Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/BaJ3sWUb0B2miQHD0NichMBH-VI.roa
File: BaJ3sWUb0B2miQHD0NichMBH-VI.roa (raw, json)
Hash identifier: 1FNqfUe1Xd3iu7IFHpJgdeWAk/ex5yvgitbABD6nYkE=
Subject key identifier: 05:A2:77:B1:65:1B:D0:1D:A6:89:01:C3:D0:D8:9C:84:C0:47:F9:52
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194D0009532FD4897E9D72B0FCCA45690D6
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/BaJ3sWUb0B2miQHD0NichMBH-VI.roa
Signing time: Tue 04 Feb 2025 08:08:06 +0000
ROA not before: Tue 04 Feb 2025 08:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49847
IP address blocks: 5.160.160.0/24 maxlen: 24
5.160.161.0/24 maxlen: 24
5.160.164.0/24 maxlen: 24
5.160.165.0/24 maxlen: 24
5.160.180.0/22 maxlen: 22
46.209.54.0/24 maxlen: 24
46.209.55.0/24 maxlen: 24
46.209.178.0/24 maxlen: 24
46.209.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 09:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:00:95:32:fd:48:97:e9:d7:2b:0f:cc:a4:56:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Feb 4 08:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a277b1651bd01da68901c3d0d89c84c047f952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:ef:8d:b5:67:f6:2f:b9:ca:2a:1d:34:f4:
7c:91:2d:e3:09:ef:91:5b:61:00:f8:81:4e:22:9e:
6c:e8:de:05:f6:9a:35:ad:64:84:18:2e:92:df:3d:
11:bf:66:8e:6a:d9:29:33:13:d6:91:68:18:16:59:
43:79:47:e8:9c:58:b0:b0:4a:5d:0d:db:19:96:0d:
cc:6b:ff:70:51:a3:af:ac:b5:f3:f6:d8:19:41:df:
fe:d0:ef:d3:9a:a6:14:61:5d:58:35:57:c9:5b:18:
fe:32:50:5c:e0:13:98:e2:4b:df:74:4d:72:dc:03:
f6:2b:b9:5b:9b:3b:5a:f4:0d:13:c6:66:32:d6:f8:
79:6f:76:bd:c6:dd:d5:d1:ff:44:b7:48:ae:ca:b6:
77:0d:6a:32:0f:ed:f8:ec:fd:65:03:e5:f6:8c:c2:
62:ca:07:89:99:3c:c5:73:bd:4d:94:ca:d1:39:cd:
88:c5:f5:8b:a9:73:14:a5:a6:fd:ed:66:5e:78:bd:
50:f2:67:94:65:a5:9c:4e:fb:6a:e4:c3:92:89:f7:
ce:16:1b:94:d8:58:ba:6d:aa:6d:7c:a1:7e:d2:c0:
2a:62:9d:25:07:35:71:bc:b2:ba:65:ac:1a:fa:b0:
e8:99:e7:96:80:3a:a0:10:44:47:c8:d3:01:cc:1d:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A2:77:B1:65:1B:D0:1D:A6:89:01:C3:D0:D8:9C:84:C0:47:F9:52
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/BaJ3sWUb0B2miQHD0NichMBH-VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.160.0/23
5.160.164.0/23
5.160.180.0/22
46.209.54.0/23
46.209.178.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:5a:c5:54:93:2e:70:e7:2a:05:e5:bb:4b:75:48:c6:32:53:
80:63:6c:8c:c8:af:b2:f2:46:65:98:2c:db:6c:1c:7c:6d:00:
36:c8:aa:48:88:b8:93:78:9a:72:13:a5:85:dd:78:07:83:64:
b0:dd:db:c2:de:65:fa:75:26:0b:c2:33:23:28:fc:d8:c0:02:
47:39:1c:49:42:8a:01:15:cd:7d:0d:d1:dc:4c:63:0f:53:d2:
ab:4f:68:9e:20:29:c9:d7:1a:89:68:db:d3:53:46:26:65:06:
50:77:e3:ea:91:ac:dd:58:4d:cd:3b:fd:38:89:85:d8:67:17:
47:60:99:b8:03:b0:a5:1c:16:97:a7:e0:5a:80:e4:da:ec:50:
fc:a5:c1:9d:05:ee:5a:18:8b:b0:de:db:8b:21:0e:2b:07:45:
5a:47:79:eb:c1:9f:e4:7c:48:c9:b1:87:f7:2d:0f:8f:04:d6:
95:1c:74:e3:84:08:bc:71:47:7f:ad:aa:bc:fd:79:9d:d8:5e:
aa:41:76:7b:59:b4:57:43:94:83:d8:90:d3:cd:71:af:33:2c:
dd:ee:a1:bf:06:de:12:dd:37:67:93:a6:6c:6c:f9:a7:2b:a9:
40:63:09:6b:83:1d:c0:3c:0d:55:eb:5c:75:7b:91:a6:de:b7:
7f:a7:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:07:57 2025 by rpki-client