Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5KEEJpb3-3JvlO1jEQy_JsTOOx4.roa
File: 5KEEJpb3-3JvlO1jEQy_JsTOOx4.roa (raw, json)
Hash identifier: 3hHEDTjQIsWbDD8s711cTEJXYY85p3dW7sNI7WN3C1E=
Subject key identifier: E4:A1:04:26:96:F7:FB:72:6F:94:ED:63:11:0C:BF:26:C4:CE:3B:1E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23CF703F1AD53FB826EA4519FE1D5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5KEEJpb3-3JvlO1jEQy_JsTOOx4.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 11:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:f7:03:f1:ad:53:fb:82:6e:a4:51:9f:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4a1042696f7fb726f94ed63110cbf26c4ce3b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:bf:d5:1d:c1:4c:64:20:3c:dc:83:3d:49:
e0:88:5b:3d:a3:0a:eb:4a:7a:8d:a7:e3:87:cd:5e:
79:c2:94:f3:c7:d8:06:f4:09:43:61:7f:df:83:55:
5e:8d:13:9f:04:1f:8d:76:65:f6:43:99:4f:51:2b:
79:5a:08:99:dc:37:18:d6:d0:42:b8:10:51:bd:40:
f6:1a:89:16:3a:a2:d6:95:bd:34:71:8a:b8:70:40:
f4:f5:26:9c:f1:c1:e4:ea:40:3d:cd:c6:4e:c6:9b:
4c:3a:b7:07:b8:09:ab:7c:56:6f:10:b2:eb:92:60:
f2:d9:1b:9a:9e:b5:5b:aa:49:46:2d:3c:35:fb:7a:
96:58:ee:74:96:9a:19:7d:b9:d6:19:05:80:fb:d5:
9c:cf:64:94:a6:0b:e7:75:f9:21:53:76:f4:7c:1e:
d2:f9:02:12:61:0e:d0:49:f8:c1:b4:3c:67:bd:9e:
ec:6d:e0:6a:36:83:9f:af:31:a9:2c:95:4b:3a:9e:
ce:d2:de:0c:6c:fe:10:99:1a:ad:14:f6:5e:07:b4:
bc:cb:2b:7b:21:68:f1:55:ca:ab:0e:1a:3e:ca:75:
92:07:f0:d4:19:17:75:44:a7:02:88:0f:bb:82:8f:
fb:be:00:f1:a2:be:14:69:e7:ef:fd:54:35:02:ba:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:04:26:96:F7:FB:72:6F:94:ED:63:11:0C:BF:26:C4:CE:3B:1E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/5KEEJpb3-3JvlO1jEQy_JsTOOx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
24:81:59:28:48:bd:55:d8:61:15:34:c4:70:3e:24:5e:b7:c1:
11:6a:88:52:c8:24:b6:30:d3:49:2b:6f:48:c4:90:1a:c0:06:
cc:58:a9:34:9d:a7:f4:99:36:66:21:4d:d7:3f:d9:a5:86:c7:
c1:20:b3:30:ec:82:68:a3:9c:1b:fc:45:38:2b:e1:b9:e1:78:
e4:0b:15:2f:de:1e:3e:16:3f:be:75:36:11:94:d4:a6:8f:05:
dc:91:71:ce:5a:2d:19:6f:5c:a9:d3:10:c4:b6:57:1b:f0:fc:
95:01:15:cf:1c:40:a9:08:34:9b:8d:b7:11:2e:3c:e6:0b:a8:
39:0b:43:1f:50:87:e8:15:04:2d:bb:07:0a:1a:ca:f0:eb:e6:
d4:82:a5:df:94:15:15:f1:c0:2c:05:28:8f:08:20:de:b3:63:
37:89:37:9d:c5:d9:f5:b4:59:b2:3d:d5:ab:6b:82:5f:57:5f:
d6:2d:ca:51:a9:37:7b:fa:cc:0a:0b:2a:ac:b1:b6:5a:de:fb:
8c:d7:56:ba:0b:31:7a:2c:8c:f7:24:66:68:44:67:f9:0d:cf:
6d:ce:d3:95:4e:82:1b:59:a1:cc:47:44:76:86:f2:3c:72:f0:
91:f5:56:79:bc:44:e4:de:5a:f8:f6:20:1d:26:b1:77:96:4d:
49:f6:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:25 2025 by rpki-client