Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ae8hoxSsSeyH-3KZTzUztTqNLpM.roa
File: ae8hoxSsSeyH-3KZTzUztTqNLpM.roa (raw, json)
Hash identifier: Y1y9pUYx4U02vzwyXjNU9b9FoO8kdhEL8s6sXTePRZ4=
Subject key identifier: 69:EF:21:A3:14:AC:49:EC:87:FB:72:99:4F:35:33:B5:3A:8D:2E:93
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126D9900365274FC487B048EB0D48C7B
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ae8hoxSsSeyH-3KZTzUztTqNLpM.roa
Signing time: Sun 29 Dec 2024 12:39:19 +0000
ROA not before: Sun 29 Dec 2024 12:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64460
IP address blocks: 5.160.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6d:99:00:36:52:74:fc:48:7b:04:8e:b0:d4:8c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69ef21a314ac49ec87fb72994f3533b53a8d2e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:b4:0a:ae:4c:1e:c9:f2:9f:c8:4d:38:a7:
aa:8f:e8:55:02:18:52:41:c0:29:71:c6:45:58:d7:
41:c5:a3:c9:8a:99:74:6d:36:e3:5b:bd:bd:0a:2d:
76:dd:9d:97:a0:01:1b:ce:31:3d:77:b0:61:85:98:
0a:cc:cc:cf:fb:63:00:02:83:f4:e1:23:de:a3:91:
d4:0d:2b:cd:10:58:16:48:8c:c6:e0:a5:85:37:e0:
e1:07:94:38:2c:37:c7:ec:7f:90:49:b2:d7:5d:e3:
e1:d2:3a:8e:ca:9a:36:20:20:5b:c5:d8:07:f6:2d:
a2:80:c6:d4:5f:32:e8:1f:41:fb:64:f8:b1:e7:83:
91:0e:72:dc:a4:36:47:f0:32:a8:02:ad:1e:9f:1f:
2a:a9:32:4e:42:14:d2:c3:19:ee:ae:47:be:b9:b6:
29:f0:f1:f2:6f:c4:47:ca:3d:02:c7:6f:a4:d6:f1:
f5:a0:16:f1:cb:07:d3:ed:e8:ec:b6:11:6b:1b:96:
1e:24:bb:8a:e9:a0:1e:43:ab:70:9e:1f:9a:c8:1d:
97:d1:9d:1a:93:98:4c:39:9f:02:e3:84:f7:d7:6c:
6c:bd:61:69:61:3a:15:60:81:cc:0c:0a:c1:9e:94:
fd:28:54:f6:df:71:b8:fb:68:9b:eb:06:7b:7e:4b:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EF:21:A3:14:AC:49:EC:87:FB:72:99:4F:35:33:B5:3A:8D:2E:93
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/ae8hoxSsSeyH-3KZTzUztTqNLpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.141.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9b:18:90:bf:e1:48:d4:23:bf:e1:9f:1d:bb:9e:17:a8:5c:
fc:0e:23:ec:fd:28:f2:65:58:10:f2:01:2d:7d:e2:54:84:bc:
8c:fa:83:56:4b:99:14:2a:38:a3:c6:45:78:52:58:d3:a2:8d:
6b:83:86:2c:60:4a:c4:0c:15:05:1d:22:30:fc:42:45:af:66:
fe:72:c2:e9:6c:89:8c:b2:40:f4:9a:52:d7:18:51:2c:07:51:
f7:31:e9:87:8b:fe:ee:a7:55:52:d6:23:57:e9:06:25:04:60:
37:9a:fd:b2:ed:d7:44:9a:1d:2b:08:4a:ac:47:52:db:4c:54:
f0:09:5a:53:7f:2e:99:d7:a8:01:6c:ab:a9:f5:9c:b6:d4:0d:
05:00:ea:65:d3:47:ab:9c:80:60:0e:7b:74:dd:f7:40:2e:45:
40:70:32:eb:57:10:fe:e1:17:be:25:34:78:46:b9:ee:da:b5:
26:af:3d:11:32:d9:06:db:1a:da:33:81:00:51:13:63:1a:81:
c4:dc:f2:53:6b:4e:26:86:bc:e5:af:db:0e:69:b7:29:10:7e:
86:b8:de:da:a3:8e:dd:b2:a6:df:a7:33:6c:18:3d:f1:ee:35:
28:f3:81:95:53:56:6b:85:13:fd:3b:cf:45:16:ef:d0:41:16:
27:75:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:05:53 2025 by rpki-client