Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/5s-crueNcOtXia_fsLbiktd1WzA.roa
File: 5s-crueNcOtXia_fsLbiktd1WzA.roa (raw, json)
Hash identifier: rIGNyOG1TDQz0P5cjkkmzJdsdzHgpsaii5kL3zAuTfs=
Subject key identifier: E6:CF:9C:AE:E7:8D:70:EB:57:89:AF:DF:B0:B6:E2:92:D7:75:5B:30
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126D97986D18ABBBBCF72DB4D0F17239
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/5s-crueNcOtXia_fsLbiktd1WzA.roa
Signing time: Sun 29 Dec 2024 12:39:19 +0000
ROA not before: Sun 29 Dec 2024 12:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62048
IP address blocks: 5.160.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6d:97:98:6d:18:ab:bb:bc:f7:2d:b4:d0:f1:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6cf9caee78d70eb5789afdfb0b6e292d7755b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a5:db:73:94:06:a6:70:74:a5:71:ed:be:d4:
1c:cf:8c:d3:25:61:fb:63:9b:94:b8:f6:8c:e2:50:
3f:4f:7a:45:08:f9:37:70:38:90:07:5a:f3:59:d2:
2c:51:e7:21:76:70:2c:0c:df:5d:01:1d:96:eb:c9:
bc:4e:16:88:c7:56:a0:e8:cf:19:3c:12:1c:e1:6e:
34:d2:ad:91:58:91:b8:6f:ff:be:13:c0:b4:41:ae:
1f:e3:0c:1c:f9:eb:91:77:d3:e4:5c:84:d1:cd:86:
e1:be:32:42:ac:1b:03:bb:58:a0:cd:c6:7e:fa:89:
57:3c:e3:5c:de:6c:bf:33:51:93:8e:eb:3f:80:d1:
62:fb:54:83:ee:92:98:c7:2c:e1:e8:ed:73:b8:18:
7e:5f:4a:3c:76:ec:08:a5:68:f4:01:93:ce:4f:db:
9a:0b:80:9b:da:e0:d8:57:54:2b:c8:0e:78:92:06:
d8:99:4f:3e:7d:34:2f:f7:52:a5:c9:5f:41:b3:63:
55:e3:5a:de:74:fd:e1:cc:d1:fa:6c:c5:46:04:70:
a2:a2:01:2d:1c:00:86:85:1d:ac:44:f7:9c:0a:96:
d1:92:3c:a5:19:ad:80:e4:fd:55:f8:dd:c9:cd:61:
1d:09:ca:6a:57:fc:3b:27:36:36:65:90:09:87:62:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:9C:AE:E7:8D:70:EB:57:89:AF:DF:B0:B6:E2:92:D7:75:5B:30
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/5s-crueNcOtXia_fsLbiktd1WzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.146.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cf:37:a1:a9:60:e1:7a:cd:7f:c4:aa:b4:84:c6:17:51:42:
f4:a3:5a:d1:de:a8:c0:66:1d:04:32:6d:11:53:cd:dd:a2:87:
67:e5:4f:f7:9b:a6:63:fa:49:e5:d5:72:6d:f3:81:2f:c5:3f:
0d:09:3d:c9:3f:71:f5:6d:f0:2f:af:61:d3:11:95:e8:0f:ab:
7d:50:44:48:c6:7e:ec:c5:20:56:8d:7f:17:9c:e4:ee:88:19:
ec:b7:28:a9:6e:01:10:d9:79:b0:24:31:54:12:b1:69:4d:30:
61:d6:48:c9:1e:4c:db:48:62:0a:fd:92:d5:29:3b:d9:89:7b:
90:84:53:0c:83:66:5e:0a:50:58:49:39:d9:f6:69:2e:3d:f9:
db:92:df:e1:f3:1d:63:ed:7d:c7:30:5a:68:c9:05:98:ea:0d:
24:c0:6b:bc:54:2c:0f:72:63:75:91:e1:78:4b:72:3a:fe:c0:
2c:06:09:36:f8:9e:02:ce:30:41:f1:d2:0a:d9:66:42:c1:95:
36:ed:f5:a6:d3:3a:77:07:27:44:29:94:54:87:af:47:a3:cb:
38:5f:0e:8b:70:23:28:1f:9f:08:86:0c:22:03:ca:1a:4a:81:
a5:4b:d6:6c:49:54:16:7b:68:db:12:a1:de:c5:78:c4:46:df:
cf:77:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:12:33 2025 by rpki-client