Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ENbNG1mgZHGWSbn55BANhGOCRLc.roa
File: ENbNG1mgZHGWSbn55BANhGOCRLc.roa (raw, json)
Hash identifier: fSB2+8kzJFHrSAG6R89lERtDEm5eLJGzNOA7+9yZB+w=
Subject key identifier: 10:D6:CD:1B:59:A0:64:71:96:49:B9:F9:E4:10:0D:84:63:82:44:B7
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126D9D7F24EBBC8F217289DAB14E0884
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ENbNG1mgZHGWSbn55BANhGOCRLc.roa
Signing time: Sun 29 Dec 2024 12:39:21 +0000
ROA not before: Sun 29 Dec 2024 12:39:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215779
IP address blocks: 5.160.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6d:9d:7f:24:eb:bc:8f:21:72:89:da:b1:4e:08:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:39:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10d6cd1b59a064719649b9f9e4100d84638244b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:8e:22:a5:3a:2a:79:81:e1:f6:1c:8c:86:
75:13:9b:9b:8d:18:f9:54:b6:57:3f:ed:81:c3:4e:
50:09:61:cf:41:f3:d4:cd:16:31:30:2a:3c:da:a0:
cb:29:90:d1:05:60:65:38:90:b9:35:79:c8:bd:80:
11:a5:fa:70:0a:f7:b2:7c:b8:4e:a2:51:aa:ed:26:
ea:2d:d1:d7:6e:0d:00:09:19:9c:14:b4:09:9c:86:
8e:0b:7f:b5:07:1b:5a:fc:a1:f5:60:86:8f:bc:16:
15:be:25:54:72:45:86:98:23:9c:9b:c6:d1:46:03:
2d:47:d5:90:8a:6b:b2:1f:da:9e:10:18:52:2e:4a:
9d:b0:b7:3f:91:97:2a:69:14:2d:58:d3:ec:4e:0f:
db:46:cd:a9:18:f6:da:41:03:a4:5f:14:7d:ba:f3:
9e:de:07:ac:3b:8e:f3:59:97:a9:1b:e0:04:a8:b1:
ac:8c:08:96:56:e5:20:26:b7:fb:f7:d7:d9:47:86:
ec:c1:3b:92:5e:a7:ee:24:4a:a3:c4:7a:50:dd:d6:
cf:dd:2c:10:af:93:73:95:f1:f6:86:83:4b:96:fc:
3c:fc:fe:4c:a7:c7:75:9e:9d:8a:3e:24:9e:53:da:
e5:14:92:b9:31:a1:46:86:c3:ce:b5:81:3e:1c:4b:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D6:CD:1B:59:A0:64:71:96:49:B9:F9:E4:10:0D:84:63:82:44:B7
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ENbNG1mgZHGWSbn55BANhGOCRLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:74:75:eb:e7:6f:8f:90:e8:1a:de:74:ac:6f:c1:89:42:d6:
56:b1:7d:25:8f:be:60:66:fa:b5:e5:9d:c0:28:c8:08:60:10:
e6:9b:a7:35:2f:b2:6d:47:42:18:32:14:f3:a3:61:50:0f:43:
6e:a3:24:a1:57:fc:17:8d:d5:38:69:80:14:32:cc:03:e1:7f:
24:ed:52:d8:ce:2d:3f:1d:d9:4c:ec:3e:27:24:5e:93:22:69:
a2:02:b2:d3:40:a6:40:f1:2c:04:e6:6d:13:15:9a:3d:e0:fb:
a2:be:ea:64:14:61:63:0e:e3:d1:49:ef:0b:99:c2:ac:52:1f:
ea:7f:b6:30:f7:fe:ba:23:d0:33:c5:07:68:3f:a3:55:3c:50:
1c:c6:da:07:46:8a:4e:cd:ab:d6:f0:e4:17:46:43:8c:58:9c:
cb:6f:b5:8b:2d:bb:3b:72:50:6d:db:fa:9d:5f:40:9a:d6:ea:
5e:1c:8a:8e:f0:ea:41:21:da:13:95:7a:fd:fe:8b:1b:b7:8a:
21:99:a1:4f:fb:ef:96:82:5f:67:19:6f:64:74:03:e1:0b:e1:
07:e1:d2:ea:f6:d9:fc:06:c6:bf:6c:46:71:4d:6e:c2:dc:e9:
0f:51:80:4c:84:23:e3:ba:a2:8a:f3:4e:24:3c:c1:f7:76:b2:
10:6a:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:14 2025 by rpki-client