Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/NCyjZMM6hvQiTjL1PDG9e5R2unk.roa
File: NCyjZMM6hvQiTjL1PDG9e5R2unk.roa (raw, json)
Hash identifier: jXzPg+UcX5RNZQ0ZA7nF0UgIpNlqzrc5FntPoTSYPpc=
Subject key identifier: 34:2C:A3:64:C3:3A:86:F4:22:4E:32:F5:3C:31:BD:7B:94:76:BA:79
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC40AB692E9192985E6735182F52E
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/NCyjZMM6hvQiTjL1PDG9e5R2unk.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59961
IP address blocks: 5.160.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c4:0a:b6:92:e9:19:29:85:e6:73:51:82:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=342ca364c33a86f4224e32f53c31bd7b9476ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:96:d1:af:52:55:c8:89:56:71:d1:74:13:
0b:02:f9:0e:11:ea:35:6d:b2:10:1c:dd:ac:85:ba:
7e:51:72:77:5d:9b:0d:08:b0:b6:6b:7a:24:8c:a5:
55:3f:26:da:12:7c:8b:c3:4e:46:80:ab:c7:e9:02:
bd:98:5d:77:f1:e9:98:18:1d:44:1b:1a:2f:a0:28:
0b:5f:b9:96:61:b8:35:fc:38:d2:cf:fa:a5:9f:70:
86:3f:1a:5a:e8:b2:e1:45:d3:b4:59:8c:f3:20:3b:
f4:e0:c1:ad:c1:a6:c5:64:7e:99:3f:31:59:a6:67:
8a:ab:bc:bd:21:dd:41:93:12:78:d2:32:4a:7d:45:
8e:c4:dd:c7:c3:42:6b:fb:d1:50:2b:57:b7:49:66:
06:60:6f:02:8e:17:16:04:7d:2c:fe:99:36:1a:32:
08:5d:70:ee:c1:fd:ba:c1:e0:96:d7:c8:9c:38:e9:
45:2b:52:50:15:40:7a:ec:01:be:e1:97:c8:2d:fc:
89:54:01:41:51:2e:7e:b6:e1:60:a8:c1:30:33:81:
ac:fb:63:85:d9:72:12:d9:ca:87:a1:84:be:92:34:
3f:2b:e1:4a:a2:a7:8d:3f:1d:53:6f:d1:54:5f:73:
58:e4:c8:d7:6d:5e:8d:f7:ed:d0:a2:ac:99:c7:4c:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:A3:64:C3:3A:86:F4:22:4E:32:F5:3C:31:BD:7B:94:76:BA:79
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/NCyjZMM6hvQiTjL1PDG9e5R2unk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d8:c2:d8:08:f6:b3:5d:54:48:a8:34:eb:a6:4d:6d:57:b6:
79:2f:d3:d5:c1:2d:1f:49:77:3c:1e:2a:53:35:89:c6:0e:95:
c0:04:9f:4f:ab:42:c2:a5:91:ce:49:a4:4f:bd:24:b6:20:d1:
87:54:9f:1c:8f:5c:e5:82:c0:1e:d5:89:fd:7d:c4:5a:b4:ad:
7e:60:76:81:b6:be:a4:f3:39:8d:18:5a:d4:f5:6d:67:60:7d:
42:1f:6f:c7:c3:5a:27:66:73:20:6c:2e:1f:cd:cb:c6:3b:43:
8c:e8:cd:43:76:98:fb:a6:29:77:bf:c2:b4:d5:31:63:ad:dc:
ad:2c:b1:a4:dc:f4:cf:e9:ae:83:a6:65:1d:8b:7c:02:c1:3f:
50:79:bb:cf:1b:75:bd:a8:88:0f:cf:9b:65:69:e5:df:65:6a:
ff:c9:82:83:99:43:1a:0c:bd:1e:13:69:53:f2:c6:3b:c7:c3:
47:0c:91:bc:8c:81:d6:96:64:fb:b6:d1:81:44:80:72:a6:fd:
56:98:72:4f:d1:d2:5d:5c:67:70:40:28:3f:13:21:a2:1c:f6:
46:43:2a:ce:b8:f3:da:bd:b9:28:7d:7c:31:5d:b5:69:4a:2f:
56:9b:eb:f2:4c:e6:66:01:16:5a:e3:87:18:f9:c7:63:a6:8a:
d5:cc:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:46 2025 by rpki-client