Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/4WxmskkmbhCow2g22cR8J-ZTHLE.roa
File: 4WxmskkmbhCow2g22cR8J-ZTHLE.roa (raw, json)
Hash identifier: 3LtMF8sqqZ/AVh98rpKYMjKfLjML08RMw8E/CRo5g2o=
Subject key identifier: E1:6C:66:B2:49:26:6E:10:A8:C3:68:36:D9:C4:7C:27:E6:53:1C:B1
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC1703CCB3749C4BE73974443E680
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/4WxmskkmbhCow2g22cR8J-ZTHLE.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51235
IP address blocks: 5.160.128.0/24 maxlen: 24
5.160.149.0/24 maxlen: 24
5.160.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c1:70:3c:cb:37:49:c4:be:73:97:44:43:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e16c66b249266e10a8c36836d9c47c27e6531cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:42:58:fe:b7:3f:1f:0f:b0:9f:92:80:fd:
77:fb:31:2e:4a:39:85:75:f7:66:a5:d1:8c:30:93:
b3:03:04:4a:01:b5:f4:44:23:e3:7d:46:af:b8:58:
86:76:2c:fb:29:82:7b:a9:0a:8b:a4:d9:29:e6:ea:
e7:68:18:47:18:a8:f9:23:73:79:7d:3e:fd:b6:58:
72:ee:a8:a5:62:67:be:31:0e:3d:a0:5b:e2:4a:82:
a0:be:dd:17:ac:b4:28:a1:ce:d9:61:9c:ae:91:c9:
7b:a4:cd:bb:99:ac:66:83:f6:7c:77:bf:84:fd:fe:
16:e5:0e:d1:2e:4f:8e:fd:9b:b7:80:62:58:a2:6a:
47:28:ab:42:8d:b7:02:2a:8e:0e:65:33:39:8c:b8:
14:0a:b1:d0:d5:40:50:5a:91:5f:06:6e:54:e2:1b:
e2:37:8b:8d:79:a4:6d:ce:9d:04:da:ad:2c:ea:7c:
d7:7e:a0:2c:5b:60:cb:44:26:a4:5e:c5:bc:9a:9c:
28:93:a1:80:20:1c:90:5f:c9:91:00:a8:d0:53:fa:
69:66:e8:53:75:de:bf:4e:1e:18:6d:ac:62:49:ac:
ce:d9:0c:94:25:a9:b9:0d:d1:34:89:3f:8b:2a:08:
50:1d:72:14:20:64:26:b8:27:0a:3f:3e:6a:32:10:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6C:66:B2:49:26:6E:10:A8:C3:68:36:D9:C4:7C:27:E6:53:1C:B1
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/4WxmskkmbhCow2g22cR8J-ZTHLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.128.0/24
5.160.149.0/24
5.160.180.0/22
Signature Algorithm: sha256WithRSAEncryption
31:7b:80:44:bc:55:9f:e9:38:10:05:ba:ee:b2:62:d8:3f:7a:
96:78:c4:52:f2:10:5d:c2:b8:69:22:bc:48:64:8e:7b:42:c6:
48:a2:ea:b1:74:33:09:c6:94:1d:f6:a1:1a:90:e0:37:8d:f9:
58:68:c4:c8:0a:4e:e1:73:8e:f8:19:48:cd:ca:5e:a9:eb:85:
64:4a:46:43:d7:b1:b3:89:8b:22:9e:2d:15:ba:54:56:b0:09:
dc:d8:74:17:35:70:11:df:27:ab:f8:0b:0f:77:10:3e:8a:44:
60:1e:ce:bc:96:a9:0a:82:1c:53:c2:15:02:4c:7a:d7:a8:bb:
34:23:02:9e:7c:6b:fb:76:75:33:e6:bf:b2:81:93:5b:72:e0:
89:86:15:3b:a7:f9:43:17:d6:c5:75:eb:ca:53:4b:d3:04:24:
2c:79:36:23:24:02:fa:38:5b:34:ad:de:cf:fc:69:70:26:4d:
35:99:28:77:67:7b:78:3f:ce:fe:9e:60:3a:1d:9f:c3:9a:5a:
ae:b5:3e:fb:83:e0:e4:c9:9d:ac:93:66:ff:ed:5d:81:0c:68:
88:8f:e0:65:cc:cc:a8:7e:94:e9:39:e1:10:94:4c:16:69:9f:
2f:b7:9f:ba:a2:06:eb:a4:3e:dc:8c:fb:90:38:7a:1c:d0:0d:
0e:b8:0d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:38:34 2025 by rpki-client