Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/5rpKbSHImouvrhKzgl0OUV7wRe8.roa
File: 5rpKbSHImouvrhKzgl0OUV7wRe8.roa (raw, json)
Hash identifier: JVOSDuSDdT+opHwolCXcUZbpw8LiUFLO3HqOoQNfEIo=
Subject key identifier: E6:BA:4A:6D:21:C8:9A:8B:AF:AE:12:B3:82:5D:0E:51:5E:F0:45:EF
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 019426D9FB69F87F9B40F0559662BF60B569
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/5rpKbSHImouvrhKzgl0OUV7wRe8.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 136.231.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fb:69:f8:7f:9b:40:f0:55:96:62:bf:60:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6ba4a6d21c89a8bafae12b3825d0e515ef045ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:62:c0:f8:ed:fc:36:78:7c:1b:88:ce:f4:
b9:22:f9:da:3b:09:85:7b:5e:67:88:6b:fa:e8:7f:
85:06:83:bf:fb:27:b2:c9:5f:8c:67:80:1e:f4:d7:
08:a3:9b:f4:2f:ba:8a:8c:fa:26:89:e5:9f:93:1a:
0e:8b:4f:83:f1:ea:86:0f:df:a9:2d:2c:42:16:d1:
fc:bb:25:88:db:90:07:5d:54:18:8c:5e:18:49:ee:
34:02:ed:3e:44:3b:ed:18:5e:43:eb:f2:6c:f3:ae:
1d:ed:16:99:05:73:47:15:ff:07:02:58:3f:64:42:
ba:d7:8b:e8:ba:76:a6:b6:da:ca:c9:5d:3c:b5:65:
be:27:7c:f6:da:98:19:6a:5c:4b:1c:ba:79:42:23:
5b:05:b5:68:a9:e7:70:a2:cb:98:97:9b:64:1c:a4:
f8:df:b7:39:1f:c4:86:a7:40:a3:77:a1:e5:99:74:
fd:4f:74:74:ae:3d:c1:8d:1e:c2:45:57:5a:0a:ee:
f1:3e:60:c4:01:0d:e3:a8:7a:29:56:da:3d:a6:d5:
6f:a1:2c:ba:33:2d:f6:09:3e:ff:93:6e:70:fa:68:
6e:46:4b:ba:db:0a:7c:6c:81:6d:01:86:b9:15:e5:
d4:50:c5:96:84:27:01:b5:c3:86:af:4d:a4:99:c8:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BA:4A:6D:21:C8:9A:8B:AF:AE:12:B3:82:5D:0E:51:5E:F0:45:EF
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/5rpKbSHImouvrhKzgl0OUV7wRe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:e9:25:ed:ed:2b:bb:e5:b9:5f:3d:45:a1:76:d5:1d:7b:a3:
a3:5d:46:da:5e:d7:cc:43:05:57:4b:df:98:8b:c4:cb:fd:29:
6b:62:83:41:f1:97:04:6d:4d:22:90:a3:23:10:85:a6:61:19:
96:cc:b4:6a:8d:5b:2d:d3:4b:3a:d8:40:43:0f:3d:4b:77:85:
01:b4:2e:96:91:f7:ff:cb:56:90:f6:ec:66:85:6f:84:0b:f0:
29:4a:5c:bd:76:4c:96:9a:9e:61:45:74:38:17:44:f6:91:31:
82:8a:87:0a:58:9c:18:1a:99:72:24:49:ef:62:64:c2:2b:b0:
70:69:b4:ef:28:30:a8:ae:80:cb:07:ff:35:14:56:2a:8d:55:
d6:c2:bb:5d:fa:6a:ff:b1:8f:78:74:e1:a3:1d:6f:9e:91:22:
c1:26:b9:52:b7:8a:9a:07:1e:86:bf:4d:b3:26:31:9e:a5:ea:
a1:ac:43:c6:dd:c7:ca:66:5b:2c:66:55:f1:0d:fd:c4:2d:e8:
81:ae:6c:68:19:c0:c8:74:91:8c:6a:c4:8a:8f:83:e7:d8:ef:
d9:bc:33:78:8f:6d:fa:d2:7e:e1:13:1f:0f:29:9d:c7:5d:e3:
44:4a:39:23:45:32:0d:e5:c1:11:a1:32:dd:21:95:80:05:5a:
96:05:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:28 2025 by rpki-client