Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/hcfNT4vU5NPQUj7loT2PKy5u1Wg.roa
File: hcfNT4vU5NPQUj7loT2PKy5u1Wg.roa (raw, json)
Hash identifier: TUobgYYIYz+JQmYZmrCG0XhKCQ6WkcgGs+7NZCFJogQ=
Subject key identifier: 85:C7:CD:4F:8B:D4:E4:D3:D0:52:3E:E5:A1:3D:8F:2B:2E:6E:D5:68
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 0194266A3F3E08655419DD3F6C0D966DB1A0
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/hcfNT4vU5NPQUj7loT2PKy5u1Wg.roa
Signing time: Thu 02 Jan 2025 09:48:04 +0000
ROA not before: Thu 02 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 18:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:3f:3e:08:65:54:19:dd:3f:6c:0d:96:6d:b1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 2 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85c7cd4f8bd4e4d3d0523ee5a13d8f2b2e6ed568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:4b:b1:d2:59:d6:15:60:72:33:cd:2e:18:
fc:fe:b4:23:3f:f5:77:22:d9:07:a6:7b:41:ea:e3:
f8:ee:a7:3f:0a:dc:ff:bb:e3:b6:0a:29:cd:ca:f5:
12:3a:3c:1d:73:3b:d5:25:2c:39:c9:4f:fb:48:f6:
69:7e:8d:02:92:bf:4a:d7:a1:b2:46:5c:61:07:fa:
6f:21:a1:5f:4d:73:a4:2e:0a:8b:52:a7:44:81:19:
e7:53:e3:50:2f:3f:de:19:35:38:41:02:7f:b9:dd:
18:57:48:6d:61:b0:b4:94:e5:ea:ce:f5:56:28:ca:
06:37:3d:f6:24:70:69:a2:26:03:e0:6e:01:ec:62:
dc:08:e7:66:cc:46:24:38:70:82:99:c6:5e:df:66:
7b:8b:f1:42:8a:cc:2a:42:a3:b1:5a:0c:a1:66:ad:
b5:63:38:2e:3a:2f:b7:18:57:d1:e0:f2:1b:7f:8d:
c3:c0:4e:82:c8:8a:fb:78:22:32:f8:77:0a:3c:9e:
89:a5:dd:17:c9:a9:2c:b1:e3:93:3f:32:03:6f:40:
8f:66:3f:d5:d1:b6:18:eb:79:18:d2:e8:4b:1d:d9:
bd:15:f0:d7:5d:25:a9:0f:03:f4:0d:cc:60:4b:25:
64:60:48:95:2a:90:af:cd:82:64:bb:a0:f5:90:39:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:CD:4F:8B:D4:E4:D3:D0:52:3E:E5:A1:3D:8F:2B:2E:6E:D5:68
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/hcfNT4vU5NPQUj7loT2PKy5u1Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d9:66:ab:b8:ab:0e:b1:2a:10:28:89:18:8b:b5:b3:f3:af:
aa:6f:78:17:c7:ed:45:8e:7d:3a:bb:72:14:f4:25:2a:70:80:
ae:e4:29:3f:77:6e:d5:e5:18:4e:ee:9c:c3:37:ee:29:bb:0c:
23:31:66:c4:60:55:f5:f8:2b:68:00:af:e8:1f:e4:b8:fe:83:
12:00:17:c4:c8:4e:9e:9b:49:6b:f5:2d:39:76:bb:c0:d8:b4:
19:a9:0e:c2:71:11:69:40:26:af:4b:bf:3b:2a:eb:78:2d:5d:
a2:ee:11:30:d0:82:73:96:3c:bf:bd:a9:14:6e:67:53:71:9d:
15:b3:5a:16:bc:ab:4b:f2:7a:69:1f:e8:af:e1:95:af:fe:18:
45:e1:7f:02:9a:37:b8:70:f0:93:4e:d2:d2:f8:35:f6:5b:d9:
ac:5c:4a:4d:4e:4c:64:32:ef:88:e5:21:ed:87:d8:fc:32:8a:
a4:55:52:ea:c5:43:cf:dd:0a:3e:4b:7c:04:4f:bb:45:49:2e:
15:17:0b:30:f6:1b:be:9b:a4:22:3b:01:68:28:93:7d:38:53:
93:4c:60:18:1f:14:65:3b:8c:f8:db:10:e2:a2:ef:53:b1:ab:
b0:d2:40:96:ca:7f:9c:0c:75:80:71:fc:1f:54:35:b5:96:b5:
3f:96:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:15 2025 by rpki-client