Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/zcE7j-I6mL7D_U1hBf8W7qvfu1k.roa
File: zcE7j-I6mL7D_U1hBf8W7qvfu1k.roa (raw, json)
Hash identifier: fsXhRgQm91UIla1Jz2zlm7/5l1alFfwFaGlCqZ7Neag=
Subject key identifier: CD:C1:3B:8F:E2:3A:98:BE:C3:FD:4D:61:05:FF:16:EE:AB:DF:BB:59
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126D95F965F401015DC6E9B17A44CC87
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/zcE7j-I6mL7D_U1hBf8W7qvfu1k.roa
Signing time: Sun 29 Dec 2024 12:39:19 +0000
ROA not before: Sun 29 Dec 2024 12:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60539
IP address blocks: 5.160.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6d:95:f9:65:f4:01:01:5d:c6:e9:b1:7a:44:cc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdc13b8fe23a98bec3fd4d6105ff16eeabdfbb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:f1:11:fc:96:17:ee:14:81:cd:ba:78:85:
2a:24:9f:c8:48:69:84:10:09:ba:28:f0:bf:b2:37:
57:07:75:c4:cd:a1:8b:10:fc:67:59:9d:78:62:78:
94:99:07:7f:4f:4b:79:0f:73:83:8f:9c:1c:42:d2:
56:aa:d3:9e:61:5f:68:08:1c:f6:65:3f:4d:96:c8:
8c:a0:35:2c:02:6b:e4:ca:be:65:e2:8c:7f:fc:a0:
34:c1:90:58:ee:31:b9:a4:b5:f7:f4:d0:e1:df:f4:
82:2c:fa:7b:da:00:e8:cc:66:cf:50:9a:d3:26:e0:
a5:e8:f6:2c:8a:1f:19:98:f3:43:00:c5:bd:83:9e:
8d:1e:46:4a:52:1d:e2:0b:fa:1e:a7:51:42:1a:09:
86:5c:82:b2:a3:05:48:86:3f:1b:c4:39:f2:ed:d0:
f1:a4:b6:a5:dc:b3:47:00:01:d2:21:8a:23:6a:86:
83:b0:da:9c:3b:c9:29:87:29:f8:01:9e:c6:70:dc:
4f:0e:7e:ec:e0:77:1f:bf:94:11:34:8d:85:9a:84:
fd:df:d5:27:3e:30:c3:ad:6f:59:8a:f6:ab:54:56:
5d:b1:25:36:00:a7:33:63:aa:65:d0:85:a6:9d:a5:
3a:fb:73:49:ac:85:44:06:b7:92:33:b8:c6:da:ad:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:3B:8F:E2:3A:98:BE:C3:FD:4D:61:05:FF:16:EE:AB:DF:BB:59
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/zcE7j-I6mL7D_U1hBf8W7qvfu1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a6:6a:f0:aa:64:02:69:44:71:7e:7e:6a:ac:cb:a1:8a:83:
b0:dd:83:2f:69:e8:e1:74:25:4b:8b:e4:c5:89:80:bf:1c:eb:
a5:64:38:1f:f4:13:32:da:8b:db:e4:6a:00:95:b4:62:51:ae:
04:4a:d3:77:15:35:b4:69:d8:2b:01:6f:19:92:01:9e:5c:cf:
7f:3e:f0:99:9e:98:dc:27:e6:4e:44:b5:87:74:52:78:6c:23:
c5:d7:c3:6b:4c:c7:18:1b:bc:b8:fe:a7:46:46:ce:6e:4b:6e:
02:74:d4:9d:56:43:bd:1b:4b:6e:40:19:4b:55:08:ca:41:29:
22:a5:09:02:f4:52:69:0b:54:e1:e3:61:62:fe:74:cb:bb:bc:
8b:b3:c6:17:b6:d8:1b:6d:c2:67:e4:42:7f:ea:d9:32:1e:05:
3c:14:f2:c7:a6:98:cf:cf:1e:83:6e:00:9a:24:95:1b:d7:e6:
c0:e1:a0:c4:54:12:d7:4a:18:c3:01:9c:42:32:8d:02:06:7f:
53:9f:af:8e:06:6b:c2:d0:1f:2f:9e:f3:6a:fd:10:7e:3d:82:
f3:7d:cd:fd:23:eb:09:0e:bc:d6:16:f2:c9:1f:97:0f:7b:99:
e8:68:e2:d1:17:4b:90:eb:57:85:ad:56:f1:d5:ab:69:db:60:
d1:96:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:46 2025 by rpki-client