNgRQAevi04zlrDFiDtVh81Y/ZMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbkEyQkZBQjYtTFRqT1dzTVdJTzFXSHpWajlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABecZMA0G
CSqGSIb3DQEBCwUAA4IBAQC2pRjn2jmDHSVp6cF7n2A1ceCFc5qF2NWaHHbxV/jU
Cfyz0VT7ltH9x9wHPqrmqCdTvTF0ODR+T0dWDDyMumQmPUtJMDVq+Az36NOOzkWp
xPZIjzmYhn01CNd6qi7QLgSB2ONLP/SoX0stOcuqMPtmIfB8clwYe7JJz50g5ffL
+N9+X0r1qJq+mooAdqjPbgIcVoRAja60dJAfa5f7vHxz5VZfdjk+3288hCHVd/3F
bpTOcIUU4lBpVDxmfBFvS46i19vowjCFl2HoSpAo2VesVspOX3nttHUefXKyUIH2
9OcfSMjJBReT12t6E9ls0HUZH9RyVD4I+wGSG4sIkh7x
-----END CERTIFICATE-----
Generated at Fri Nov 8 16:57:55 2024 by rpki-client on console-ams.rpki-client.org