Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/pO9R3mUydU4Gnmyix9TdWOJQ5mc.roa
File: pO9R3mUydU4Gnmyix9TdWOJQ5mc.roa (raw, json)
Hash identifier: 7LOl3orRseCA8ffpOGpQvWA2bRPrrRsXIfD6h453IfU=
Subject key identifier: A4:EF:51:DE:65:32:75:4E:06:9E:6C:A2:C7:D4:DD:58:E2:50:E6:67
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126AD67AC29AB7F802505A6B15D7FCDD
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/pO9R3mUydU4Gnmyix9TdWOJQ5mc.roa
Signing time: Sun 29 Dec 2024 12:36:19 +0000
ROA not before: Sun 29 Dec 2024 12:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 5.160.240.0/24 maxlen: 24
46.209.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6a:d6:7a:c2:9a:b7:f8:02:50:5a:6b:15:d7:fc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4ef51de6532754e069e6ca2c7d4dd58e250e667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:1c:76:6b:61:bd:22:d2:1c:67:51:50:9b:
72:6a:d8:68:80:0b:ac:61:9f:f5:12:dd:5a:74:96:
50:52:b8:bf:ce:38:ff:81:3d:f3:03:46:aa:51:3d:
06:ee:da:15:ec:27:62:da:e7:fe:74:9a:f9:f4:d2:
65:c8:68:58:22:a2:02:72:26:3f:ea:23:83:95:14:
9b:4b:a9:ae:9b:0a:88:eb:11:bd:38:24:74:a9:06:
d8:04:7e:fc:e6:ad:3c:32:ed:9d:ad:69:15:82:8a:
1c:a9:9a:f0:c2:b5:d3:c3:41:b7:e2:3d:7e:9f:52:
11:9b:b6:5c:49:29:c6:04:b1:ef:a6:67:f0:77:e1:
94:fb:70:9d:a8:32:d7:5c:af:f7:fc:b0:db:d7:3b:
dc:8f:7b:6f:94:3b:15:5b:00:d6:63:90:4f:a1:ab:
96:4e:5e:66:1f:61:75:0b:92:9e:93:46:d3:38:63:
6d:bd:9a:0a:e4:bb:14:21:1f:bc:45:30:46:73:84:
c0:a4:60:aa:f4:8a:f8:8d:17:2d:bb:72:a5:33:97:
ea:96:15:9a:cb:89:35:6b:03:4f:01:63:80:e7:05:
e0:29:ae:ca:a1:1e:f9:27:80:b4:db:72:0f:a0:60:
cc:66:8b:a1:0e:ae:8e:25:3e:4d:48:f2:bd:cf:50:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:51:DE:65:32:75:4E:06:9E:6C:A2:C7:D4:DD:58:E2:50:E6:67
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/pO9R3mUydU4Gnmyix9TdWOJQ5mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.240.0/24
46.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
07:6d:aa:02:d6:4e:ef:96:6e:2b:91:52:cf:10:12:2f:a3:dc:
5f:af:6e:a8:16:0f:d3:f5:db:77:1e:42:22:0f:94:7d:d0:b7:
23:79:22:1d:77:e2:4a:f8:3b:53:11:11:7c:3b:4a:32:2a:61:
0c:f2:12:c0:e7:52:47:15:a2:6c:08:62:7a:b8:d6:ef:34:c8:
5e:13:da:0e:60:89:f6:a9:3a:93:bf:60:90:b8:a0:7c:fc:55:
0e:4c:bc:ae:10:22:df:0f:02:46:ea:e3:9a:5c:e2:6e:12:82:
7e:14:96:2f:a6:91:48:09:45:0b:81:b6:df:35:60:3a:ff:8d:
13:41:46:83:b0:79:a7:11:18:a2:38:0c:96:92:1d:6b:00:dc:
40:0b:2b:2f:da:7f:6a:82:b2:49:63:4e:45:6c:81:24:a3:4b:
2c:ac:56:79:5a:3f:1d:bb:66:80:e3:b1:73:2e:65:3e:31:a9:
af:82:e5:77:d6:01:26:9e:9c:39:10:c6:42:56:9f:7d:88:45:
27:23:4b:69:39:d7:ad:7c:cd:16:c4:f6:f5:00:73:a5:61:57:
38:82:7a:47:e0:26:0f:f6:7d:ce:a5:a4:a9:1a:ef:ea:f6:eb:
2a:74:50:5d:44:c9:18:89:c0:57:f2:dd:5c:90:26:ce:ab:fc:
07:b7:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:13:36 2025 by rpki-client