Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/RKYE8wu3rAOi5BL7He2XKHL2sMU.roa
File: RKYE8wu3rAOi5BL7He2XKHL2sMU.roa (raw, json)
Hash identifier: +03MXAj79rpp4+y86gpq7+PyxrbR+sb/k3SnbmjQdjA=
Subject key identifier: 44:A6:04:F3:0B:B7:AC:03:A2:E4:12:FB:1D:ED:97:28:72:F6:B0:C5
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0193F492DA6FA190EDD5CC89FDEE96E775D5
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/RKYE8wu3rAOi5BL7He2XKHL2sMU.roa
Signing time: Mon 23 Dec 2024 17:31:25 +0000
ROA not before: Mon 23 Dec 2024 17:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198584
IP address blocks: 5.144.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:92:da:6f:a1:90:ed:d5:cc:89:fd:ee:96:e7:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Dec 23 17:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44a604f30bb7ac03a2e412fb1ded972872f6b0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:58:d3:3d:58:09:15:30:97:5c:b1:46:7a:
a4:8c:da:6c:1c:91:dc:6b:9e:8f:8f:80:0b:35:f3:
a5:b0:30:06:f1:31:5f:cd:ef:a6:54:f7:29:65:0d:
b8:ba:b4:89:69:a7:9c:51:4f:49:84:3a:6f:48:e4:
fa:4b:a1:c4:da:7c:69:04:d8:16:55:32:b8:34:2d:
88:21:66:fe:c5:c4:c9:9b:7d:0c:56:1e:f1:0a:eb:
d3:dc:18:eb:b6:b3:c6:45:4e:07:41:f5:d4:7f:01:
d1:6b:94:da:ea:dc:2d:68:0a:72:38:41:6f:09:91:
eb:a7:8f:2a:3c:56:12:ad:8e:12:92:67:20:5f:66:
d5:ad:7c:d2:27:b2:b2:9d:c2:d7:07:cd:2b:66:ef:
0a:b0:3e:ab:14:46:12:1a:92:1f:03:19:ce:e4:41:
c7:aa:39:48:75:b3:73:ca:e2:e6:40:61:80:9d:b1:
66:fd:71:f0:dc:2a:1a:25:ce:99:c5:68:b8:6c:85:
d3:35:e4:6d:17:6b:ed:77:5a:9e:00:91:dc:59:e3:
9f:07:7f:b6:70:8b:e0:a2:f6:b2:e4:fe:81:02:89:
f5:35:44:fd:0e:82:a3:c5:e0:16:17:7a:74:63:74:
37:7a:30:87:c6:6d:c6:20:8f:c8:d0:60:22:e0:f9:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:04:F3:0B:B7:AC:03:A2:E4:12:FB:1D:ED:97:28:72:F6:B0:C5
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/RKYE8wu3rAOi5BL7He2XKHL2sMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.155.0/24
Signature Algorithm: sha256WithRSAEncryption
91:72:c3:de:d6:b4:b7:34:ee:29:b3:51:e7:3e:ec:59:2c:81:
a2:b3:9a:19:fc:29:0f:3f:76:3b:ba:4c:69:30:42:a4:46:e5:
ed:64:37:da:83:4e:99:1d:a9:33:dc:26:23:a9:a0:9b:45:c0:
1e:5b:5a:d3:1f:84:db:70:de:57:80:21:32:b6:1b:d1:93:8b:
9c:1a:38:44:ec:03:fc:7e:28:79:5b:25:c6:2f:43:7c:f6:11:
3b:99:91:13:a2:e3:e0:47:10:7e:92:32:12:d8:9d:db:86:c7:
30:2e:5d:81:81:04:c2:0b:97:af:22:28:62:07:13:8a:1a:53:
60:8f:ae:a9:44:4e:31:49:4b:56:d9:1d:45:aa:f8:7b:a0:0d:
9e:19:67:f6:ca:44:32:57:80:9c:87:8b:76:c6:8a:f2:3a:9d:
2c:23:e0:c4:bf:ec:ba:5e:cb:da:bc:8c:cd:38:6c:4c:bf:2c:
42:cb:4e:93:fc:67:9b:1c:b9:67:57:07:27:b7:68:00:87:05:
03:4b:96:3b:1f:92:9c:bf:ce:88:87:ea:4a:72:c4:ac:ff:27:
c6:c6:95:b5:41:72:e6:75:10:07:ff:ed:4c:25:3a:bc:84:b9:
56:23:1f:a3:8a:20:2a:18:97:1d:e4:57:0b:91:e7:95:35:e2:
4f:f9:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:09:24 2025 by rpki-client