Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/te55Ih2srCwkMzFmSyJGim6YVeE.roa
File: te55Ih2srCwkMzFmSyJGim6YVeE.roa (raw, json)
Hash identifier: pGqmkqH17K2F6qiz/9O1xfHuCL+s5dHxbGgR36Z/mHE=
Subject key identifier: B5:EE:79:22:1D:AC:AC:2C:24:33:31:66:4B:22:46:8A:6E:98:55:E1
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194120AB56C20FBFC4985C9C199153ED8DB
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/te55Ih2srCwkMzFmSyJGim6YVeE.roa
Signing time: Sun 29 Dec 2024 10:51:19 +0000
ROA not before: Sun 29 Dec 2024 10:51:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35043
IP address blocks: 5.160.248.0/22 maxlen: 22
5.160.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:0a:b5:6c:20:fb:fc:49:85:c9:c1:99:15:3e:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 10:51:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5ee79221dacac2c243331664b22468a6e9855e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:9d:cc:37:a6:01:f0:5c:fd:45:fd:32:01:
a8:84:1c:18:2c:66:13:26:b6:c9:89:46:27:6c:b9:
b9:02:d4:7a:5e:94:07:b0:96:5a:5e:32:5b:8c:02:
8b:48:06:fd:5a:2b:6d:c5:51:9d:a0:11:2d:d2:58:
92:08:5e:74:c6:5a:e9:f6:81:e2:08:02:84:0a:bf:
01:53:82:6d:5c:ae:72:05:a1:65:1d:96:fc:cc:56:
22:8e:e0:f0:64:4f:2b:ff:73:2b:3c:95:91:74:e4:
ae:25:e4:78:c7:b3:c1:3d:ad:01:73:83:7d:71:08:
16:a2:c3:2a:70:5b:e8:d8:3f:bc:cb:7e:a3:6f:45:
92:12:03:01:74:81:20:9a:8d:33:76:7f:5f:fe:70:
b6:d4:b4:76:04:68:0e:64:3a:8d:1e:6b:50:e4:b4:
af:10:31:45:fc:ab:a1:fa:75:bc:9c:4b:65:b2:4f:
0c:7b:d0:6e:d1:ef:c7:9a:25:26:f5:da:43:fb:4f:
23:6b:1e:f4:80:d6:99:26:3b:10:f9:9c:96:34:06:
31:07:43:f0:fd:f1:70:04:7a:a7:15:92:1e:27:ca:
26:71:e9:1e:b7:b6:e5:a1:77:17:f7:01:43:54:38:
f2:d5:dd:96:11:80:d9:59:37:23:66:03:bf:4d:8d:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:79:22:1D:AC:AC:2C:24:33:31:66:4B:22:46:8A:6E:98:55:E1
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/te55Ih2srCwkMzFmSyJGim6YVeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:47:99:7a:95:7d:01:2f:f4:5d:2a:a2:c9:41:c2:66:ad:15:
0b:21:1b:c4:59:c1:2f:44:a6:48:ac:04:7a:8c:fa:c5:11:ea:
86:82:66:d8:76:d4:ca:3d:bb:35:08:fa:c1:fc:84:c2:31:c2:
2e:3f:7e:db:43:75:89:66:1e:f6:84:49:fd:96:bc:ff:d9:e5:
3e:35:1f:ed:ab:f7:b3:15:c2:82:c0:99:a9:22:cc:4e:f7:2b:
09:3d:ca:2b:4b:55:8d:d4:70:fc:c7:26:54:df:b3:ba:41:c2:
fb:dd:d1:33:88:46:6d:81:e1:92:16:23:b5:65:aa:e3:ec:90:
b0:89:33:c5:0b:76:09:68:4a:9d:9a:d3:00:19:64:f8:44:ad:
1e:7f:8b:7d:a2:26:38:4f:7c:b3:05:50:5c:54:dc:27:0b:70:
b3:fe:7c:b6:8c:e7:fa:c7:3c:f3:15:e7:8f:0c:35:6a:27:7e:
d4:33:71:93:03:60:de:ad:f9:23:db:7b:0e:d5:ab:cb:41:e3:
61:8d:c9:bf:1f:8a:e9:47:4b:12:e4:cc:ee:73:96:6e:64:44:
09:ea:06:10:d7:0b:c0:bd:5d:7b:04:49:2f:9a:c5:18:6f:50:
c9:6e:6a:b2:90:be:9f:3f:88:16:c0:b4:95:c6:73:5a:92:0d:
57:5e:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:39:53 2025 by rpki-client