Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/5cTGvNkv-hG7orBR_NL5wKzDDcU.roa
File: 5cTGvNkv-hG7orBR_NL5wKzDDcU.roa (raw, json)
Hash identifier: 0FlJ3tUbnzFOJhYbLPNeQUv40XqJNb1wxmCmYIk/HGs=
Subject key identifier: E5:C4:C6:BC:D9:2F:FA:11:BB:A2:B0:51:FC:D2:F9:C0:AC:C3:0D:C5
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 018CC26D431DB11700AF4B24A3296670A45B
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/5cTGvNkv-hG7orBR_NL5wKzDDcU.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25447
IP address blocks: 193.169.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:43:1d:b1:17:00:af:4b:24:a3:29:66:70:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5c4c6bcd92ffa11bba2b051fcd2f9c0acc30dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:39:6a:0d:45:ce:c5:5c:30:0c:3d:11:88:
01:37:28:f5:1c:bc:84:3b:07:91:8b:e5:f7:e6:48:
cf:c8:75:ba:23:09:9b:2e:98:16:91:bf:43:5c:c7:
9a:16:fd:08:e1:7b:14:c6:42:a0:d3:24:fc:fa:0d:
60:bc:fa:2b:3b:4f:97:c1:45:07:74:7c:07:c9:45:
56:24:82:ac:90:27:12:cb:a0:14:db:6c:f8:97:20:
2f:e9:64:76:43:6f:60:7f:7b:5b:52:88:1c:9d:87:
8c:00:fa:11:ff:4f:df:70:20:96:13:d4:c8:77:09:
02:23:6a:65:eb:d8:ed:24:fb:80:f7:5f:56:58:ff:
2e:87:f4:eb:04:8d:c2:48:09:7e:90:c7:65:44:6e:
30:58:66:26:74:56:b6:34:6e:98:ab:71:ab:30:e6:
38:e0:31:3e:fe:e0:a4:85:9d:4a:21:40:dd:43:f8:
bc:b5:7a:f5:46:5b:21:82:df:ac:1a:ca:56:a4:d9:
56:00:ce:0d:83:c4:87:8d:72:a5:c4:84:19:f0:a3:
73:61:39:df:dc:ad:02:89:05:a3:42:6c:c2:ce:8c:
c5:a5:79:2b:ba:47:be:d2:41:20:23:c7:2d:07:82:
ee:76:23:3d:f1:56:08:64:8a:55:3d:b0:48:2b:c7:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:C6:BC:D9:2F:FA:11:BB:A2:B0:51:FC:D2:F9:C0:AC:C3:0D:C5
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/5cTGvNkv-hG7orBR_NL5wKzDDcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.168.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:87:b8:35:a6:db:1b:f2:40:f0:8d:df:46:ad:3a:ef:3f:1c:
b5:d5:bb:17:fb:5a:35:32:e9:e1:b2:5a:ca:69:98:69:cc:01:
be:fe:af:f1:24:75:fa:91:8d:ed:b1:94:e6:18:19:63:8c:b1:
79:4d:5d:e4:b7:59:63:08:14:d6:ed:93:fd:6d:dd:d1:11:6b:
e7:aa:71:2d:ff:b8:45:56:50:4c:cd:2f:9e:3a:96:53:08:fd:
38:30:1d:b4:58:0d:0d:78:97:ca:50:06:e1:dc:3a:62:e8:c4:
b6:81:25:0a:19:9b:2c:84:4d:e2:ec:86:e7:f8:d1:51:d8:4f:
df:a5:2b:e0:1c:8c:a6:25:57:6c:3f:39:a2:5f:20:f8:2f:e9:
86:b2:ed:4e:4f:d8:14:e5:fb:c4:6a:2c:6d:ae:d1:fd:d0:a8:
d9:b7:f3:aa:7b:c0:d0:c4:9f:e3:5e:36:db:27:d5:1a:fa:34:
fd:2d:ab:01:b5:7f:31:3f:fb:25:9e:89:5b:4e:3f:5d:a9:d2:
aa:21:55:93:9f:11:67:33:30:05:8d:5a:6f:66:7f:51:84:48:
1d:87:6e:1a:fb:7e:34:9d:c2:70:d4:aa:83:10:73:f5:5b:3d:
79:d2:d8:e8:93:33:14:3a:a3:2d:85:4e:15:7f:9b:b0:5a:74:
40:7e:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:31 2025 by rpki-client