Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Y6xKgFJSMGagThqSHBQvd6i_-lA.roa
File: Y6xKgFJSMGagThqSHBQvd6i_-lA.roa (raw, json)
Hash identifier: h3dK4N2+G254Hu0LzjGyA3SwibB2HddKmUNjjExzCQU=
Subject key identifier: 63:AC:4A:80:52:52:30:66:A0:4E:1A:92:1C:14:2F:77:A8:BF:FA:50
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01908BCFA1D1A5C238D6C40053FBE2D26C54
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Y6xKgFJSMGagThqSHBQvd6i_-lA.roa
Signing time: Sun 07 Jul 2024 06:09:18 +0000
ROA not before: Sun 07 Jul 2024 06:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35145
IP address blocks: 5.181.226.0/23 maxlen: 23
5.181.226.0/24 maxlen: 24
5.181.227.0/24 maxlen: 24
2a0e:802:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8b:cf:a1:d1:a5:c2:38:d6:c4:00:53:fb:e2:d2:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jul 7 06:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63ac4a8052523066a04e1a921c142f77a8bffa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:c1:1a:5e:e8:e4:d7:68:9f:43:40:6c:49:
97:dc:71:a4:9d:9b:0e:bb:d1:11:de:19:00:fa:60:
fa:8b:89:53:c5:d1:55:d6:13:fd:4f:c1:6c:a6:48:
c3:61:8e:d9:3e:3e:3b:d3:06:b9:17:28:67:b6:d3:
92:f3:2a:c9:78:8e:9c:22:3e:4a:3f:4d:73:81:f5:
30:d0:93:27:50:2c:a5:9a:9e:fa:41:f8:96:3e:5f:
27:66:fb:c3:77:3f:d1:3b:97:d1:11:d0:b1:df:94:
0b:bc:7f:39:8d:a5:86:e4:07:5c:92:19:54:c9:e7:
36:6b:9e:4e:e2:9f:04:af:ed:0c:9a:bd:ad:75:6c:
05:63:5e:a2:40:1c:dd:38:5c:02:3c:05:e9:36:dd:
3e:c6:9d:28:f8:d2:84:e1:99:2c:4c:57:5f:42:78:
46:96:03:f8:61:92:6c:cd:3e:c5:fd:4c:7c:3b:ad:
9f:a3:34:27:0e:72:58:c5:d7:64:46:0d:e8:d1:ab:
73:63:9b:c8:ec:5c:9a:6a:09:f4:ed:3d:ad:e6:4e:
b7:94:0d:7e:f7:20:1f:ab:9f:30:22:ce:88:1d:e1:
30:96:1d:25:83:d0:13:35:24:01:c2:b1:d5:c3:94:
e4:70:63:74:cb:7c:d8:31:6c:f8:35:e3:8f:67:06:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:4A:80:52:52:30:66:A0:4E:1A:92:1C:14:2F:77:A8:BF:FA:50
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Y6xKgFJSMGagThqSHBQvd6i_-lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.226.0/23
IPv6:
2a0e:802:1::/48
Signature Algorithm: sha256WithRSAEncryption
a8:86:62:8e:cb:35:94:01:d6:bb:31:d9:5a:81:63:52:86:00:
4c:34:25:87:71:ee:4c:29:dc:97:62:3d:a4:f1:7b:77:3a:18:
59:96:41:05:e0:c3:f6:fa:df:2f:7f:e3:fa:90:f2:de:7d:31:
d0:93:e4:fe:63:ab:9c:49:9e:ad:3e:bb:24:f8:13:69:2c:3b:
06:a0:d1:ab:f3:cc:6b:81:ad:60:0f:3b:c4:e5:56:d7:cf:93:
6f:fe:e6:34:de:73:75:db:e7:a6:e5:5c:9b:4e:4d:72:b1:e1:
f8:11:0b:ce:c4:05:90:87:ca:2a:fd:48:c5:40:b1:b7:38:fa:
25:de:e7:cb:85:a1:b0:8e:97:03:93:95:5b:fd:e3:97:9b:07:
e8:70:de:31:41:c8:2a:f7:39:8c:c9:a8:06:35:f4:bb:d8:ca:
39:c9:35:ad:4d:24:d7:b0:f0:de:9c:a3:7f:e7:3c:1d:e7:41:
1d:45:81:a3:ba:2e:e2:b5:f7:39:72:46:98:f3:d2:de:03:30:
54:bb:4a:15:9f:5b:4d:22:3a:4e:a2:bc:21:70:a4:fd:e0:28:
1e:82:fb:25:45:27:20:c6:d3:03:64:c8:9e:a7:1f:13:5c:2a:
df:23:da:4d:43:c6:2e:2d:36:12:c4:38:e8:c5:27:5d:6e:3e:
c8:1e:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:27 2025 by rpki-client