Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/5pIEYn1UyNb8MFpL8gLitxquYVk.roa
File: 5pIEYn1UyNb8MFpL8gLitxquYVk.roa (raw, json)
Hash identifier: OxFE9N4yZ2yGjnhvXUlZLkyMlLn/g7ZILU3Yb7HZTBk=
Subject key identifier: E6:92:04:62:7D:54:C8:D6:FC:30:5A:4B:F2:02:E2:B7:1A:AE:61:59
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126D9707F8BC33935E95AE086938A0E7
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/5pIEYn1UyNb8MFpL8gLitxquYVk.roa
Signing time: Sun 29 Dec 2024 12:39:19 +0000
ROA not before: Sun 29 Dec 2024 12:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62039
IP address blocks: 5.160.204.0/23 maxlen: 23
5.160.205.0/24 maxlen: 24
5.160.206.0/23 maxlen: 23
5.160.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6d:97:07:f8:bc:33:93:5e:95:ae:08:69:38:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e69204627d54c8d6fc305a4bf202e2b71aae6159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:d9:f6:1d:c6:4a:7f:3d:20:e5:89:89:03:
89:47:98:61:cc:22:6e:49:a1:be:c1:d9:df:0d:90:
3b:83:01:bc:12:66:73:f8:d5:a0:cc:69:dc:3c:8f:
96:cf:59:23:fc:ef:88:45:b6:18:a4:ac:d4:04:de:
d3:21:cd:40:47:94:4d:7e:5d:89:1f:d3:b5:fe:2a:
55:0f:5a:84:cd:a2:a4:61:cb:c3:fb:3f:19:9c:33:
84:31:ed:1f:db:58:f4:9d:0d:6d:ef:29:c0:fd:09:
8a:fb:87:77:0b:bd:21:df:e4:db:c8:63:d3:9a:54:
61:87:8d:f9:36:29:f7:29:f7:e7:44:54:eb:21:cb:
b9:54:45:fa:6c:f8:b2:c5:50:84:e2:8f:81:a7:62:
a2:17:75:d7:34:95:9e:6f:e7:9f:70:71:d8:cf:28:
16:dd:05:b3:8e:5e:24:ee:13:c8:a4:2b:ce:dd:37:
98:d1:df:c7:1b:12:3c:1c:ac:5d:a3:da:28:51:08:
2b:e9:8d:80:0b:46:1a:18:44:db:83:12:97:60:79:
a3:fc:a5:13:07:f6:2a:f7:b4:e8:07:4c:3c:1b:07:
17:4d:9a:82:3b:13:b5:0b:20:99:d5:e5:6c:2d:29:
48:2a:9e:9f:26:fe:a9:e4:96:8c:0c:60:70:f4:72:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:04:62:7D:54:C8:D6:FC:30:5A:4B:F2:02:E2:B7:1A:AE:61:59
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/5pIEYn1UyNb8MFpL8gLitxquYVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.204.0/22
Signature Algorithm: sha256WithRSAEncryption
23:64:f6:2d:0e:a1:ab:d2:41:77:dd:43:d7:5b:27:57:f3:88:
c6:36:ff:87:01:db:ed:87:b7:e7:5b:df:da:29:2b:50:23:4b:
65:b9:2d:cb:de:3e:da:02:7a:73:fb:12:3a:67:f0:c8:c7:56:
7c:24:96:c5:d7:66:af:c8:cf:a9:71:5b:87:39:49:71:10:26:
a8:7b:4c:87:79:b2:ab:7c:2c:74:4d:98:d0:37:ac:75:01:ff:
01:41:91:c4:ab:24:0b:3f:65:be:e5:a1:6f:23:9a:0d:01:5b:
dc:cb:cc:5d:13:e9:33:9d:cd:db:70:47:6d:25:1e:77:4c:16:
e6:7c:07:28:d2:a0:f9:e4:c6:61:0d:61:86:5e:b6:55:b6:41:
09:a6:1b:b7:ce:a0:d0:f8:42:8c:2d:e0:c7:24:69:c8:28:89:
41:70:20:fd:75:af:4e:04:b5:5d:c0:f1:a7:1f:27:19:65:cf:
b6:2e:6b:90:13:7a:6b:dc:7f:d2:64:30:2d:e7:f5:c6:dc:0d:
e9:85:a8:b4:3a:de:db:28:90:b1:87:6b:fb:cd:5b:08:44:bc:
a4:ff:d1:d5:f2:b4:69:b4:d7:1a:47:a9:0e:3d:0f:8f:eb:53:
58:bb:42:94:4c:fb:86:c8:f3:20:3e:a3:1f:b2:b1:fe:c6:fd:
94:d3:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:10:48 2025 by rpki-client