Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/IOqWVpjkn9VEkidFkbYd9mrsta8.roa
File: IOqWVpjkn9VEkidFkbYd9mrsta8.roa (raw, json)
Hash identifier: 4D3WjzzMGjqc3VRgmSzxypzpjd1XNCZBzCIVCJM4+GI=
Subject key identifier: 20:EA:96:56:98:E4:9F:D5:44:92:27:45:91:B6:1D:F6:6A:EC:B5:AF
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 018CC8DDAB7F342C73BB02922F5592A9F0B6
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/IOqWVpjkn9VEkidFkbYd9mrsta8.roa
Signing time: Tue 02 Jan 2024 06:30:19 +0000
ROA not before: Tue 02 Jan 2024 06:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134963
IP address blocks: 5.61.68.0/24 maxlen: 24
5.61.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:ab:7f:34:2c:73:bb:02:92:2f:55:92:a9:f0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Jan 2 06:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20ea965698e49fd54492274591b61df66aecb5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:c5:4d:0d:bc:1b:46:44:88:ff:2a:af:ff:
63:f2:36:90:d6:1a:90:6e:71:9f:a3:42:89:a6:28:
ae:5f:e9:21:1f:38:94:df:1a:d8:4f:74:b9:2f:5b:
c1:84:81:f0:2c:1b:ed:cf:04:fc:f4:32:88:bc:ee:
84:4d:ba:1e:d3:be:bd:34:ac:ed:05:23:62:4b:4b:
1e:c7:31:43:13:ae:a5:b8:b3:a2:e3:22:89:16:ea:
22:97:1a:70:1e:a9:87:60:51:db:72:4e:46:da:25:
bd:2a:72:ff:22:2f:c2:d7:e6:9e:d4:b4:ad:52:1e:
a5:62:67:d2:03:8e:a4:73:96:8c:88:e9:ca:a3:48:
55:9e:3b:da:ad:ce:d6:6f:3c:ef:9a:77:bc:fe:c7:
a8:48:6b:19:3f:76:55:eb:12:24:61:7f:fc:72:d6:
ec:b6:d0:62:8e:ae:bb:9a:eb:c1:8e:98:b3:c9:b2:
7f:8a:54:13:11:09:9c:d8:ae:0c:09:e8:42:93:27:
6e:e3:1c:de:57:32:0c:ba:d6:60:c7:12:5d:18:87:
b0:48:1a:6e:21:88:10:5d:dd:51:d0:62:73:31:f0:
1f:89:8f:27:2d:01:d5:25:76:ec:30:4b:f9:71:92:
68:c0:67:d4:73:44:3c:cd:10:c1:22:c1:4e:e7:1d:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:96:56:98:E4:9F:D5:44:92:27:45:91:B6:1D:F6:6A:EC:B5:AF
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/IOqWVpjkn9VEkidFkbYd9mrsta8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.68.0/23
Signature Algorithm: sha256WithRSAEncryption
21:93:38:6e:77:c9:6e:f8:33:c6:73:8c:05:d4:1e:d6:00:64:
87:ab:ab:e3:45:29:72:3e:6a:00:31:d9:9e:55:b6:f2:ea:d9:
10:92:f8:12:d7:4b:3f:80:f6:bb:44:9a:21:1b:99:15:6f:8c:
d8:af:6a:a4:24:64:b3:e6:92:f4:b7:58:dd:82:85:f0:f1:0b:
43:10:c0:6c:b8:3a:af:cf:7f:d4:f8:80:01:be:85:b5:ad:1f:
93:db:a9:51:75:88:5e:45:be:43:29:7f:82:50:a4:50:37:36:
8c:04:ab:4f:2f:d9:b1:56:44:75:4a:7e:5d:fb:df:5e:48:60:
87:f7:f7:2f:57:d1:1c:e6:2d:82:e1:95:1b:62:e5:01:9b:e7:
66:e5:da:e0:75:b7:48:49:d2:7b:15:6f:29:89:0d:25:a7:8c:
ab:06:6c:4b:7e:df:36:5b:27:e9:2e:31:e7:69:d7:67:5f:b3:
ba:2d:f5:c2:0b:1d:be:38:94:d8:54:ca:62:93:5a:42:9b:9c:
69:08:37:08:0e:3b:92:82:99:e1:2a:8e:a7:60:4b:6b:9b:20:
3c:35:09:74:42:ad:cd:c4:0a:3b:a7:5d:23:60:b6:3a:a9:58:
37:3f:40:3b:8d:52:30:c2:07:d8:41:37:8a:f6:ea:b0:e0:8c:
2d:90:8b:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3at/NCxzuwKSL1WSqfC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjRiYzYxMzdjNTQwYTg5YjkxNzNjYzJkZTMyZWIwNGM5
ZTZlYWUwHhcNMjQwMTAyMDYzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGVhOTY1Njk4ZTQ5ZmQ1NDQ5MjI3NDU5MWI2MWRmNjZhZWNiNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwjFTQ28G0ZEiP8qr/9j8jaQ1hqQ
bnGfo0KJpiiuX+khHziU3xrYT3S5L1vBhIHwLBvtzwT89DKIvO6ETboe0769NKzt
BSNiS0sexzFDE66luLOi4yKJFuoilxpwHqmHYFHbck5G2iW9KnL/Ii/C1+ae1LSt
Uh6lYmfSA46kc5aMiOnKo0hVnjvarc7Wbzzvmne8/seoSGsZP3ZV6xIkYX/8ctbs
ttBijq67muvBjpizybJ/ilQTEQmc2K4MCehCkydu4xzeVzIMutZgxxJdGIewSBpu
IYgQXd1R0GJzMfAfiY8nLQHVJXbsMEv5cZJowGfUc0Q8zRDBIsFO5x3NqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCDqllaY5J/VRJInRZG2HfZq7LWvMB8GA1UdIwQY
MBaAFF/0vGE3xUCom5FzzC3jLrBMnm6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGIt
MDA1Y2I0ZGNhNjNmLzEvSU9xV1ZwamtuOVZFa2lkRmtiWWQ5bXJzdGE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGItMDA1Y2I0ZGNhNjNm
LzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBT1EMA0G
CSqGSIb3DQEBCwUAA4IBAQAhkzhud8lu+DPGc4wF1B7WAGSHq6vjRSlyPmoAMdme
Vbby6tkQkvgS10s/gPa7RJohG5kVb4zYr2qkJGSz5pL0t1jdgoXw8QtDEMBsuDqv
z3/U+IABvoW1rR+T26lRdYheRb5DKX+CUKRQNzaMBKtPL9mxVkR1Sn5d+99eSGCH
9/cvV9Ec5i2C4ZUbYuUBm+dm5drgdbdISdJ7FW8piQ0lp4yrBmxLft82WyfpLjHn
addnX7O6LfXCCx2+OJTYVMpik1pCm5xpCDcIDjuSgpnhKo6nYEtrmyA8NQl0Qq3N
xAo7p10jYLY6qVg3P0A7jVIwwgfYQTeK9uqw4IwtkIv0
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:50 2025 by rpki-client