Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/FV1Jpmfbi3Tx7uvh_QSpMpHsRWw.roa
File: FV1Jpmfbi3Tx7uvh_QSpMpHsRWw.roa (raw, json)
Hash identifier: Q/TCyCwGE+nKGke9YyzbAB3M12Ejs/XVWaEJ+40NxL0=
Subject key identifier: 15:5D:49:A6:67:DB:8B:74:F1:EE:EB:E1:FD:04:A9:32:91:EC:45:6C
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC117A7ED4074E3C98716B27E4C1D
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/FV1Jpmfbi3Tx7uvh_QSpMpHsRWw.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50855
IP address blocks: 5.160.154.0/24 maxlen: 24
5.160.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c1:17:a7:ed:40:74:e3:c9:87:16:b2:7e:4c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=155d49a667db8b74f1eeebe1fd04a93291ec456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:b9:6d:b6:57:c5:66:fd:50:a2:08:29:8f:
4d:7b:2a:f7:a1:b9:59:85:ae:79:31:22:5a:9d:05:
dc:30:93:e4:ff:f3:61:4a:38:11:53:56:c2:98:f5:
e9:85:f9:6d:63:0c:5b:92:7e:7b:a6:e7:ea:02:ac:
5b:53:3b:02:b0:87:3f:61:af:10:3e:a5:e3:56:31:
e8:4c:24:71:93:96:0b:18:9a:c7:46:8f:c7:77:e3:
30:87:da:f7:e6:70:64:64:a0:fc:9d:7c:8d:92:35:
aa:a6:bd:99:82:d7:b1:c4:72:6a:9e:ef:23:0a:5b:
43:dd:3f:4a:1b:5e:9d:90:4e:25:33:42:4a:94:fe:
55:f5:45:19:f8:c8:26:70:23:8f:94:86:cc:ce:e2:
74:d8:2f:46:04:7b:18:28:4c:21:8b:82:7d:ac:b9:
1e:d3:e6:8c:17:f5:a5:d5:c3:7c:d8:28:14:0a:7f:
70:84:ae:8d:9b:47:e0:78:c6:d3:4b:fb:e8:c1:be:
07:54:7d:ca:9c:73:92:b2:0c:4c:76:05:ff:5d:04:
40:ab:e1:43:7d:6a:02:04:c2:c6:73:bf:10:0b:ad:
26:8e:e1:72:a8:e0:46:2d:64:1e:2f:c7:a3:66:b7:
72:46:4b:79:f5:ae:43:8a:32:cf:69:2c:28:98:82:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:49:A6:67:DB:8B:74:F1:EE:EB:E1:FD:04:A9:32:91:EC:45:6C
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/FV1Jpmfbi3Tx7uvh_QSpMpHsRWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.154.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:e8:ec:29:38:71:86:6c:32:95:41:0f:02:bd:15:74:13:dc:
7d:bc:5b:b2:7f:cd:b2:0d:d7:8b:0f:c5:a3:e0:6e:79:17:b5:
f2:f7:34:95:a6:09:4e:68:44:52:ec:af:fb:58:42:15:08:76:
08:76:22:7b:1b:b3:29:76:68:c2:d9:f3:8a:5c:82:8e:72:4b:
1c:5e:39:e8:24:4d:d8:ab:0e:ff:78:06:fd:1b:6e:da:8c:d7:
69:61:45:a7:b0:16:51:64:c5:d4:03:a3:a8:4f:f3:7b:09:c5:
0a:86:21:15:19:70:24:1e:66:b6:28:83:d0:16:77:38:21:e5:
4a:38:c3:50:be:3a:db:a7:c5:90:04:e9:b5:1b:f7:43:28:3f:
41:84:7a:98:c9:c2:e7:3b:ef:98:65:91:4a:99:0e:1d:01:f1:
70:23:40:32:55:1c:a9:b0:a3:01:f8:57:12:07:70:82:48:2d:
a5:7e:41:1f:f4:d2:f7:5b:8c:cd:62:64:99:5e:86:72:27:40:
15:f9:06:2c:21:65:9d:71:b1:c7:ae:4b:47:0b:28:71:65:04:
2c:b9:03:12:86:16:26:d2:86:31:cd:50:d1:0c:56:65:c2:50:
0c:d0:23:e9:56:31:de:15:fe:bf:9f:a1:6e:75:b0:5b:53:1d:
c7:db:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:24 2025 by rpki-client