Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/o_iBK1vEJVcyJEVuiDg23fCyVvQ.roa
File: o_iBK1vEJVcyJEVuiDg23fCyVvQ.roa (raw, json)
Hash identifier: h0LN8INcvRufIlk+Q9/Mc7n3gjvpW/fuJri0pWXVjok=
Subject key identifier: A3:F8:81:2B:5B:C4:25:57:32:24:45:6E:88:38:36:DD:F0:B2:56:F4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282422764BD0574212DF369F4593DC88
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/o_iBK1vEJVcyJEVuiDg23fCyVvQ.roa
Signing time: Thu 02 Jan 2025 17:50:44 +0000
ROA not before: Thu 02 Jan 2025 17:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31420
IP address blocks: 5.104.184.0/21 maxlen: 24
176.241.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:22:76:4b:d0:57:42:12:df:36:9f:45:93:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3f8812b5bc425573224456e883836ddf0b256f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:b9:da:00:66:c8:c6:89:86:c6:23:90:c5:
ae:26:06:05:e7:69:55:d5:3a:50:26:2f:f3:4c:87:
73:1c:74:46:d6:ca:e8:58:0c:3d:0b:be:ed:f5:dc:
26:9f:93:ee:0c:86:a5:c5:93:45:14:c2:a7:f5:1e:
8a:c7:81:29:f6:b2:63:fb:92:41:6d:74:35:bc:a5:
4b:e3:5e:34:c7:ab:15:5c:1b:a8:63:56:a3:7b:09:
2f:94:a5:da:32:0b:3a:14:c5:db:f8:60:00:ab:fd:
97:25:48:c5:90:65:13:d5:23:3f:c9:83:fe:7e:ba:
0b:79:8a:a5:71:7b:f9:ad:01:40:95:f0:13:3d:0c:
eb:a2:1e:53:3d:4b:eb:e2:51:be:78:bd:d2:72:4e:
6a:45:d1:16:22:2b:6b:5a:a0:ae:3d:ea:f6:6a:c9:
42:30:fa:3d:f8:39:2e:5e:75:11:17:0f:2f:24:4e:
56:f9:05:f6:a1:02:13:d5:7a:90:be:ea:e6:08:32:
2a:d3:9e:84:2c:b3:ee:47:4b:c1:b1:d5:59:d4:d9:
e9:66:bc:62:67:d2:5d:f8:15:9a:89:f4:6e:76:f7:
82:69:2a:f1:c5:78:d1:f8:34:86:f4:fb:f5:81:1f:
62:08:09:c5:a3:7e:5e:15:bf:a1:2c:cb:7c:c3:90:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:81:2B:5B:C4:25:57:32:24:45:6E:88:38:36:DD:F0:B2:56:F4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/o_iBK1vEJVcyJEVuiDg23fCyVvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.184.0/21
176.241.176.0/21
Signature Algorithm: sha256WithRSAEncryption
67:ce:21:4a:04:bb:3d:a1:87:3d:6a:6a:cb:bf:35:3c:09:cd:
12:35:34:b6:04:d4:79:d6:f3:15:a2:4a:26:9b:53:86:57:b2:
04:28:5f:5a:69:d8:43:eb:a8:d2:d7:8a:d5:e8:12:45:16:17:
73:a5:12:dd:77:c4:2f:b7:6e:92:b1:f6:59:bc:31:4a:ab:5a:
87:db:74:c9:75:2d:8f:51:42:bf:c0:89:b9:5e:bc:c1:23:ef:
22:0d:6f:f7:88:9e:ef:c7:dd:2b:38:dc:d5:ed:d8:cb:32:1d:
22:4b:07:7f:e2:85:f6:86:00:c9:f6:f7:d8:a7:6d:65:ac:3f:
f5:82:a1:47:8d:04:32:ba:64:3b:a8:b2:50:26:7b:d6:54:f4:
17:ff:a0:95:dd:8b:5f:23:f2:03:e5:16:ea:22:02:23:fd:d3:
d6:e2:65:7d:12:d8:fc:c6:aa:6a:82:6d:96:f9:e8:f3:6b:87:
32:66:6a:9b:71:1e:23:28:37:a3:fe:27:2f:3b:d7:86:a7:06:
0f:7a:0b:73:52:7b:97:a8:2f:e9:e4:40:35:ea:b0:9e:88:ed:
80:0e:56:c2:54:c8:92:81:8a:68:51:15:f0:6c:15:50:f0:72:
41:5a:68:a5:1e:44:90:9b:f7:56:f0:38:bf:fc:36:67:08:1e:
80:e3:c8:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJCJ2S9BXQhLfNp9Fk9yIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTAyMTc1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2Y4ODEyYjViYzQyNTU3MzIyNDQ1NmU4ODM4MzZkZGYwYjI1NmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiq52gBmyMaJhsYjkMWuJgYF52lV
1TpQJi/zTIdzHHRG1sroWAw9C77t9dwmn5PuDIalxZNFFMKn9R6Kx4Ep9rJj+5JB
bXQ1vKVL4140x6sVXBuoY1ajewkvlKXaMgs6FMXb+GAAq/2XJUjFkGUT1SM/yYP+
froLeYqlcXv5rQFAlfATPQzroh5TPUvr4lG+eL3Sck5qRdEWIitrWqCuPer2aslC
MPo9+DkuXnURFw8vJE5W+QX2oQIT1XqQvurmCDIq056ELLPuR0vBsdVZ1NnpZrxi
Z9Jd+BWaifRudveCaSrxxXjR+DSG9Pv1gR9iCAnFo35eFb+hLMt8w5AaGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKP4gStbxCVXMiRFbog4Nt3wslb0MB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvb19pQksxdkVKVmN5SkVWdWlEZzIzZkN5VnZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBWi4AwQD
sPGwMA0GCSqGSIb3DQEBCwUAA4IBAQBnziFKBLs9oYc9amrLvzU8Cc0SNTS2BNR5
1vMVokomm1OGV7IEKF9aadhD66jS14rV6BJFFhdzpRLdd8Qvt26SsfZZvDFKq1qH
23TJdS2PUUK/wIm5XrzBI+8iDW/3iJ7vx90rONzV7djLMh0iSwd/4oX2hgDJ9vfY
p21lrD/1gqFHjQQyumQ7qLJQJnvWVPQX/6CV3YtfI/ID5RbqIgIj/dPW4mV9Etj8
xqpqgm2W+ejza4cyZmqbcR4jKDej/icvO9eGpwYPegtzUnuXqC/p5EA16rCeiO2A
DlbCVMiSgYpoURXwbBVQ8HJBWmilHkSQm/dW8Di//DZnCB6A48j7
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:19:21 2025 by rpki-client