Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nuFfzM4pm9xHSxDoNtrKWQ-mjjw.roa
File: nuFfzM4pm9xHSxDoNtrKWQ-mjjw.roa (raw, json)
Hash identifier: pbzfYKrS3KSpNjzpv0uQGnbQTgF9wE0Lq3rrLnhUnio=
Subject key identifier: 9E:E1:5F:CC:CE:29:9B:DC:47:4B:10:E8:36:DA:CA:59:0F:A6:8E:3C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019513FD9C818249B258EEAD6920EF4C7C1A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nuFfzM4pm9xHSxDoNtrKWQ-mjjw.roa
Signing time: Mon 17 Feb 2025 12:59:02 +0000
ROA not before: Mon 17 Feb 2025 12:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 5.181.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 18:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:fd:9c:81:82:49:b2:58:ee:ad:69:20:ef:4c:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 17 12:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ee15fccce299bdc474b10e836daca590fa68e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:ee:e7:ab:ea:f4:3a:f1:54:af:61:20:1b:
4e:44:2c:d7:c5:5d:9c:72:d3:97:cd:84:53:8c:bb:
01:37:0d:54:6f:e3:d7:fd:5d:bb:96:29:17:4b:a9:
00:3c:5c:1b:68:a2:fb:e9:60:08:c8:7f:b6:e8:fb:
70:e4:97:9d:86:e0:a3:c4:e1:01:61:76:de:04:f4:
79:94:df:1b:8c:19:d1:22:c5:f4:ab:f8:ce:78:4d:
df:43:11:23:a0:d0:e7:5d:5a:1a:6b:2b:6d:c1:5d:
a3:dd:ac:4b:26:7d:65:0d:8e:f2:6a:88:3d:76:3b:
34:f3:6f:40:36:ce:44:e6:4c:25:df:ed:53:f0:cc:
20:fc:c1:24:8c:85:f7:e8:42:e0:55:8d:30:ca:b5:
40:f9:06:80:54:4e:8b:39:c7:4d:3a:31:f6:9f:d1:
55:ff:d8:35:56:91:b9:c6:01:1c:ea:9c:6e:87:a3:
d5:75:51:54:88:a0:c7:03:93:e0:e1:08:23:9f:55:
90:2c:3f:f5:80:ac:1a:ba:df:d8:03:f3:c6:a0:85:
b2:21:10:be:65:d4:f8:00:91:f3:85:2a:1a:1d:0f:
5f:e4:bf:12:82:3c:77:bb:0f:6e:3b:72:db:93:d6:
66:9d:a1:08:c3:c3:8f:db:13:4d:4b:f1:cc:69:52:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:5F:CC:CE:29:9B:DC:47:4B:10:E8:36:DA:CA:59:0F:A6:8E:3C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nuFfzM4pm9xHSxDoNtrKWQ-mjjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5b:67:5c:4a:92:01:f3:6f:69:c3:ec:d4:2b:42:75:5a:62:
1d:60:71:c3:c4:64:d6:d8:41:bc:bc:4c:0b:ef:81:d5:03:5d:
2e:17:b3:2f:b9:1d:3f:8b:40:0a:0e:96:f5:ed:80:62:d2:3b:
ce:81:fa:0f:b9:c8:a8:45:4d:b7:a1:e9:da:30:e0:5c:d8:32:
77:e0:da:71:09:4b:8c:06:3d:37:c9:50:6e:ef:9a:65:ff:86:
96:5a:66:c9:f2:a4:4c:59:3b:82:b3:3c:19:85:3d:28:10:b0:
0a:b6:4e:5d:a4:ff:42:28:ed:73:ea:de:91:ea:21:58:4f:fb:
0f:3b:80:ca:9e:d8:74:0e:f6:c2:42:85:f4:30:d0:3d:8d:19:
6f:23:0b:79:ff:a4:8f:49:b3:55:9a:87:ed:95:2d:22:c8:e2:
d6:34:76:2b:79:00:2e:cd:37:27:24:55:61:71:50:c2:99:b7:
7d:99:4a:05:f3:a6:b9:11:26:35:3a:3f:fc:58:a1:59:06:46:
c6:9b:c0:06:3a:9b:de:ae:0f:df:ae:62:ca:19:aa:58:98:15:
38:0f:0a:d3:75:15:74:12:01:ac:0a:f6:83:3e:07:c0:39:0c:
a6:eb:38:cb:8d:a3:fb:ef:33:2c:72:4b:ca:47:de:6d:89:1c:
e3:c9:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:54:08 2025 by rpki-client