Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/eSZIN4eHYj08jc-wCMWRU5ec0vY.roa
File: eSZIN4eHYj08jc-wCMWRU5ec0vY.roa (raw, json)
Hash identifier: HUvXv3jQH+fR1jTjRYIv5ERkppZSZyF6iEk+KNboEbM=
Subject key identifier: 79:26:48:37:87:87:62:3D:3C:8D:CF:B0:08:C5:91:53:97:9C:D2:F6
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019411FA39578F7699A0A2F251A56EEA68FA
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/eSZIN4eHYj08jc-wCMWRU5ec0vY.roa
Signing time: Sun 29 Dec 2024 10:33:18 +0000
ROA not before: Sun 29 Dec 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16018
IP address blocks: 5.160.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:11:fa:39:57:8f:76:99:a0:a2:f2:51:a5:6e:ea:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=792648378787623d3c8dcfb008c59153979cd2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:9a:c9:4b:ac:6a:08:c7:f0:a4:86:ff:5a:
c0:61:48:89:88:fd:0c:04:b9:e7:fd:3f:f6:7f:fc:
72:94:81:f6:09:fc:ae:36:87:dc:18:00:f9:04:92:
68:f6:1e:fa:9a:42:60:7c:7d:b9:4d:44:b1:ec:54:
30:46:09:db:ec:1d:01:b7:1c:29:6a:af:33:08:12:
d3:3e:ca:3a:d0:d9:80:22:ab:93:b8:02:0e:fa:d2:
7a:6e:80:4a:20:26:b8:ee:36:28:94:66:d9:ee:2f:
f2:2a:35:1e:86:50:c0:ab:88:18:de:d8:b6:7a:ba:
68:96:2b:18:d8:c2:04:f1:58:5b:04:56:91:e3:39:
3c:8b:0b:74:1e:70:b0:50:c7:c3:c1:23:88:63:51:
9d:81:a5:b9:0f:42:13:ee:2f:51:a8:e3:b1:98:7a:
37:29:8f:4a:8e:59:f0:70:f0:b6:26:65:03:62:6b:
be:25:0d:ec:cf:63:b4:a9:63:07:76:04:9e:b8:c3:
6d:7f:30:fc:af:f2:7b:b0:b2:2d:cb:a9:3c:db:62:
c9:f0:52:42:c2:a4:01:f2:94:5c:a9:2b:f7:55:8e:
ef:d6:1c:17:93:53:76:c4:58:af:6e:e5:ca:24:06:
b7:85:13:63:44:df:0f:8e:42:6b:d2:71:5b:1a:cf:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:48:37:87:87:62:3D:3C:8D:CF:B0:08:C5:91:53:97:9C:D2:F6
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/eSZIN4eHYj08jc-wCMWRU5ec0vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.210.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1c:0b:42:7d:eb:62:79:d7:b4:73:2f:70:d5:c2:e6:d4:21:
cf:17:a2:23:b7:36:d0:d4:d6:fc:e8:96:66:10:ba:fc:e1:ae:
9e:24:6e:34:d1:f0:ce:51:88:8c:b9:fa:83:43:c7:76:88:42:
49:fa:13:45:68:fe:39:14:78:70:ea:f0:bc:73:13:11:9e:dd:
96:7f:2c:90:d4:ef:10:48:cd:5b:69:3a:be:34:6e:0b:49:b7:
4d:21:1b:ee:b3:51:89:f0:67:65:7b:8d:f7:7d:74:59:7b:0c:
89:db:5d:58:78:e3:da:41:38:23:e6:1a:e3:c9:93:fb:98:17:
1b:77:6a:59:87:f1:16:e0:09:6e:31:34:05:93:8c:ad:d3:48:
f6:68:44:cb:b4:30:d7:64:ff:0f:c8:4a:45:fa:3d:db:44:08:
cb:18:07:99:d7:36:0f:7b:bb:77:c7:fb:e3:9e:4f:05:28:b9:
90:90:95:0d:12:56:be:1d:fb:84:8a:7b:3a:19:46:8e:cb:31:
85:ee:a1:d2:d0:a8:c1:8d:38:46:fe:73:22:4e:e3:2b:d6:c9:
04:82:e4:4f:62:5c:c5:dd:c5:d2:76:56:bd:af:90:f7:0d:af:
97:fa:5f:3b:35:e1:a8:e3:dd:25:dc:cc:42:ec:20:b7:db:f2:
79:52:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:51 2025 by rpki-client