Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/22X3MUN4VbFKyL7QQd1CmxBq_cM.roa
File: 22X3MUN4VbFKyL7QQd1CmxBq_cM.roa (raw, json)
Hash identifier: HgR29J9MlOlsbbugzb7AZ7unG4wen49IXOdGvOmX51U=
Subject key identifier: DB:65:F7:31:43:78:55:B1:4A:C8:BE:D0:41:DD:42:9B:10:6A:FD:C3
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018D3247A1B0399CC8E8D7E1EE96A86E6F61
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/22X3MUN4VbFKyL7QQd1CmxBq_cM.roa
Signing time: Mon 22 Jan 2024 17:46:11 +0000
ROA not before: Mon 22 Jan 2024 17:46:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211020
IP address blocks: 5.201.162.0/24 maxlen: 24
89.37.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 20:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:32:47:a1:b0:39:9c:c8:e8:d7:e1:ee:96:a8:6e:6f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 22 17:46:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db65f731437855b14ac8bed041dd429b106afdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:18:42:fc:ac:07:1c:c5:ee:4b:ef:15:31:
32:a2:63:45:75:9f:a4:8a:b5:cb:09:17:9b:da:de:
23:4c:1b:e2:43:67:64:c9:ef:94:3b:51:ae:b9:00:
8d:5f:bd:64:9d:eb:1a:7e:b8:ed:16:21:06:7a:e8:
21:a3:70:38:9c:d6:14:dd:ce:a4:c0:af:1b:8f:b3:
9a:74:74:88:60:5d:98:b8:e7:7d:58:93:32:b7:42:
f2:9f:1f:a9:7a:35:21:c5:86:4f:a9:06:00:79:76:
cb:e8:48:12:b8:d5:ff:d1:12:3a:37:38:cf:e4:47:
6e:8f:7d:de:41:a9:17:fc:58:6e:93:a1:21:44:0a:
89:5c:76:3e:08:f0:64:56:a9:b9:0e:6b:03:74:7f:
07:3c:a5:2e:39:0c:db:99:d5:44:d7:1a:67:80:e5:
42:53:57:a3:8e:aa:6b:d3:1b:86:72:c9:e5:a8:d1:
d9:2f:e1:09:be:02:f3:c9:04:dc:a9:4d:26:8b:fa:
4b:1a:1c:f2:5d:9e:41:b7:2b:c3:75:36:98:67:44:
b6:1c:c1:27:ee:b8:d3:d1:ce:6f:64:a9:14:de:24:
75:99:2f:59:bd:0c:59:3a:6d:21:32:7c:a1:19:21:
a0:ad:74:ad:b9:a4:e5:a0:83:7d:97:39:c4:8c:d4:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:F7:31:43:78:55:B1:4A:C8:BE:D0:41:DD:42:9B:10:6A:FD:C3
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/22X3MUN4VbFKyL7QQd1CmxBq_cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.162.0/24
89.37.12.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b0:75:92:6c:0a:44:67:db:96:ce:98:da:5f:51:f9:84:47:
44:7e:a8:8f:e2:8d:57:c1:ca:e5:29:bb:6a:49:db:d1:94:37:
91:7e:3f:b8:a6:64:da:4d:38:19:51:7f:f8:71:5f:1c:4c:11:
1b:58:3a:0a:dc:e4:f7:53:85:ea:9b:b2:60:39:6a:c5:32:5f:
58:87:ea:6a:39:0a:59:24:be:43:d6:c2:96:2a:15:09:d5:32:
2a:57:74:5b:06:80:50:14:88:d1:71:86:c6:61:81:71:91:2e:
70:7a:8e:9c:4a:52:a7:03:06:59:95:54:8e:35:0c:5c:d3:d3:
e5:d2:e1:8d:08:7e:6e:6a:e1:e8:ec:10:7e:be:e7:db:ce:b1:
ba:c0:91:9d:be:21:18:c0:28:16:46:63:41:f3:95:dc:6d:3e:
1f:94:fe:40:a0:f0:0e:4b:aa:e8:fb:d1:99:aa:9f:33:d2:10:
31:35:16:de:b0:23:5b:1e:1a:5d:d2:d8:eb:40:3e:9d:20:d4:
2f:5c:92:e9:ae:37:34:00:0d:25:84:9b:b5:6a:8d:7d:fa:ad:
33:68:2a:44:5c:ab:37:46:cf:a2:36:0d:fa:c6:36:84:ad:fd:
3b:d3:4c:a0:25:6d:d0:28:0f:5f:47:b2:eb:82:5c:59:0c:f6:
b0:2b:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:14:24 2025 by rpki-client