Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PN0-Mt35XM3BJIAnNyoBXOEgVsw.roa
File: PN0-Mt35XM3BJIAnNyoBXOEgVsw.roa (raw, json)
Hash identifier: KQ74sZQgPHNkAiiVFfSMDIHXnx4nHCJ+HlvIhxprX2E=
Subject key identifier: 3C:DD:3E:32:DD:F9:5C:CD:C1:24:80:27:37:2A:01:5C:E1:20:56:CC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0196FC4F4372C8F771C52B6EA93309E2DD8A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PN0-Mt35XM3BJIAnNyoBXOEgVsw.roa
Signing time: Fri 23 May 2025 08:42:54 +0000
ROA not before: Fri 23 May 2025 08:42:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.180.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 May 2025 18:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:4f:43:72:c8:f7:71:c5:2b:6e:a9:33:09:e2:dd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 23 08:42:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cdd3e32ddf95ccdc1248027372a015ce12056cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a4:7a:18:a9:89:b0:43:eb:eb:18:40:b9:cc:
04:1c:b7:a8:ed:4a:b7:d8:00:a4:66:e8:48:cd:c9:
5b:a3:94:50:14:89:be:0d:32:f5:2e:ea:2f:3a:1d:
cb:93:70:97:9c:70:2f:28:5e:41:4e:45:7c:75:8e:
f7:41:08:ea:48:67:2c:35:90:63:bc:d6:85:2f:13:
cd:ee:6c:68:1e:c9:54:0d:75:b3:1f:4e:f8:68:7a:
ce:df:ef:db:ea:cc:41:64:99:05:0d:b9:64:cd:db:
73:0b:d0:b9:16:8c:c2:bb:31:59:2b:99:95:d4:71:
0d:f1:66:50:cd:ed:50:e9:6f:2b:3b:fc:aa:c7:52:
7e:17:d4:2f:35:94:b5:7b:a5:52:d0:80:13:fb:a5:
75:3f:06:79:b5:a4:a2:09:28:17:74:df:f6:24:02:
8b:b2:50:2a:9b:ad:53:1a:d7:2e:e7:0a:60:06:fc:
03:0f:aa:82:99:6e:04:41:65:1f:f3:da:fd:90:dc:
4c:35:70:6a:7d:c9:8f:90:d0:ef:9d:ce:b4:f3:9a:
b6:99:7b:e4:e1:71:2e:db:8d:8f:68:e4:e0:eb:9b:
c2:34:05:03:b8:52:e8:8c:30:51:b6:08:3f:3d:91:
f4:45:00:9d:72:39:20:c5:43:30:4a:12:11:d5:44:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:3E:32:DD:F9:5C:CD:C1:24:80:27:37:2A:01:5C:E1:20:56:CC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PN0-Mt35XM3BJIAnNyoBXOEgVsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:be:c2:b6:f5:5f:61:bc:41:61:2f:40:de:ac:9c:20:97:e5:
8b:16:9f:d1:86:38:56:3e:fc:89:ee:c8:35:7b:92:49:91:4e:
ae:0f:a5:ac:d3:a9:76:42:81:88:6e:e8:a9:b8:6a:f9:2b:85:
28:9c:31:87:36:9e:e1:e3:5c:f3:32:0c:56:99:b7:2c:fd:0d:
a8:29:4c:8d:8e:0b:c1:ec:c7:e9:3d:1c:00:2f:a0:db:b2:24:
c0:84:ce:a6:7f:b6:0d:a6:77:a6:80:28:d9:88:2a:6f:c7:63:
e7:2b:92:c9:08:ca:27:d0:58:5d:d1:93:12:b7:33:51:b7:3f:
15:61:c1:10:ae:42:81:63:78:e2:21:50:9f:a2:db:ea:c0:8f:
3d:a2:6b:32:ef:8c:a1:dc:0a:5d:b2:f9:f7:07:c0:15:3d:94:
91:85:10:24:91:10:0d:a9:63:32:a4:bd:9e:26:94:87:31:31:
98:79:01:04:ab:cb:1f:29:69:82:ec:97:4f:3d:6e:fe:4d:87:
2b:69:cc:1e:f1:11:55:12:3e:9c:5d:44:2e:56:f8:2a:3c:5d:
5d:eb:f5:c5:73:91:0b:29:31:8b:f1:80:9b:14:87:70:19:0c:
f7:19:19:12:36:13:1c:88:b9:d0:a0:97:6f:47:27:d1:f3:4c:
c7:18:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:15:38 2025 by rpki-client