Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/7iX9iEYFngbEWYsIJTWaiqnKynY.roa
File: 7iX9iEYFngbEWYsIJTWaiqnKynY.roa (raw, json)
Hash identifier: qJ2/YP6c2WmfurA33P/sgpCTfCuOJGt5Y5gcG9nC1M8=
Subject key identifier: EE:25:FD:88:46:05:9E:06:C4:59:8B:08:25:35:9A:8A:A9:CA:CA:76
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019425FC39846D204B1E819931E41F32ABCD
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/7iX9iEYFngbEWYsIJTWaiqnKynY.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205282
IP address blocks: 5.181.161.0/24 maxlen: 24
213.130.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 08:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:39:84:6d:20:4b:1e:81:99:31:e4:1f:32:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee25fd8846059e06c4598b0825359a8aa9caca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:6f:22:c5:cc:97:5d:4b:1a:68:e7:29:1f:
dc:96:29:27:4e:7d:34:a1:f0:68:b4:1e:b4:5d:63:
83:42:b7:ec:cb:cd:84:65:48:86:be:c9:bb:ea:c9:
1d:4f:81:24:8a:b5:0a:e5:64:ff:75:b7:29:72:23:
99:33:6b:aa:10:08:81:62:95:98:67:7f:ff:8e:1e:
b4:36:41:50:45:ff:c0:26:75:64:05:f4:2b:f8:75:
13:90:bf:84:53:0a:49:09:12:bc:43:30:2e:4f:18:
8e:9b:cc:0e:61:d8:d9:e8:5d:df:3d:e5:48:00:ce:
6b:0e:ea:c8:f2:98:4f:6d:91:93:bf:8e:61:cf:27:
18:6f:21:98:90:4d:1e:34:8d:d8:d8:19:29:08:ce:
f3:10:86:10:e5:95:9a:be:1a:08:66:f7:b6:d7:7c:
4f:58:c8:3a:af:e4:6f:8d:14:d2:3c:fd:09:30:8b:
f5:bc:05:b7:b3:7e:c7:0d:61:70:6d:7a:3d:23:da:
d1:6e:42:a5:4a:1a:67:d1:a0:c2:22:a0:02:34:18:
4a:0d:b8:e3:88:7e:5d:85:a8:d6:2e:dc:7b:89:3a:
a5:f0:ff:d2:1c:f1:ec:1f:9f:9c:1b:87:c3:ed:74:
e8:67:a6:c8:6e:61:ec:d8:67:f4:6f:a9:e8:f8:f9:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:FD:88:46:05:9E:06:C4:59:8B:08:25:35:9A:8A:A9:CA:CA:76
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/7iX9iEYFngbEWYsIJTWaiqnKynY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.161.0/24
213.130.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4b:71:6a:a0:35:cc:4a:28:ae:00:71:85:0f:96:b2:a8:e9:
a2:27:92:bd:5e:bf:ab:ff:66:63:d1:3a:48:80:31:f9:a8:7b:
d9:a9:c6:4e:c9:1d:7e:86:aa:f6:2d:2d:52:e5:10:87:18:35:
73:66:81:4b:b1:32:13:ac:c8:26:a5:57:c0:4b:db:c2:f3:18:
87:d1:8b:7e:84:1b:ce:c4:1e:bb:c8:7d:b4:87:b9:a0:47:fa:
38:86:dc:b6:65:f0:5c:fc:fb:38:a3:15:d6:ed:0f:19:13:45:
bc:54:45:bd:b9:78:ba:1b:19:11:a4:b5:24:c1:03:20:fa:e8:
bd:a6:a5:8a:b3:a5:55:c8:00:02:fb:91:8f:30:12:b6:3e:1f:
57:c1:7a:4c:4b:d6:c7:7f:5d:5c:f5:4a:33:e2:5a:eb:a2:d9:
2c:14:92:48:06:72:e3:cc:f5:cf:1c:4f:04:f9:0a:f1:ab:3d:
09:49:92:5d:50:53:02:f4:45:dd:a8:ee:f5:33:6a:8a:ea:2b:
dd:58:d3:4a:42:12:08:a0:cc:c1:dd:f7:f8:6a:59:13:53:ff:
c5:0d:67:ae:53:4f:a0:53:45:77:85:d3:de:6f:b1:77:f3:37:
73:57:32:d3:4d:3f:8c:aa:66:63:ab:03:85:f7:35:ef:c6:4e:
d5:9a:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:18:56 2025 by rpki-client