Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/In5EUE5Wgp24euuNLVNod1QOpz4.roa
File: In5EUE5Wgp24euuNLVNod1QOpz4.roa (raw, json)
Hash identifier: /WbAcgDIPg2zPlLoOIWiasf61H6ZgC+y58gsnQzl9Ic=
Subject key identifier: 22:7E:44:50:4E:56:82:9D:B8:7A:EB:8D:2D:53:68:77:54:0E:A7:3E
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 018CC26D81240DCA96A8E030F2FACB5E1FD3
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/In5EUE5Wgp24euuNLVNod1QOpz4.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48620
IP address blocks: 5.159.200.0/21 maxlen: 21
94.142.64.0/19 maxlen: 19
2a00:1cd8::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:81:24:0d:ca:96:a8:e0:30:f2:fa:cb:5e:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=227e44504e56829db87aeb8d2d536877540ea73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:08:ea:de:ae:66:98:d4:8a:df:34:3a:66:
2d:26:69:42:93:fa:09:44:2d:e2:29:62:14:e9:cc:
1f:9e:b2:91:f7:3d:39:4b:c5:68:0c:30:b6:59:39:
99:3b:e4:0d:e0:6b:c5:df:4b:42:6f:5f:c7:03:a4:
9e:75:ac:51:92:9b:97:b4:c2:b2:f1:c2:8a:32:ce:
24:90:37:cb:32:ae:b5:13:0f:a1:48:e4:51:86:d3:
6b:dd:2a:ab:b4:21:a4:8a:0b:a8:a9:9e:d1:4d:e9:
05:63:46:64:83:b4:4f:ad:46:d4:ac:f0:47:0a:b7:
a4:82:78:46:59:75:47:fb:c5:92:2e:ab:7c:ad:aa:
76:b8:db:fd:14:e8:bb:37:7f:a7:a6:c9:d8:46:62:
f9:90:8c:04:fb:c0:b5:99:23:7e:98:e1:3d:64:02:
0b:65:2f:c5:0e:18:e8:7c:10:3a:b2:b9:1a:59:bc:
86:c1:6b:86:29:51:c5:4a:96:46:44:fd:ce:19:0e:
3f:25:dd:c5:d9:dc:93:a2:99:9b:b6:81:4a:5b:cf:
49:ab:66:6c:99:3c:cd:c3:60:a8:f2:40:82:b1:d1:
2c:ba:99:71:79:11:d7:ea:de:d1:a6:62:51:6e:fa:
fb:b6:68:0a:19:d9:20:f5:80:56:16:c8:d4:72:73:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:44:50:4E:56:82:9D:B8:7A:EB:8D:2D:53:68:77:54:0E:A7:3E
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/In5EUE5Wgp24euuNLVNod1QOpz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.200.0/21
94.142.64.0/19
IPv6:
2a00:1cd8::/29
Signature Algorithm: sha256WithRSAEncryption
5d:99:2a:f7:c4:7e:5d:64:52:05:84:79:ea:6f:d2:9b:81:58:
6b:25:b3:ca:c3:c6:7f:67:fa:c4:09:6a:5e:8e:61:5f:a2:4b:
70:60:4d:ae:78:91:c0:d4:58:74:7e:4e:b6:54:09:69:3d:e7:
54:1a:14:d6:68:9c:17:36:8e:15:78:42:75:35:32:b8:be:6a:
14:b2:3f:87:2d:94:0c:36:2c:10:72:8b:eb:b0:75:cb:48:28:
ad:3f:0f:e9:b6:df:ea:40:7e:93:72:47:b9:af:ed:98:be:fe:
dd:bd:3b:9a:fb:a5:69:84:3d:1e:c8:ff:44:54:99:0a:b5:9a:
ca:a7:10:86:86:4d:cb:94:a6:13:cc:ef:2a:af:47:d4:e0:6c:
13:b0:9f:4e:4a:ce:00:89:d4:9e:8b:2a:72:12:44:dd:30:c9:
ee:ff:13:f1:3e:07:d3:ad:c6:30:da:e6:f2:ca:2e:98:f1:5d:
1d:aa:b1:a8:29:f8:c7:9b:19:a0:fc:55:32:f6:04:8e:b1:b9:
41:ea:cc:9b:05:24:ac:4b:5a:5b:46:e7:f9:10:ea:06:2b:61:
b5:16:a6:12:32:b6:b1:e2:b9:5f:61:d2:e3:33:24:39:21:9f:
35:fe:b0:df:61:1a:39:13:bf:56:e1:0d:fe:1a:12:ef:a7:10:
85:a6:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:37 2025 by rpki-client