Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/FZFBBCZazSMk_4Rn381TrnqtiPk.roa
File: FZFBBCZazSMk_4Rn381TrnqtiPk.roa (raw, json)
Hash identifier: XSwokrMkExmDPLyiG4+WYMbct1t8jcmBo5zp/H6W6gs=
Subject key identifier: 15:91:41:04:26:5A:CD:23:24:FF:84:67:DF:CD:53:AE:7A:AD:88:F9
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126D98514EEDE772E889F08FD092615A
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/FZFBBCZazSMk_4Rn381TrnqtiPk.roa
Signing time: Sun 29 Dec 2024 12:39:19 +0000
ROA not before: Sun 29 Dec 2024 12:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62265
IP address blocks: 5.160.222.0/23 maxlen: 23
5.160.222.0/24 maxlen: 24
5.160.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6d:98:51:4e:ed:e7:72:e8:89:f0:8f:d0:92:61:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15914104265acd2324ff8467dfcd53ae7aad88f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:e7:69:e1:31:ad:8b:5e:bf:7a:e4:e1:21:
bf:94:3b:60:c2:e6:8d:18:ee:65:fb:09:41:05:c0:
5a:ab:8c:e8:f7:e4:ad:d2:f8:e8:37:2a:d1:1a:16:
5d:59:49:0d:88:91:4f:d0:3a:e3:c1:f7:ce:52:ae:
4f:6d:fc:f1:ff:36:42:e8:48:25:bc:81:3b:e0:24:
4b:d4:b8:99:9b:cf:c3:b4:c2:03:15:ef:43:6a:8b:
c8:7b:75:fb:8f:9d:74:d8:c4:6a:28:f2:8a:bf:40:
59:9d:b3:9b:1a:3f:6d:ef:10:15:6e:fb:f5:31:2a:
7f:54:05:5f:b9:ce:2e:3c:db:98:ef:3f:e0:c8:07:
22:a1:48:02:aa:0c:a3:72:64:74:5a:4f:b4:e6:42:
2a:9e:27:6e:8d:85:ec:f3:0c:df:bb:cf:96:92:5c:
5d:3f:9e:70:f2:37:17:75:39:6e:77:80:b5:61:94:
10:22:0d:d3:c8:29:78:a3:6d:0e:58:f9:8b:f1:b2:
c3:ee:cb:31:a2:88:4d:87:e3:5f:f8:0f:36:3a:07:
32:f2:7c:26:f4:6b:82:43:1f:80:fa:20:f2:f4:08:
c0:36:2e:4e:66:15:83:e4:13:79:d2:65:c8:a4:e2:
d1:b3:52:81:e1:1e:ef:b1:f1:be:0a:a9:6b:41:4f:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:91:41:04:26:5A:CD:23:24:FF:84:67:DF:CD:53:AE:7A:AD:88:F9
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/FZFBBCZazSMk_4Rn381TrnqtiPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:d9:88:b3:a7:2f:69:69:5f:c7:25:23:ab:0c:b5:95:29:9e:
ee:4a:00:c0:e7:e0:07:e7:3a:11:24:38:78:d4:0a:2f:71:a6:
98:a2:38:b7:86:c6:f2:e0:6d:9d:06:a1:14:5d:22:10:11:0d:
b1:1e:d7:05:a5:03:0d:1c:c1:b4:31:00:17:ae:60:7c:60:66:
5b:d4:a8:6a:c8:ac:a0:71:10:bb:f3:ec:c5:26:44:69:87:ee:
08:df:23:95:65:66:86:a7:a1:08:46:67:0d:bf:11:62:ed:01:
a8:dc:af:f0:9b:2d:98:53:b3:45:61:b5:42:88:b7:fa:d0:b9:
b5:d0:0b:50:cd:28:a3:72:ad:98:d8:cb:39:69:ac:68:d7:04:
12:4b:77:03:f8:05:03:70:29:cb:4d:1d:0b:44:cf:0f:b1:30:
69:87:a2:99:b4:70:c7:bc:08:24:aa:63:50:dd:84:9a:74:03:
58:c3:20:d8:b0:4b:6b:c9:7c:59:2e:ac:c5:e1:af:e9:32:24:
7d:b2:03:3b:bc:6b:4b:a6:93:9b:9c:cc:c2:d2:32:1d:5a:ec:
a6:5d:16:c9:d6:d4:77:42:df:0c:82:19:7a:ce:ec:3c:6a:ca:
2e:4e:93:e5:56:03:4b:a7:cd:2e:62:04:36:5a:c6:e8:56:08:
5a:86:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:13:43 2025 by rpki-client