Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/WSZVz0WI6Ow2_2hcLCZZMRY-s1A.roa
File: WSZVz0WI6Ow2_2hcLCZZMRY-s1A.roa (raw, json)
Hash identifier: mb0DuUsKX/xZWH9o6FHY+jYxp0MxZ3BeHqoWhL+pB/g=
Subject key identifier: 59:26:55:CF:45:88:E8:EC:36:FF:68:5C:2C:26:59:31:16:3E:B3:50
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC29CF03470248EC4F97D8EBB36B1
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/WSZVz0WI6Ow2_2hcLCZZMRY-s1A.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59757
IP address blocks: 5.160.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c2:9c:f0:34:70:24:8e:c4:f9:7d:8e:bb:36:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=592655cf4588e8ec36ff685c2c265931163eb350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:b8:cd:80:87:88:ea:32:f2:35:ce:0f:75:
7c:b8:d9:ba:38:5a:f4:2f:00:61:8e:4e:65:bf:58:
eb:69:be:7a:86:e3:6f:ac:a3:dc:3e:fd:8f:d2:bb:
3d:b4:36:9c:20:c0:67:1d:e5:f9:e3:58:c7:1f:79:
a7:51:99:83:e9:7d:d5:29:d6:6c:d2:2f:be:a9:04:
64:18:21:05:43:9e:93:9c:ce:9e:3f:2f:cd:57:98:
2b:56:34:d5:48:e8:40:2c:3d:3e:63:4b:94:84:37:
dd:c1:d3:95:17:22:5f:c5:dc:e9:6b:8c:8e:0d:f4:
d2:ce:9b:b2:f9:0d:5a:c9:83:8f:78:91:d4:81:f4:
be:02:c2:e2:42:c0:33:72:31:86:b7:4c:58:f7:09:
cf:ab:d3:3f:08:7e:f3:10:33:45:84:58:25:87:07:
9d:0e:c5:4f:ae:8c:68:df:65:49:f5:99:33:f5:b1:
a7:52:69:72:d9:1f:5b:76:0f:1d:38:4d:7f:52:7b:
c6:83:41:69:56:b4:72:72:64:32:e1:12:f1:9c:2e:
a1:02:6e:7c:28:2f:63:74:6e:be:b2:40:51:0a:35:
f0:1f:76:34:35:13:48:72:ed:2c:16:f3:0e:7a:52:
56:9e:19:79:f1:3d:96:25:49:d7:7e:0b:a0:46:40:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:55:CF:45:88:E8:EC:36:FF:68:5C:2C:26:59:31:16:3E:B3:50
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/WSZVz0WI6Ow2_2hcLCZZMRY-s1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.216.0/24
Signature Algorithm: sha256WithRSAEncryption
58:65:af:a9:4b:94:ce:5d:91:3c:0b:4d:2d:96:db:7b:26:7d:
f9:e1:97:85:e6:25:16:f5:b1:b2:26:f7:0b:f3:c9:06:67:bc:
7c:04:13:6c:fd:7d:c9:ae:74:26:9c:94:2c:d1:53:56:17:bd:
1f:5c:94:8a:33:5b:8e:29:60:b1:0c:fa:4a:94:35:9e:34:27:
98:73:41:24:26:21:83:50:b6:43:ac:83:cb:3c:69:a0:fc:49:
d0:28:b5:92:61:04:51:16:c2:71:3c:c3:4f:01:a4:07:99:21:
67:3e:7a:3f:ae:ff:71:37:c3:ca:93:d4:27:36:70:16:72:68:
9e:26:9d:0d:e6:a9:9f:87:bd:d0:2b:46:c7:49:c3:c8:f2:7d:
d5:07:c2:f0:bf:14:6e:82:3d:90:a5:54:58:b5:5c:68:c4:56:
cb:05:1a:22:69:1d:9c:95:d3:0b:90:2c:b9:70:ef:5f:f9:77:
82:79:d4:f6:3b:9c:46:f8:2a:08:3f:9c:6f:1d:f7:8d:b3:3c:
3b:8b:b9:57:ff:3f:5f:a4:31:b3:7e:db:84:f3:cb:26:a0:2d:
d0:9f:30:a6:d3:a9:9b:e5:f4:04:05:ae:e7:f1:6c:86:1b:a7:
f1:08:17:56:cd:a6:1d:18:f7:6b:be:cb:e1:73:c9:08:05:ea:
f3:40:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:36:25 2025 by rpki-client