Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/wBEF7np8klRt2WHmSnhBwoQyGxs.roa
File: wBEF7np8klRt2WHmSnhBwoQyGxs.roa (raw, json)
Hash identifier: Ghnxt5oGxXj8kQnN+jFIbZRzSclo1x52FEy32Ox6oXU=
Subject key identifier: C0:11:05:EE:7A:7C:92:54:6D:D9:61:E6:4A:78:41:C2:84:32:1B:1B
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 018CC79366A9AF15CBF4A990950826BE484D
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/wBEF7np8klRt2WHmSnhBwoQyGxs.roa
Signing time: Tue 02 Jan 2024 00:29:35 +0000
ROA not before: Tue 02 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 5.182.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 11:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:66:a9:af:15:cb:f4:a9:90:95:08:26:be:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Jan 2 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c01105ee7a7c92546dd961e64a7841c284321b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:5e:fb:02:a4:b1:29:1e:dc:e5:be:64:46:
e0:b4:74:cb:a2:61:7a:d1:14:1b:8e:7e:ee:96:44:
d6:c2:2d:f5:ef:63:15:01:3d:ed:68:3d:24:76:c7:
c1:e5:7d:0e:1b:04:8a:fb:77:d1:e4:98:0f:c9:b4:
c5:32:26:19:1e:4a:d0:05:7b:a6:f8:d4:95:9b:49:
86:28:5a:c8:d8:64:73:4d:f8:a0:c8:c9:68:34:9f:
c2:c2:63:1e:83:7e:ef:78:16:a6:bf:20:f9:ff:37:
cd:02:78:38:63:0e:9b:bc:d4:1a:ff:00:76:40:cc:
4a:7c:44:98:7b:68:94:40:8f:b7:54:db:18:58:df:
8e:05:0a:54:19:f5:a7:dc:7b:57:ef:d6:04:df:9d:
16:1e:57:8d:5d:70:ac:fb:8d:a2:b5:2d:dd:ff:98:
34:c6:64:70:7c:2e:5f:ca:b9:0c:83:7b:94:d5:9b:
5c:56:e6:20:a9:04:4a:88:eb:5f:09:8d:16:7d:06:
fa:82:a8:0f:ba:c2:49:b8:53:10:0e:92:af:38:64:
a8:47:7f:50:13:eb:1c:61:80:0f:74:6a:d2:ca:90:
ea:9a:98:47:0c:04:dd:cb:be:08:a9:e1:b3:a6:93:
1f:7c:91:67:a1:a6:ba:21:dc:2c:95:6a:98:51:da:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:05:EE:7A:7C:92:54:6D:D9:61:E6:4A:78:41:C2:84:32:1B:1B
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/wBEF7np8klRt2WHmSnhBwoQyGxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.152.0/24
Signature Algorithm: sha256WithRSAEncryption
30:27:da:9b:66:86:b6:3c:a5:ad:bf:79:83:79:d6:5c:db:ec:
25:77:41:13:fd:53:cd:cf:a7:f3:d4:d6:35:68:81:07:74:37:
c7:b8:be:2b:b4:81:de:4c:cd:e3:0b:c3:00:c8:d1:be:d0:e1:
17:d7:ed:89:13:24:2b:ad:bb:42:7b:b4:ff:1e:f5:5f:f5:55:
3b:7a:06:cc:98:1b:74:db:20:88:48:22:b2:34:f3:0f:7c:37:
58:32:29:18:5b:8e:24:bc:3b:0b:ce:36:3e:ec:fe:2e:20:d9:
42:a1:f6:42:3d:93:ba:7d:4e:1e:74:e5:5c:47:f8:70:75:e7:
38:89:dc:5e:b5:a1:ca:1a:99:d0:26:b1:ea:fd:34:9a:24:fc:
5a:05:37:fa:e2:1d:47:a9:19:e2:bc:d9:d3:b4:5b:af:ec:5a:
87:b6:9c:fc:1b:fb:40:9a:cc:2e:32:c6:74:19:1f:53:4d:bc:
9e:46:7b:82:2e:c8:df:27:45:80:52:f2:1c:3a:55:49:88:e1:
98:c5:dc:54:6c:50:0f:2d:0f:36:c9:55:e7:5a:a1:5c:1e:aa:
ec:64:fc:f1:3c:47:74:6f:74:39:de:9a:d6:ec:d7:45:23:60:
c4:c5:cd:88:6b:88:82:5b:07:89:bb:54:5c:c6:1e:06:ba:c3:
58:aa:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:38:59 2025 by rpki-client