Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/M18FqjB5LiHbNTjvWC7XlGzKErc.roa
File: M18FqjB5LiHbNTjvWC7XlGzKErc.roa (raw, json)
Hash identifier: KooElm+0mK9tuv1p21lhhTJeRDWYibqXEWr/UQOmM7A=
Subject key identifier: 33:5F:05:AA:30:79:2E:21:DB:35:38:EF:58:2E:D7:94:6C:CA:12:B7
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 019666DD7161381564C1C6212683F54F359B
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/M18FqjB5LiHbNTjvWC7XlGzKErc.roa
Signing time: Thu 24 Apr 2025 08:15:10 +0000
ROA not before: Thu 24 Apr 2025 08:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12716
IP address blocks: 213.157.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:dd:71:61:38:15:64:c1:c6:21:26:83:f5:4f:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Apr 24 08:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=335f05aa30792e21db3538ef582ed7946cca12b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:3a:f8:48:c9:fb:aa:91:3c:41:8c:b3:19:
ab:3e:80:92:5f:26:27:db:16:13:cd:7a:a2:8f:a5:
44:15:c3:65:dc:09:a8:7f:62:d9:d3:c8:51:5d:50:
d1:99:1c:20:b5:4a:b2:92:8b:39:d0:0b:a3:83:eb:
08:e6:48:50:cb:60:a8:ae:e0:7e:9a:6f:7d:d8:ec:
3e:47:5a:72:7c:8a:c4:28:48:1e:fd:f7:05:59:bf:
f3:23:3d:25:58:5a:11:c1:bf:a7:3e:78:a2:9b:a1:
16:ef:68:7f:58:ca:1d:6b:83:b8:3e:28:14:4e:81:
bd:d3:22:b1:72:19:77:17:88:b6:d5:a1:5d:4b:62:
c2:d1:42:ed:ba:51:ac:8a:90:1c:e5:0a:61:1d:51:
32:f8:81:9b:50:ec:75:55:9b:b5:22:85:da:90:39:
8b:78:c5:d6:53:69:67:2e:ca:22:a8:53:8f:02:b9:
6d:5a:d5:30:ce:39:d6:05:61:bc:60:5c:2c:8d:f9:
ff:4e:f3:4b:0f:a0:20:3f:2b:94:0a:12:4f:ba:e0:
6e:8b:23:8a:ec:da:a0:c5:ac:c6:c3:1c:ae:f2:20:
3e:bb:dd:bc:25:72:69:5f:60:d0:10:b0:36:a6:a5:
78:73:1e:93:92:76:65:cf:a6:ec:33:81:c6:f0:7f:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:05:AA:30:79:2E:21:DB:35:38:EF:58:2E:D7:94:6C:CA:12:B7
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/M18FqjB5LiHbNTjvWC7XlGzKErc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.133.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:f4:43:08:ea:91:b8:33:77:b7:38:ec:17:5a:b8:19:bc:ff:
78:44:a9:d8:cb:ed:2b:58:0b:f4:6a:3c:73:a0:b0:02:06:f6:
26:a0:97:4e:c2:3b:c6:1c:c7:53:b9:5f:06:ca:d4:d3:88:49:
d4:48:da:17:44:85:9d:7e:a3:1b:9d:fb:76:7a:2d:11:b2:6a:
1b:78:70:58:52:c3:f7:d0:d0:04:de:34:6a:f5:d5:c1:6e:70:
f8:0b:eb:10:91:81:92:5b:13:4e:52:e8:38:8d:d8:8c:0d:fe:
c1:c4:f9:ca:43:97:f3:31:21:37:04:ce:70:81:cf:d7:19:2f:
e1:07:f0:b6:d6:22:59:82:56:e6:c2:c8:c6:a8:11:78:4b:36:
dc:cd:2c:48:82:2e:91:0a:de:d8:fe:41:70:a3:ef:02:e9:69:
32:b4:31:9b:44:b7:65:e5:44:6c:2d:14:cd:fa:8d:28:3b:17:
7c:bc:8d:8d:15:03:91:01:b1:4d:10:5d:21:09:27:4f:6b:ce:
10:6c:6c:48:11:3f:b2:82:26:5d:2e:cb:0f:12:92:e5:00:97:
c1:08:6a:5d:3f:52:bd:10:16:5f:21:2a:0d:ff:87:37:0c:44:
b5:71:df:be:f8:1e:97:b0:a0:43:b8:43:a8:e4:b3:0e:44:7d:
a6:3e:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:44:55 2025 by rpki-client