Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y34LeJF0ekMm2Z3Prt0cDdedak4.roa
File: y34LeJF0ekMm2Z3Prt0cDdedak4.roa (raw, json)
Hash identifier: wdXWfx6X/9ql1iq8k5wgF1flmK9e+uSWWjcpKsUyvJc=
Subject key identifier: CB:7E:0B:78:91:74:7A:43:26:D9:9D:CF:AE:DD:1C:0D:D7:9D:6A:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942559A3C05F16EECCD6596CBE5270C41B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y34LeJF0ekMm2Z3Prt0cDdedak4.roa
Signing time: Thu 02 Jan 2025 04:50:19 +0000
ROA not before: Thu 02 Jan 2025 04:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62880
IP address blocks: 5.175.236.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:59:a3:c0:5f:16:ee:cc:d6:59:6c:be:52:70:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 04:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb7e0b7891747a4326d99dcfaedd1c0dd79d6a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:69:e8:1e:aa:34:48:e7:12:c0:fc:5d:10:
7d:e5:96:36:91:47:9c:3b:32:12:d2:ab:3a:8d:33:
c9:ed:ae:df:af:ae:dc:1e:0d:82:7d:fc:f3:ee:04:
d8:ad:5a:60:db:3d:0c:eb:c8:66:24:14:e7:7f:28:
e8:16:cd:2e:a8:c6:b0:de:28:54:8e:aa:bd:8c:2a:
91:67:c7:1b:f1:7c:d2:78:dd:8e:d8:44:a3:b5:99:
4d:f9:90:8c:8c:3e:57:c4:c4:7b:ce:b4:a6:43:d8:
cc:39:53:9f:c4:e9:b1:4c:5c:ab:4b:e0:1a:26:b7:
aa:8b:b7:a0:58:2f:0c:f4:3e:fb:7d:74:87:32:62:
67:5d:fd:9f:3a:93:96:d3:bd:40:5e:1b:d9:99:7e:
5b:48:65:22:9d:99:6c:7e:d2:75:54:ae:6e:a1:3e:
7a:6b:be:ed:93:a9:eb:df:f9:35:3a:c6:b7:0f:1c:
43:6a:81:58:ef:ba:30:12:c5:e7:f8:3c:1a:73:bb:
c6:0d:e8:af:28:fa:c8:14:23:08:e7:1a:db:7d:1f:
a5:b5:ed:be:ce:f1:8b:26:21:c1:a0:b3:b2:fd:53:
c7:21:8b:70:41:b3:19:20:55:fd:a2:f8:43:f5:33:
6f:8d:ce:85:64:72:99:87:89:31:61:46:b1:86:df:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:0B:78:91:74:7A:43:26:D9:9D:CF:AE:DD:1C:0D:D7:9D:6A:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y34LeJF0ekMm2Z3Prt0cDdedak4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:6b:dc:8d:66:53:5e:95:02:c7:f5:c3:96:26:3d:8d:93:6c:
b6:b9:b9:56:fa:c3:52:fb:05:c4:26:c9:73:27:fa:42:86:bc:
6e:a8:3a:f3:8e:cf:f2:44:91:54:1a:bf:ba:f3:20:a3:0c:40:
e9:05:88:ae:04:98:7b:67:11:44:bf:84:f5:f4:b1:7c:20:62:
18:2c:50:52:1e:91:bd:dc:23:c7:4b:6b:15:f8:55:71:91:b2:
b8:21:02:1f:1e:63:14:2c:7b:a7:5d:68:c5:6e:c0:e2:76:83:
7b:a1:d8:ee:e3:f4:02:21:73:a7:fb:64:98:e4:9d:af:83:70:
31:27:16:b5:e9:1c:59:c7:2f:90:29:4d:cb:d6:e6:6a:4f:fd:
6d:4e:28:16:f7:7f:23:43:69:c6:6b:55:cd:6b:d3:31:d3:62:
d0:b5:dc:77:d8:56:44:98:74:f4:1d:eb:0c:94:0e:26:d0:a8:
db:36:6a:ba:8e:35:a8:12:4d:56:91:2b:04:43:e6:0a:5f:47:
e9:0d:3a:59:4d:25:cb:07:61:c8:06:dd:20:7b:53:d1:94:bd:
ba:3b:5a:f8:a9:6c:3c:2d:df:c6:d2:98:d2:38:4d:f0:83:b4:
fa:4b:bf:ee:b5:d3:c6:49:5c:48:71:6a:df:cf:fe:7b:12:aa:
08:3a:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:20 2025 by rpki-client