Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5xyVqQn02ZU8UjX80_aOb-zCVmQ.roa
File: 5xyVqQn02ZU8UjX80_aOb-zCVmQ.roa (raw, json)
Hash identifier: mSJN9jFVrZOmGm2gkyZJSKYSNHKfGPLYhlA5ZxN8+Ls=
Subject key identifier: E7:1C:95:A9:09:F4:D9:95:3C:52:35:FC:D3:F6:8E:6F:EC:C2:56:64
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01958B0314B91F7086076F1C45678A69A4FC
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5xyVqQn02ZU8UjX80_aOb-zCVmQ.roa
Signing time: Wed 12 Mar 2025 15:39:49 +0000
ROA not before: Wed 12 Mar 2025 15:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.232.0/22 maxlen: 22
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 11:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:03:14:b9:1f:70:86:07:6f:1c:45:67:8a:69:a4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 12 15:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e71c95a909f4d9953c5235fcd3f68e6fecc25664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:39:07:73:ed:6a:cf:41:1d:f3:e3:33:09:
51:56:c2:52:7a:19:c2:80:c2:9c:e0:f4:06:44:33:
29:70:7b:88:38:23:27:ab:3e:73:b3:78:df:81:63:
d0:3a:64:5f:21:81:2b:ef:92:9b:97:c9:28:01:1c:
01:c5:ec:90:0b:5c:f5:b7:81:64:61:6a:22:02:51:
a5:78:f3:f7:c9:60:c7:fe:83:51:8d:57:68:ad:0f:
9a:2b:9c:2f:c2:49:3d:f3:49:f9:74:43:69:9c:31:
99:e6:6f:57:48:5f:eb:90:fb:08:ed:dd:89:e7:50:
0a:9f:4b:ad:66:2f:c5:9f:4e:b5:ea:ce:03:05:6d:
8f:7e:a2:96:1e:69:8d:26:5e:8f:6f:dd:23:1b:bf:
6b:6f:8e:b5:fe:e6:45:a3:2f:a1:04:65:2c:61:88:
19:cf:61:18:c0:66:22:6a:65:5d:ba:26:28:f3:8c:
93:13:2a:bb:57:c5:d8:ca:b7:2a:57:2c:c6:c7:a6:
57:cd:cd:b7:45:ef:e2:af:a7:01:b9:6e:d5:10:fb:
a3:a6:c1:6f:18:f4:c5:89:0d:56:3c:cf:94:55:ba:
ef:e7:bd:f1:9a:d3:d2:0e:6b:c0:86:0c:74:60:7e:
6a:c8:08:9a:bf:9f:ca:e2:13:11:32:65:b9:a4:8b:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:95:A9:09:F4:D9:95:3C:52:35:FC:D3:F6:8E:6F:EC:C2:56:64
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5xyVqQn02ZU8UjX80_aOb-zCVmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
59:48:f0:2e:26:fc:44:75:fa:58:ce:85:fe:eb:4b:d3:4e:e9:
54:bd:41:94:b6:64:1f:69:6d:24:1a:1b:fc:91:07:24:be:34:
4e:4e:b5:c2:b7:31:89:44:1e:0a:96:bb:80:c2:32:8b:24:bc:
26:ec:f5:22:89:34:df:90:a1:69:d3:4d:db:63:aa:9c:ea:4c:
e7:dd:fa:18:17:95:58:48:72:a4:dc:18:7f:33:15:92:e8:2f:
0e:60:82:05:7a:3b:62:e1:5e:a3:40:24:61:52:6c:b7:2f:ce:
9b:d5:ee:e5:0d:48:fd:e1:29:39:d9:db:fd:93:8d:1e:7a:2a:
f4:48:5e:10:a4:5b:f1:8a:1b:7a:6b:00:db:77:ec:52:dd:2c:
8c:98:b8:6b:d3:f5:fb:57:eb:3c:98:b4:8b:17:f2:2e:6c:6c:
71:db:c0:a7:39:58:9c:e9:d3:17:c8:07:c7:fb:08:a1:78:96:
a9:09:11:30:92:3d:e6:6f:df:20:7f:94:c5:3f:32:a9:34:14:
6b:e2:9f:aa:00:53:ef:ff:77:18:04:d4:bb:d7:f8:cd:ca:0d:
b0:9f:b9:1c:2e:74:84:5c:c7:be:ea:24:40:44:71:de:76:72:
43:20:5e:eb:da:98:54:33:f2:cb:78:70:2c:f5:72:69:2e:cc:
c8:eb:6f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:11 2025 by rpki-client