Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/1-gGmOORe6JjVUjB4ZoxLJLhDhVw.roa
File: 1-gGmOORe6JjVUjB4ZoxLJLhDhVw.roa (raw, json)
Hash identifier: HGPf3iKkDx8Sksl9sD/BOTkgA0wiXLVftP0f/cVCDvw=
Subject key identifier: FA:01:A6:38:E4:5E:E8:98:D5:52:30:78:66:8C:4B:24:B8:43:85:5C
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194120AB5B16E03CE76286A21C350A68316
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/1-gGmOORe6JjVUjB4ZoxLJLhDhVw.roa
Signing time: Sun 29 Dec 2024 10:51:19 +0000
ROA not before: Sun 29 Dec 2024 10:51:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35615
IP address blocks: 5.160.244.0/23 maxlen: 23
5.160.244.0/24 maxlen: 24
5.160.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:0a:b5:b1:6e:03:ce:76:28:6a:21:c3:50:a6:83:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 10:51:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa01a638e45ee898d5523078668c4b24b843855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:4d:eb:c2:c7:e1:60:dc:73:71:24:1f:d2:
0b:82:d2:da:59:77:cd:4f:49:cf:52:72:bf:d1:37:
52:02:b4:7d:5b:58:07:b0:45:c7:58:ca:15:8c:55:
ad:d6:11:56:ec:33:b7:e0:01:0c:44:f5:07:03:d1:
0d:ed:ce:dc:e4:7a:c5:0c:b2:82:cc:43:65:ca:7d:
28:97:69:c1:67:a6:e0:26:17:2e:84:cf:5f:d6:69:
a9:73:95:51:63:25:28:71:72:cb:b8:35:11:cf:a2:
9b:bd:92:9f:2b:af:d5:97:35:16:b9:69:8f:d7:10:
9c:0d:47:9d:c8:49:42:e5:01:c9:a8:3b:4b:88:98:
2a:2a:52:c8:2e:4e:2c:4e:b8:30:ee:88:4e:5f:60:
79:63:c8:aa:fa:02:dd:b9:f7:75:33:7e:78:89:fc:
5f:7b:35:69:a6:32:e0:76:10:9c:a4:d3:bf:1f:f7:
ac:31:88:3f:71:fe:6a:09:fa:53:c6:91:57:9e:71:
4a:3f:5e:aa:ce:78:b1:8b:da:c6:32:b7:16:3f:1b:
a5:15:13:6a:82:25:8f:bb:8a:a6:7f:d9:4d:2a:27:
25:42:7c:c8:f4:fc:fa:3f:2c:24:bc:a8:8f:46:c5:
cc:0e:fa:7b:25:ad:cf:da:57:ae:b7:31:08:04:54:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:A6:38:E4:5E:E8:98:D5:52:30:78:66:8C:4B:24:B8:43:85:5C
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/1-gGmOORe6JjVUjB4ZoxLJLhDhVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.244.0/23
Signature Algorithm: sha256WithRSAEncryption
25:29:09:ce:cf:9d:98:8e:e5:cf:5f:84:1f:af:37:32:c1:99:
0c:bf:27:43:a3:04:13:3d:e8:36:bd:9e:25:f8:10:3d:f7:32:
8b:d5:96:57:e3:1a:ed:e2:72:19:45:b9:15:56:41:26:85:7f:
f9:6f:2f:9d:d7:11:47:2d:6f:3d:cc:82:50:41:47:be:b4:08:
5e:3b:b8:73:0a:7d:8a:b0:72:79:ee:ad:0d:b2:bb:94:fe:c2:
04:c4:52:14:48:e4:2a:9c:d8:4a:cc:c6:99:e5:e0:b4:21:fb:
6d:c9:1b:cf:7a:6e:0b:5f:98:69:0d:2d:62:d9:30:c8:5a:dd:
90:cf:01:6a:8c:33:bf:f4:af:2d:29:dc:6b:23:4c:d2:be:9e:
28:f3:f9:fa:da:ae:d7:d7:43:ed:6d:b5:86:db:8f:94:ba:bd:
8d:98:36:c5:be:d4:2a:93:a0:1c:45:72:37:f4:59:38:39:e0:
0a:cd:b1:d5:8d:6d:a9:82:4b:ed:96:5c:3f:b1:9d:fc:18:ba:
a6:ee:54:5c:75:9c:f9:9e:8d:a9:58:8e:f7:76:05:07:fa:e7:
e2:77:48:ff:1a:43:0b:22:80:c3:6f:35:03:f3:92:8d:f1:82:
e8:14:76:9a:6a:56:9d:7d:22:01:b5:68:69:df:3d:2d:96:df:
f1:23:c0:ff
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQSCrWxbgPOdihqIcNQpoMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy
OGI4N2UwHhcNMjQxMjI5MTA1MTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTAxYTYzOGU0NWVlODk4ZDU1MjMwNzg2NjhjNGIyNGI4NDM4NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+VN68LH4WDcc3EkH9ILgtLaWXfN
T0nPUnK/0TdSArR9W1gHsEXHWMoVjFWt1hFW7DO34AEMRPUHA9EN7c7c5HrFDLKC
zENlyn0ol2nBZ6bgJhcuhM9f1mmpc5VRYyUocXLLuDURz6KbvZKfK6/VlzUWuWmP
1xCcDUedyElC5QHJqDtLiJgqKlLILk4sTrgw7ohOX2B5Y8iq+gLdufd1M354ifxf
ezVppjLgdhCcpNO/H/esMYg/cf5qCfpTxpFXnnFKP16qznixi9rGMrcWPxulFRNq
giWPu4qmf9lNKiclQnzI9Pz6PywkvKiPRsXMDvp7Ja3P2leutzEIBFS9UQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPoBpjjkXuiY1VIweGaMSyS4Q4VcMB8GA1UdIwQY
MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt
YjQ1NDBjNzRjOTRiLzEvMS1nR21PT1JlNkpqVlVqQjRab3hMSkxoRGhWdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmEvODY2ZTVlLTgzMWUtNGNiMS1iZDUxLWI0NTQwYzc0Yzk0
Yi8xL0lqYzFjY2tDU2I4cXFVam5pLTBUNElVb3VINC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQWg9DAN
BgkqhkiG9w0BAQsFAAOCAQEAJSkJzs+dmI7lz1+EH683MsGZDL8nQ6MEEz3oNr2e
JfgQPfcyi9WWV+Ma7eJyGUW5FVZBJoV/+W8vndcRRy1vPcyCUEFHvrQIXju4cwp9
irByee6tDbK7lP7CBMRSFEjkKpzYSszGmeXgtCH7bckbz3puC1+YaQ0tYtkwyFrd
kM8Baowzv/SvLSncayNM0r6eKPP5+tqu19dD7W21htuPlLq9jZg2xb7UKpOgHEVy
N/RZODngCs2x1Y1tqYJL7ZZcP7Gd/Bi6pu5UXHWc+Z6NqViO93YFB/rn4ndI/xpD
CyKAw281A/OSjfGC6BR2mmpWnX0iAbVoad89LZbf8SPA/w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:17:49 2025 by rpki-client