Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/BITEgK-i19soz_C22FFcBQBUzUw.roa
File: BITEgK-i19soz_C22FFcBQBUzUw.roa (raw, json)
Hash identifier: sAOi6ioArins0jBFVe4bsAAZwp9wcEBoZCjkw5GTjEo=
Subject key identifier: 04:84:C4:80:AF:A2:D7:DB:28:CF:F0:B6:D8:51:5C:05:00:54:CD:4C
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC0E2D13017783BD6AD9AF1DE12E5
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/BITEgK-i19soz_C22FFcBQBUzUw.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50692
IP address blocks: 5.160.220.0/23 maxlen: 23
5.160.220.0/24 maxlen: 24
5.160.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c0:e2:d1:30:17:78:3b:d6:ad:9a:f1:de:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0484c480afa2d7db28cff0b6d8515c050054cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:78:0c:2d:f4:aa:dd:e4:2b:5a:15:d7:57:
d8:22:61:f5:7e:3e:4f:a4:37:3e:4e:10:0d:3b:38:
a5:d4:03:05:e8:bd:4f:e0:51:31:ec:09:c8:08:aa:
68:f2:5d:be:d9:00:0b:7c:63:9a:ad:3f:4f:d9:d2:
d4:49:f0:e6:56:df:e4:ca:da:ff:19:33:d7:67:72:
f2:e8:e0:35:58:95:38:b1:44:7c:7e:bb:f0:71:23:
db:e7:65:9e:05:ff:60:d3:aa:45:a5:55:84:a4:6a:
a1:7c:67:0f:c1:b9:e0:a8:0b:2e:a3:dc:a5:b5:68:
c3:0d:70:0f:3d:68:db:b6:19:ce:6e:34:4c:56:da:
a9:09:1a:fe:81:50:30:50:14:98:93:53:cd:d6:ed:
b1:12:ea:04:e2:f5:71:33:5d:62:38:55:a4:6d:60:
af:9b:d3:65:1e:41:c2:da:fc:37:d3:43:c3:2d:3d:
4b:ad:bd:4e:29:fd:2a:49:7e:4e:06:20:48:a3:24:
b7:f3:7f:88:34:53:ab:cd:27:c0:d6:bc:32:21:f1:
16:91:93:84:4a:86:bc:fc:08:17:93:60:c0:4d:03:
4f:ce:1f:8b:b6:6e:0c:bd:c4:01:a0:ad:f7:e9:a4:
44:03:a3:9b:d4:25:f8:10:78:9c:6b:db:ea:d7:cc:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:84:C4:80:AF:A2:D7:DB:28:CF:F0:B6:D8:51:5C:05:00:54:CD:4C
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/BITEgK-i19soz_C22FFcBQBUzUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.220.0/23
Signature Algorithm: sha256WithRSAEncryption
57:1a:66:a6:6b:ba:f6:31:d8:a4:21:fb:df:10:cb:1a:ed:0b:
96:a6:f9:06:38:07:4f:80:30:6d:b4:0f:98:3a:96:21:2c:21:
ae:00:7a:6f:b1:89:d5:5b:3e:0f:fc:2d:3c:3c:f2:2f:01:6c:
0b:27:1c:97:72:e1:72:13:0c:f0:63:a4:ce:db:5d:53:70:e5:
f3:88:fc:f5:7d:cb:54:69:f4:98:f2:e0:ea:6d:bd:3d:8d:1e:
48:f7:90:73:16:87:40:91:98:54:dc:3f:95:0e:a8:1e:ee:51:
5d:80:cb:e9:96:da:31:b5:7c:84:f0:27:c5:9a:91:81:f3:cb:
8f:c2:28:3a:8a:19:86:37:39:33:1b:cd:dd:2a:ea:fc:ad:7f:
b6:0e:8f:26:da:5b:5f:82:7b:71:f1:be:90:c4:b5:42:37:7e:
72:71:6a:60:f1:6a:e0:ea:c2:9c:89:37:1a:37:52:42:2a:ac:
9e:75:a0:d6:e7:c4:56:7d:29:90:a8:99:d8:91:e6:f9:f9:5d:
43:c9:6c:5a:19:ed:99:52:fc:ea:bb:73:e2:be:56:73:f7:22:
24:9b:59:ac:11:27:b7:35:a2:2e:ce:26:b6:4b:d1:22:ff:00:
43:99:d4:d9:13:48:c9:68:a7:57:ab:e2:33:3b:3b:84:c2:7f:
71:0f:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:26:41 2025 by rpki-client