Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/7F4acS3d_TAQVxeXhnvuh5WkcM0.roa
File: 7F4acS3d_TAQVxeXhnvuh5WkcM0.roa (raw, json)
Hash identifier: TjZBnmfLyIo/PPBK5/IqjUfchiV7y72WcNZxZ/iyY1o=
Subject key identifier: EC:5E:1A:71:2D:DD:FD:30:10:57:17:97:86:7B:EE:87:95:A4:70:CD
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC1D6FE1C0A71017FD9C02B12DE02
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/7F4acS3d_TAQVxeXhnvuh5WkcM0.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 5.160.47.0/24 maxlen: 24
5.160.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c1:d6:fe:1c:0a:71:01:7f:d9:c0:2b:12:de:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5e1a712dddfd3010571797867bee8795a470cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:b3:b3:61:e9:5a:ff:4c:19:80:01:10:c2:
bc:b9:79:6b:a5:91:64:ef:8f:a1:45:04:da:07:89:
cc:1c:f7:96:26:62:fe:60:fb:32:b0:e3:41:9c:77:
e5:34:05:02:64:a3:07:d3:b4:ff:af:81:23:c4:0d:
85:42:c3:58:cb:30:8c:94:7f:e1:60:c1:24:25:e5:
77:49:db:6a:2c:be:2e:c2:b4:0b:00:cf:49:37:0f:
53:8f:be:db:db:27:5e:6e:e9:fc:2d:79:2b:cf:b9:
76:0c:fb:90:d4:83:34:8c:3a:b4:c1:67:cd:10:56:
15:b5:9e:a2:dd:cd:a0:aa:b0:8a:d1:c8:4e:59:d3:
fc:36:b0:70:32:49:bf:10:25:45:b9:f7:61:33:07:
e7:29:8b:d7:87:4d:ba:b5:7e:83:bb:89:71:1c:a5:
f9:7b:8b:83:fd:c4:f9:93:92:cb:e6:22:42:95:b1:
a2:aa:dc:97:7b:b2:f8:48:f1:6a:9f:4b:b9:2b:fd:
ab:8c:00:62:9f:d3:67:ee:6a:ea:dd:3e:a1:1e:6d:
08:03:d6:93:33:ab:ab:05:f0:f1:38:32:96:aa:71:
e7:b5:f7:84:21:3d:c8:6f:52:61:ab:af:e3:3d:bb:
0e:b2:93:99:32:2a:a9:c5:c2:14:cf:79:cb:f2:57:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:1A:71:2D:DD:FD:30:10:57:17:97:86:7B:EE:87:95:A4:70:CD
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/7F4acS3d_TAQVxeXhnvuh5WkcM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.47.0/24
5.160.197.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c3:85:48:66:4a:05:33:53:5a:6a:e4:df:00:e3:1a:06:39:
f5:9c:03:e6:65:10:9d:7b:20:e1:e8:3b:53:53:c3:49:56:66:
07:26:c3:de:11:01:ce:40:d0:fa:d2:03:c0:d9:ab:ab:c8:74:
2e:b7:fb:df:3e:34:14:6a:2e:fa:e6:91:55:f0:73:1a:ab:aa:
6b:89:92:68:4d:0c:cf:7a:d2:3a:9d:46:70:a2:f7:db:fa:e8:
45:3b:1f:24:5a:20:a2:41:3d:d0:6b:39:35:29:28:93:76:34:
4a:fd:4a:46:09:8f:c8:ea:29:72:9b:22:8a:4e:8b:5d:92:7d:
c9:ec:96:92:2d:82:2b:b5:b0:dc:dc:fd:b1:90:02:9c:ba:e7:
7e:76:f1:48:f3:3a:04:e4:07:1f:bb:71:be:d7:a3:43:03:46:
f5:2b:ee:b8:1d:00:70:80:c1:0e:29:e0:a5:13:02:e4:8f:05:
09:29:5c:72:1a:f8:f2:7f:9e:31:62:51:de:dc:ac:04:c3:da:
35:1c:e0:fb:23:e2:39:08:45:0d:40:98:03:97:77:b1:ba:ad:
02:e4:b3:6c:c5:d3:08:a8:03:2e:24:76:77:12:f7:9c:08:40:
06:f3:40:e5:bc:8f:09:59:c2:c2:88:4e:99:e2:b1:f2:a6:63:
87:a2:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:04 2025 by rpki-client