Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/Bt5fWVKZyt0Sjys9XVMHm4RoWeA.roa
File: Bt5fWVKZyt0Sjys9XVMHm4RoWeA.roa (raw, json)
Hash identifier: XSoUXFZNjZYi2rum1MLgRw/Iyn/ATPtYrvXpCoJidW0=
Subject key identifier: 06:DE:5F:59:52:99:CA:DD:12:8F:2B:3D:5D:53:07:9B:84:68:59:E0
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 0194244555E0B4965D59655D415F004AFE0E
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/Bt5fWVKZyt0Sjys9XVMHm4RoWeA.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 07:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:55:e0:b4:96:5d:59:65:5d:41:5f:00:4a:fe:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06de5f595299cadd128f2b3d5d53079b846859e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:d9:d0:e5:44:cf:c2:07:c6:62:44:9a:91:
07:ed:9e:07:ba:a6:53:d9:83:78:d9:d6:f2:db:a6:
fb:2f:06:92:50:a0:e7:5d:91:b8:cf:7c:53:61:f6:
2c:84:c9:79:3e:45:16:e7:de:b0:0c:38:9f:05:fd:
f1:41:27:ca:54:d4:db:21:39:38:7d:fe:86:8a:1f:
bf:32:6f:30:0b:ec:f9:1c:a4:a5:bf:2f:d6:5e:79:
1f:3f:64:e9:14:95:1c:de:db:32:00:f1:de:31:de:
d2:60:27:9c:75:30:97:6b:46:cf:43:53:fb:1a:12:
19:6e:3b:cd:d7:c8:8a:9c:e7:05:fa:7f:89:3d:86:
47:ee:d5:f6:91:41:35:af:52:a6:6f:f8:39:a8:5f:
ce:a3:b5:6b:94:78:a9:d0:fa:d4:73:fd:26:19:ba:
79:a2:b7:b1:ee:be:c6:ba:5c:b7:b5:e0:80:84:02:
52:09:e1:5b:ed:fa:90:01:b4:ff:4e:2c:c0:30:9f:
58:b1:b9:14:b9:40:24:e5:ed:25:2b:9b:c0:f3:72:
ca:e9:d2:e0:86:cd:f9:86:68:4a:c9:b0:82:ef:8d:
d9:14:97:48:f5:f5:35:6d:f5:9d:a5:c1:e5:4b:a9:
a9:85:4f:47:a2:9d:d3:a0:8b:ab:75:d1:f4:88:c5:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DE:5F:59:52:99:CA:DD:12:8F:2B:3D:5D:53:07:9B:84:68:59:E0
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/Bt5fWVKZyt0Sjys9XVMHm4RoWeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:39:49:08:25:40:53:a7:7f:0c:ea:d4:18:f7:ce:18:8b:8c:
20:1c:b7:6a:40:95:ac:c0:a5:18:2c:7d:91:2b:9b:8b:73:6e:
5c:06:cb:e9:91:0a:09:2f:42:5f:17:eb:10:cd:7f:d6:15:35:
8d:34:e8:dd:b6:da:87:ba:cc:88:fc:2a:15:93:a1:30:4d:f8:
d5:3c:86:c9:59:4e:83:ce:a6:12:81:79:e7:5c:76:d3:48:8d:
61:22:35:b8:8a:bd:e0:d1:d1:70:0c:cb:1a:0d:91:4b:f0:2b:
2e:73:a9:bf:45:1d:19:54:f9:5c:42:38:73:63:3e:f3:b1:e0:
97:a7:c2:72:7b:cb:37:3f:d5:79:4d:7a:b0:ee:25:78:3b:90:
ed:aa:f3:cd:af:1e:45:88:cb:a3:21:a8:c1:2d:b3:d5:ac:2a:
2f:ad:fd:4d:3a:96:2b:a9:88:78:54:25:f7:8b:7b:47:85:ae:
a5:92:f5:a8:54:a7:17:3b:00:14:1a:3f:94:a9:0c:aa:bc:95:
b0:74:57:2f:83:91:aa:63:92:7e:dc:cf:ed:66:22:d8:4e:81:
2e:96:5a:bc:5c:e3:be:33:95:d6:00:f3:fb:f7:99:8e:c3:29:
f5:15:34:4d:b4:e0:76:78:87:fc:78:d9:ae:31:b6:bb:d1:7a:
9a:0b:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:02:22 2025 by rpki-client