Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/K6cJJNJnrmnNBmwYTpU3t9GTPPI.roa
File: K6cJJNJnrmnNBmwYTpU3t9GTPPI.roa (raw, json)
Hash identifier: 2p4dYwywoFD9l3YhVzaTBXZtBs7mbI/DEy97CEmfD4I=
Subject key identifier: 2B:A7:09:24:D2:67:AE:69:CD:06:6C:18:4E:95:37:B7:D1:93:3C:F2
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC39A75F0DEEFE4EA96379323C4AC
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/K6cJJNJnrmnNBmwYTpU3t9GTPPI.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59838
IP address blocks: 5.160.202.0/23 maxlen: 23
5.160.202.0/24 maxlen: 24
5.160.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c3:9a:75:f0:de:ef:e4:ea:96:37:93:23:c4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ba70924d267ae69cd066c184e9537b7d1933cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:ce:b6:62:f5:d1:a4:6a:a0:26:90:dd:ef:
21:fa:08:58:2c:de:af:4e:57:d0:11:14:41:b2:b6:
11:19:9b:a7:8e:41:14:36:d2:d4:76:1d:1b:e4:c7:
0c:65:f6:ab:83:de:89:45:04:52:3a:12:00:c5:21:
ff:ba:f6:c9:0c:4b:5b:fb:b8:0e:dc:cc:e5:d3:65:
bd:4e:14:44:c5:f5:4e:a8:a0:3f:e6:3b:58:87:8d:
f7:0e:71:b2:01:2a:2f:8c:b3:dd:6d:e3:df:2e:0f:
a5:bb:f0:a7:90:bf:b3:dd:68:14:a7:f0:94:a0:60:
a7:0c:c7:d3:eb:0d:5a:4c:67:b7:19:e3:67:58:43:
4e:7d:20:7d:09:45:7b:e3:59:26:81:92:1a:0f:06:
57:f0:b6:2a:83:f7:c4:84:67:7d:67:78:37:51:fc:
f5:c8:76:c1:94:50:9d:54:a0:8d:96:a2:73:50:ca:
31:a0:da:72:06:0d:69:4e:70:c7:17:24:2e:23:f2:
d3:64:a7:44:8b:a2:65:0c:88:ea:e5:35:f7:8f:76:
75:96:b2:98:79:74:7a:53:46:09:7e:12:9d:42:1a:
49:d5:6d:e7:5f:9e:3d:16:25:e4:de:19:0f:2e:86:
a9:de:2f:4c:ce:a3:00:1d:c1:b9:cc:4f:a4:88:1f:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:09:24:D2:67:AE:69:CD:06:6C:18:4E:95:37:B7:D1:93:3C:F2
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/K6cJJNJnrmnNBmwYTpU3t9GTPPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.202.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:89:bd:2d:16:f6:ce:ba:67:35:47:a4:e6:e3:2e:98:4d:72:
b4:78:3c:52:50:54:0d:fd:b8:22:79:0a:c6:be:72:3d:5c:19:
ca:99:b6:d3:ec:5b:2d:69:15:12:d1:e9:8a:3c:29:51:79:26:
9e:b7:9b:81:c5:9d:43:09:a1:dd:13:45:4a:e8:d6:eb:a8:c4:
01:f3:bc:3b:86:7f:cc:4d:18:4c:40:fd:ef:1d:b6:99:d9:40:
59:ff:ec:ef:c6:47:bd:ad:ff:61:18:03:ec:5a:f1:ff:8b:25:
b7:cb:4a:15:bc:6e:5c:01:d2:32:e2:8d:f6:e0:98:d3:f3:cb:
59:38:03:76:11:fb:71:cf:e7:b0:70:46:b2:a0:db:ef:d7:b6:
a9:9f:eb:22:3f:0f:bb:25:69:12:a8:c0:b4:e7:b6:39:a1:6e:
af:28:be:37:37:7d:40:ca:f9:36:b1:8f:8b:3e:0d:61:ba:c7:
f4:74:d8:95:31:2e:c3:97:a6:3e:27:c2:02:18:9f:b8:61:b9:
c4:4e:ff:b3:f1:0b:1b:27:d4:d1:a5:5c:67:b0:ba:be:28:e7:
16:8d:04:09:5d:a9:e7:01:0b:31:e1:0b:fb:0d:35:fd:cc:79:
f9:a3:fe:ad:95:a5:87:4c:5a:06:60:f3:88:68:c0:16:78:66:
85:a6:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:21:06 2025 by rpki-client