Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/V_xhczjxobLwQOVj3YcENnq7-6w.roa
File: V_xhczjxobLwQOVj3YcENnq7-6w.roa (raw, json)
Hash identifier: F3q/GOxffJArTOKUqb0FlHQkCwBAcvPTybF/qioKyxQ=
Subject key identifier: 57:FC:61:73:38:F1:A1:B2:F0:40:E5:63:DD:87:04:36:7A:BB:FB:AC
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 018CC7956F4F1D3B6D8B4ECE155758CC483C
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/V_xhczjxobLwQOVj3YcENnq7-6w.roa
Signing time: Tue 02 Jan 2024 00:31:48 +0000
ROA not before: Tue 02 Jan 2024 00:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201263
IP address blocks: 147.229.255.0/24 maxlen: 24
2001:67c:1223::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6f:4f:1d:3b:6d:8b:4e:ce:15:57:58:cc:48:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Jan 2 00:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57fc617338f1a1b2f040e563dd8704367abbfbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:d5:ba:ba:1e:96:f6:21:8b:cb:f0:4c:24:
44:06:46:29:7e:dc:92:cf:76:59:2b:33:7e:d4:f7:
fe:ce:87:e8:53:ed:9b:b5:ae:28:cf:23:fa:6e:d6:
00:48:58:43:51:6a:eb:01:d2:3b:6a:70:d5:f0:ce:
50:35:e1:4d:a3:7b:35:a7:f0:5c:9a:2a:9a:7f:c7:
59:6f:f2:06:e9:8f:63:49:1e:ba:e3:7b:51:8f:37:
31:f1:1b:6d:00:48:13:96:a3:26:82:5b:03:7b:73:
25:e0:de:86:b2:35:c8:ac:6b:19:f1:81:d9:cc:18:
9c:1d:55:34:30:ba:43:d2:f7:6d:dd:18:54:d0:97:
3f:f3:84:80:bf:8b:0f:5f:85:77:74:56:a5:94:00:
64:c2:f9:72:45:0f:76:a1:80:68:ef:4a:3d:f1:f5:
f8:be:0c:c4:78:c7:10:f5:47:68:06:cf:e2:f6:26:
2c:89:7c:4e:91:27:01:24:7b:6b:a6:8f:f7:41:e8:
0a:6c:c3:69:ab:32:95:3e:af:2b:a7:fe:de:4f:d5:
1b:be:23:bf:e1:a1:df:dd:5c:95:45:5f:e4:05:55:
c0:79:a6:c3:06:e4:2f:d8:a2:83:c0:04:93:b3:6d:
e5:25:c5:e0:e7:52:14:ea:a3:f0:6d:25:84:ac:10:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:61:73:38:F1:A1:B2:F0:40:E5:63:DD:87:04:36:7A:BB:FB:AC
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/V_xhczjxobLwQOVj3YcENnq7-6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.229.255.0/24
IPv6:
2001:67c:1223::/48
Signature Algorithm: sha256WithRSAEncryption
32:3c:63:86:41:85:12:61:7e:fa:cc:e0:96:ca:09:8f:ed:31:
36:76:8f:04:9d:39:8a:32:53:2e:c6:d6:26:62:5a:bb:7c:3a:
ed:5b:ef:e9:54:a7:05:8f:87:f2:ca:89:5b:39:67:9e:e4:6e:
17:8e:fd:33:f9:23:9c:c5:12:da:a6:8a:57:8c:ca:f7:de:60:
ab:34:ab:ff:79:2c:b9:7d:e2:29:2a:a9:6a:6e:a9:8c:28:e6:
77:ab:1e:80:ae:8c:8f:99:cf:41:d4:c2:cd:61:78:f6:cc:5b:
41:3b:10:e7:8c:bc:e8:0a:bf:67:fc:0e:a9:9f:2e:4c:6f:24:
3d:93:30:aa:74:a7:17:f2:39:a7:5c:a4:c5:82:79:e9:da:15:
4a:4a:cb:d5:dd:59:66:23:3c:62:d4:6a:0f:0e:25:61:e6:75:
5b:38:23:ca:26:27:12:91:bf:be:b9:f8:78:de:87:77:cd:7e:
db:05:5a:a0:ef:09:ee:fc:fb:3e:d7:21:ce:aa:c3:ce:17:98:
9b:93:d1:8a:b8:40:2c:07:4f:20:ea:5d:6c:b7:65:e0:85:02:
75:9e:48:4b:45:51:23:05:3a:f3:40:c9:8b:a1:11:17:16:36:
bc:6f:75:7e:b6:be:23:7b:5c:2a:17:65:b4:13:6c:02:1f:70:
49:23:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:46 2025 by rpki-client