Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/p8ul0iRXQ_5w-qSY10LxetQ1LTk.roa
File: p8ul0iRXQ_5w-qSY10LxetQ1LTk.roa (raw, json)
Hash identifier: AyYNovcr1r81N1SzUBpdBsLODboZXWfEpnBcFK46VD8=
Subject key identifier: A7:CB:A5:D2:24:57:43:FE:70:FA:A4:98:D7:42:F1:7A:D4:35:2D:39
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC5004DD5802C49FFD6636B19DFE82F28
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/p8ul0iRXQ_5w-qSY10LxetQ1LTk.roa
Signing time: Mon 01 Jan 2024 12:29:40 +0000
ROA not before: Mon 01 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210893
IP address blocks: 5.134.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 27 Jan 2024 14:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4d:d5:80:2c:49:ff:d6:63:6b:19:df:e8:2f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7cba5d2245743fe70faa498d742f17ad4352d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:38:08:ab:3c:0c:35:1e:30:d4:76:99:28:
53:65:28:18:48:ac:4d:90:70:7c:e1:ac:d1:ae:81:
bf:24:83:c6:81:1b:37:e9:f8:9d:2d:2a:a5:df:e2:
92:20:bc:ed:bc:78:f6:cb:b9:47:34:61:9d:51:f0:
7a:37:42:42:74:e2:1a:10:ec:10:a2:12:4d:a9:e0:
ad:e8:d0:06:e5:a9:d2:ef:16:ba:c3:1f:33:7c:57:
4e:78:11:76:80:70:c9:92:41:83:24:ee:31:ea:47:
0a:06:1b:50:80:4c:e6:44:07:25:77:87:5f:c3:b6:
65:73:67:04:ca:d3:07:2d:43:c1:23:d8:44:06:bd:
ff:af:ab:5f:e5:b1:7b:9f:f3:10:e8:23:6c:cf:29:
4b:04:9d:97:6b:7a:c7:fc:f3:6a:67:0b:cd:61:46:
b2:49:4e:0c:06:68:37:f2:46:99:0d:e3:79:7a:b3:
d3:65:f7:41:43:ef:c4:78:d6:9a:e6:ce:b4:d6:fa:
ef:e3:c1:5e:61:22:38:40:e8:12:a2:1e:3a:69:bb:
2d:af:64:f6:2a:d0:0a:dc:b5:04:fe:41:86:f0:d1:
e9:11:d9:fa:96:b6:3e:79:00:86:fc:90:23:72:7a:
2c:d4:44:74:ad:6f:29:e3:13:80:d6:7f:82:30:57:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:A5:D2:24:57:43:FE:70:FA:A4:98:D7:42:F1:7A:D4:35:2D:39
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/p8ul0iRXQ_5w-qSY10LxetQ1LTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:0e:b3:2b:09:d3:45:58:eb:95:98:a5:3f:42:82:12:b1:e8:
19:db:6a:b4:59:2e:8c:4b:8a:9a:9c:fc:f9:a5:1c:3c:13:56:
90:3f:63:3b:13:88:bd:4b:55:41:c2:9f:bd:ce:a9:c9:e8:95:
43:74:35:9b:3e:40:aa:8a:57:04:10:f4:45:ae:af:1b:9d:a3:
33:1c:3d:2e:38:98:4b:37:49:df:a2:88:f8:e4:7e:26:2d:43:
61:dd:fe:07:1e:ab:70:93:75:e6:43:f4:2a:d0:fe:af:b0:24:
f3:d1:2e:b7:c7:2f:f7:f3:8b:15:98:b3:2e:d1:58:7b:bf:f2:
c0:9d:c5:b1:23:12:d4:d6:24:c1:e6:ab:e0:70:cb:ee:a4:e0:
a3:8f:ee:6f:4a:aa:f3:f1:25:c6:a9:74:bd:79:cc:bd:d1:d8:
09:aa:ad:5b:44:96:e9:81:4a:44:b3:1b:3c:ab:ce:c3:6c:f2:
6f:22:72:a8:88:1d:1d:64:64:2b:61:43:f8:a8:59:a3:40:58:
46:9a:80:12:e1:df:b0:20:d5:c5:86:84:8a:eb:d3:17:12:e9:
4e:e3:46:d2:64:e0:45:a1:75:d5:b6:68:39:ae:d2:e7:41:4c:
5d:de:dc:ea:52:63:ba:0f:46:50:1d:1c:30:54:0f:55:07:cc:
d4:f5:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:26:49 2025 by rpki-client