Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/5GocW3bdLrqWnoBrI2pxKVWPZ-s.roa
File: 5GocW3bdLrqWnoBrI2pxKVWPZ-s.roa (raw, json)
Hash identifier: PAqwynctQBMsmT0tGSyFjade1NH5SRsckgfdpY5R7Ug=
Subject key identifier: E4:6A:1C:5B:76:DD:2E:BA:96:9E:80:6B:23:6A:71:29:55:8F:67:EB
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 0196D03B9F2B0C554FCFC4EE4673A170916C
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/5GocW3bdLrqWnoBrI2pxKVWPZ-s.roa
Signing time: Wed 14 May 2025 19:18:10 +0000
ROA not before: Wed 14 May 2025 19:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 45.156.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 12:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:3b:9f:2b:0c:55:4f:cf:c4:ee:46:73:a1:70:91:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: May 14 19:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e46a1c5b76dd2eba969e806b236a7129558f67eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:78:94:10:41:15:f1:28:be:ea:0e:26:37:e7:
b6:43:7c:f2:dc:ad:e7:77:1b:0b:2e:c6:8b:35:b9:
ad:d9:b1:87:f3:2b:97:fd:4c:2b:06:6f:6d:29:f0:
98:a2:ec:aa:54:e0:91:94:14:57:ad:61:9d:11:e3:
98:75:13:6b:e8:f4:ed:41:6e:b1:76:03:91:27:a2:
1d:bc:d1:cf:e7:b5:1a:35:95:e3:b9:b8:b3:9f:ae:
cf:69:b1:0c:f8:6b:1d:8a:32:fa:e9:cd:81:cc:5f:
5f:4d:82:3d:7b:5e:8b:8d:1d:9e:ad:2a:21:1c:95:
3e:56:9c:16:35:22:a0:4a:0a:59:88:60:99:b9:03:
6c:56:85:13:10:42:c5:2b:7a:6a:42:06:ed:c6:6c:
03:f2:99:4b:7a:bd:3d:a4:f1:75:54:14:cb:1d:53:
5c:40:b5:11:fb:32:57:96:63:3b:0d:c7:48:ad:99:
08:26:89:04:dc:b0:d8:0e:36:9d:04:ad:62:ba:a2:
9b:ef:c8:21:40:bf:2d:76:b9:fc:82:20:97:f4:27:
6d:3d:a9:4b:43:41:f9:09:34:4e:12:34:77:65:e7:
4b:ee:40:af:9d:15:ab:98:5d:d1:c1:3a:a7:a8:c7:
5a:08:d7:11:9f:5d:ac:f9:eb:e8:63:33:ff:57:e7:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6A:1C:5B:76:DD:2E:BA:96:9E:80:6B:23:6A:71:29:55:8F:67:EB
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/5GocW3bdLrqWnoBrI2pxKVWPZ-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f3:90:b7:ce:58:43:dc:ea:04:65:cd:42:6e:03:68:42:dd:
53:8e:f6:8f:2f:82:88:36:a0:9f:de:48:d3:c2:7e:a2:20:8a:
49:1f:26:18:db:39:b6:79:a7:ab:a4:78:8e:72:7f:f4:cd:cc:
b5:e2:3f:e9:fb:3b:04:86:2f:87:49:23:17:7d:45:82:86:a3:
d3:10:8c:c6:a4:27:e4:ed:41:b3:a9:dc:a3:fa:10:22:5e:50:
d9:d4:ba:0d:28:e8:1b:da:d9:2f:d9:14:53:36:5d:7e:78:d6:
7d:41:7c:8c:c9:cf:9a:6d:9c:f5:45:e6:51:ff:be:d5:2d:87:
d1:5c:30:e5:a9:ef:5a:3b:0a:b9:da:5e:3e:a0:05:e9:bf:31:
f8:b1:c0:97:d6:a4:25:f0:d4:74:5d:d0:66:b1:e7:e6:7e:b0:
fd:e7:4b:af:9e:d6:2b:15:0a:b3:ee:53:a3:13:cd:36:99:72:
10:56:a0:1d:05:2b:40:fb:1f:8a:ac:67:a0:1f:fb:47:9f:d5:
1c:0f:dc:f3:97:23:da:75:29:aa:ca:39:b8:64:df:88:5b:99:
87:32:67:0c:27:6d:f8:02:18:e5:b2:00:8a:11:14:4f:c7:a0:
06:08:ca:65:65:9e:f6:7e:3a:a5:4d:42:60:5b:cb:fe:a4:1c:
5b:98:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:34:38 2025 by rpki-client