Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/vCpDSK41k076VmhFT3We5wxV528.roa
File: vCpDSK41k076VmhFT3We5wxV528.roa (raw, json)
Hash identifier: u3/hcgQBJ+QbeN/EeOF7n2M1yaQTulXT+OdGZwlNsx8=
Subject key identifier: BC:2A:43:48:AE:35:93:4E:FA:56:68:45:4F:75:9E:E7:0C:55:E7:6F
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126BC24BA716B49DD859E719BCD21C6A
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/vCpDSK41k076VmhFT3We5wxV528.roa
Signing time: Sun 29 Dec 2024 12:37:19 +0000
ROA not before: Sun 29 Dec 2024 12:37:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59501
IP address blocks: 5.160.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6b:c2:4b:a7:16:b4:9d:d8:59:e7:19:bc:d2:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:37:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc2a4348ae35934efa5668454f759ee70c55e76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:09:9d:7f:b2:cf:8f:d3:ef:9e:9c:da:a5:
b5:5e:61:37:34:f9:68:69:23:9a:31:b8:11:97:8c:
eb:08:05:db:f2:19:e0:6b:21:a2:40:28:dc:1c:5f:
1c:71:64:6a:fb:f7:af:8b:09:6c:0f:c2:4a:1c:3e:
5c:5f:35:08:f5:5d:02:51:c9:16:35:0b:5e:f9:4e:
ca:eb:c6:e5:b5:cb:bc:bd:98:59:ec:6f:8b:7d:db:
de:28:05:61:e9:97:28:5d:46:24:94:93:e9:83:08:
b7:25:5c:c8:40:2b:aa:59:6e:fb:15:9e:87:8f:38:
87:83:39:11:33:08:80:06:eb:b8:b3:ec:b8:c5:f1:
28:88:b9:3e:3d:bf:47:d5:30:31:d1:e7:1c:b4:29:
f3:fa:92:ac:c6:0f:52:30:4a:a0:42:72:b9:b2:af:
42:b6:2c:4e:42:aa:98:fb:27:85:c7:63:b2:77:9f:
33:12:21:dc:23:b2:df:47:1e:41:bd:48:c8:2f:41:
90:90:3b:c4:73:a6:2a:ee:f9:be:e5:d0:f0:96:20:
3d:54:22:a2:27:54:a1:d3:91:37:54:d0:c1:d4:5f:
a8:7d:81:58:32:61:30:b8:81:8d:14:44:a0:95:55:
32:88:c5:c2:c7:91:60:6c:af:23:28:4c:86:52:fe:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:43:48:AE:35:93:4E:FA:56:68:45:4F:75:9E:E7:0C:55:E7:6F
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/vCpDSK41k076VmhFT3We5wxV528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.217.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9b:0f:e0:e2:e1:d0:39:f1:3a:91:9e:f9:b7:c8:47:86:01:
ce:b8:e7:bc:1a:92:af:30:8a:7d:4f:b5:f0:b6:23:8d:c8:9c:
3b:79:22:24:e4:ed:6d:78:c3:59:67:28:37:82:e6:56:eb:2d:
d4:8c:ab:64:d4:d4:61:4d:e7:5e:c7:24:83:60:52:03:5a:8f:
44:f6:12:9a:df:59:31:60:93:ee:e3:d7:91:2e:a8:2a:42:de:
19:b3:ee:2e:8e:c1:d9:24:ee:bc:87:97:c9:78:df:b9:a1:a1:
4e:a0:55:21:67:20:3b:74:8a:34:19:8a:97:3f:e2:98:20:f4:
69:ef:d8:19:e8:67:b5:7e:08:39:4a:89:f1:bf:d3:18:7d:40:
aa:1d:e4:c7:b2:19:84:1b:a5:d4:ef:3c:60:93:df:da:f0:5c:
26:e2:13:5b:3a:a0:17:0c:0f:5f:cf:b3:ce:c3:c5:30:a3:40:
46:5a:30:28:2e:e0:b6:8a:62:ff:bd:77:59:3f:df:7f:db:84:
3b:00:43:0a:18:96:1b:b3:9a:e2:00:a6:0e:05:e7:f5:6a:d6:
1e:76:65:e4:7a:96:a2:d2:66:ed:ba:2e:c6:d4:ca:26:cc:a4:
cb:c0:ad:ac:4e:45:6b:bb:60:90:c1:19:cf:79:de:f1:c2:66:
d6:74:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:46 2025 by rpki-client