Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/yjCI0xFYSiJbDdjErlegjL68sMI.roa
File: yjCI0xFYSiJbDdjErlegjL68sMI.roa (raw, json)
Hash identifier: VdnDuUdWfL5lcXdXdJ1GSgZtdEaF8X4IuAA/RvD6qmw=
Subject key identifier: CA:30:88:D3:11:58:4A:22:5B:0D:D8:C4:AE:57:A0:8C:BE:BC:B0:C2
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018CC3B707018F4A9050D67EC8B96B671389
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/yjCI0xFYSiJbDdjErlegjL68sMI.roa
Signing time: Mon 01 Jan 2024 06:30:01 +0000
ROA not before: Mon 01 Jan 2024 06:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56547
IP address blocks: 5.201.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:07:01:8f:4a:90:50:d6:7e:c8:b9:6b:67:13:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3088d311584a225b0dd8c4ae57a08cbebcb0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:e6:99:82:d5:5e:7a:9e:ad:1f:b9:6d:df:
03:76:75:cb:cf:1e:b3:ee:60:a1:f3:b6:d0:25:5c:
76:7b:09:3c:2f:82:ad:ff:5c:69:f3:88:15:2b:c9:
cb:2f:d9:10:f2:e6:28:b6:8c:3b:80:85:5b:67:fc:
e3:fc:ec:8a:96:77:22:ce:bb:bc:ea:55:ed:93:6b:
4a:7a:a6:a4:f0:85:bb:8f:b2:20:f6:d4:34:29:ce:
9e:5b:1b:1a:0d:2c:f5:d7:ef:6c:91:03:e7:0d:17:
8b:e1:d6:e1:46:56:de:cf:56:83:61:4f:3e:f9:7c:
03:cc:8e:b5:58:6b:eb:a5:e2:87:e2:b8:d8:55:d2:
df:46:ad:c2:e2:ec:24:d2:4a:4b:9b:50:2f:0d:17:
d0:50:0d:a4:6d:59:a6:60:91:3c:91:75:7f:e7:d3:
0f:cd:a0:4e:3e:96:4f:d2:20:c8:42:d0:69:27:7d:
26:99:d1:90:cc:9d:ab:8f:38:90:5d:eb:cb:15:d4:
40:7d:f6:59:c6:47:d7:c0:b3:06:6c:0b:2a:d7:a8:
71:f7:c7:cd:55:1a:67:d8:0a:8b:c5:51:54:77:0d:
d9:72:6b:ba:30:7d:ee:75:ad:c8:d9:07:a5:65:81:
ab:85:3d:5c:9b:c2:94:2e:3b:9e:3d:fb:e2:6d:98:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:30:88:D3:11:58:4A:22:5B:0D:D8:C4:AE:57:A0:8C:BE:BC:B0:C2
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/yjCI0xFYSiJbDdjErlegjL68sMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:d5:68:40:df:62:e7:ab:96:3a:96:a7:cb:ca:84:8d:a6:c6:
81:fd:34:5a:9d:95:86:b3:db:91:d7:c5:90:91:ad:aa:46:9d:
0e:47:a5:bb:3b:4d:06:1a:08:e4:03:87:78:62:93:ee:3f:0e:
9a:1f:6c:57:c9:78:c3:ab:07:26:4a:17:17:14:71:4b:fb:4f:
dc:0f:c2:cb:3a:3c:a3:8b:af:5f:c2:1b:ea:b2:72:4b:f9:98:
72:ca:70:b6:e7:0b:a6:c3:d9:20:33:ca:af:55:4c:65:77:97:
af:f3:a3:30:e7:af:e6:24:d0:25:6b:8d:f5:19:6e:73:61:d9:
59:84:b4:9f:fd:26:6c:b7:37:be:cf:6d:5b:2a:2d:49:0f:27:
8b:38:0d:c6:06:f8:37:f9:ea:54:42:83:73:f9:22:d0:90:92:
bb:bd:e0:ac:4c:47:d8:cf:ce:c8:06:8d:92:c6:b6:18:6d:63:
14:c6:0f:9b:8d:9f:3f:1d:50:c4:29:6a:36:66:63:e1:84:11:
8e:86:d7:cb:90:59:b0:ad:94:8d:7b:a6:fb:f3:df:20:35:f4:
1a:46:8f:bb:2d:ff:4d:58:3f:db:7b:86:2a:28:e9:22:8e:94:
c1:9f:1d:10:15:b3:9c:a7:3e:cf:5d:fa:74:f4:95:40:bf:66:
4e:74:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:16:48 2025 by rpki-client