Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/n_mnRP2iGTi7Yk9pGpwPyt4jAzc.roa
File: n_mnRP2iGTi7Yk9pGpwPyt4jAzc.roa (raw, json)
Hash identifier: cCplINj7fP6JYj8YUoLUNZy9OljtpDeYYIKzSoN6Snk=
Subject key identifier: 9F:F9:A7:44:FD:A2:19:38:BB:62:4F:69:1A:9C:0F:CA:DE:23:03:37
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CC795207234A667B899BC2AA8EC90F7C8
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/n_mnRP2iGTi7Yk9pGpwPyt4jAzc.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197555
IP address blocks: 5.180.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:20:72:34:a6:67:b8:99:bc:2a:a8:ec:90:f7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff9a744fda21938bb624f691a9c0fcade230337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:69:bb:f1:bf:56:c5:af:d2:48:6b:74:5f:db:
9c:c4:0f:b6:65:af:77:cc:99:75:e5:6f:56:41:ec:
e2:6a:e9:e9:aa:25:0e:c3:76:6a:de:e5:1d:15:af:
ab:7d:27:38:f4:1d:33:0e:e9:80:56:72:5e:b1:7b:
35:d9:fa:58:43:66:8f:5a:4a:d3:90:13:9b:65:4c:
c5:01:f4:6a:17:a0:21:34:87:26:13:85:6d:f4:90:
20:fc:55:cb:97:16:9e:18:76:b1:b9:cc:8a:97:95:
ab:b8:e6:2c:44:ba:70:8e:2e:da:78:00:ff:c8:fd:
4d:cb:45:3a:2d:38:7a:82:f1:b9:8d:f9:59:ed:47:
fe:2b:98:5f:f5:b0:c8:b2:87:5d:74:cf:c6:32:0d:
8b:21:43:7b:4d:94:88:ff:da:97:8e:b4:0b:f8:cb:
06:be:d4:2e:46:ee:6c:2b:c9:e3:9e:9f:ef:61:42:
5e:f5:ea:25:64:fd:65:9f:45:d9:d1:a8:e1:a9:40:
62:f1:5c:b3:b4:52:78:d7:49:93:45:08:fc:44:e3:
88:07:89:72:62:0f:8b:a9:5b:68:a0:eb:47:01:87:
34:65:dd:a8:3a:c8:59:40:90:4d:4e:e4:a8:5f:7d:
77:20:45:14:72:43:db:43:23:27:de:43:42:53:b8:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:A7:44:FD:A2:19:38:BB:62:4F:69:1A:9C:0F:CA:DE:23:03:37
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/n_mnRP2iGTi7Yk9pGpwPyt4jAzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:69:7c:34:d0:71:a0:a6:19:f5:81:fc:4e:ae:4d:b0:ac:e3:
4f:c0:60:26:bc:5f:87:44:8c:de:f4:0e:68:47:00:d5:01:f8:
01:01:36:08:1c:27:22:0f:60:be:23:6b:7a:ae:c4:36:cd:20:
6d:be:99:40:68:fa:65:ac:8a:f7:a2:02:2a:ac:bc:7a:46:5a:
fb:8d:f1:f1:4c:6e:2c:f6:86:52:4f:f0:c6:32:ae:96:f4:75:
40:cc:d1:b6:d0:2d:a6:3e:05:8c:bb:f3:8f:c0:80:5d:71:5c:
1d:dd:ec:5e:39:66:4a:0b:47:e0:99:53:d7:3f:6b:fa:69:df:
9f:11:e2:89:20:c8:e6:72:04:f7:b7:12:8f:a8:82:37:66:88:
f6:83:42:f3:7d:d3:6b:65:5c:6d:47:0a:27:cf:15:69:b5:e1:
c6:2f:1f:ee:d3:2b:d3:1c:04:6a:d1:02:06:c5:59:bb:7e:73:
b7:aa:a5:1c:d7:44:18:f6:b1:1a:1a:38:4b:99:ce:c3:7f:7a:
5e:60:20:a6:10:a8:14:7a:63:dd:36:2a:fe:95:1a:1e:a7:07:
17:10:ac:4c:55:4c:3e:d7:5f:36:ae:58:8f:15:b7:01:4c:6a:
7b:ff:fa:88:fe:ec:11:f2:1e:ae:03:50:68:36:da:5a:15:02:
55:39:ef:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlSByNKZnuJm8KqjskPfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMTAyMDAzMTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmY5YTc0NGZkYTIxOTM4YmI2MjRmNjkxYTljMGZjYWRlMjMwMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2m78b9Wxa/SSGt0X9ucxA+2Za93
zJl15W9WQeziaunpqiUOw3Zq3uUdFa+rfSc49B0zDumAVnJesXs12fpYQ2aPWkrT
kBObZUzFAfRqF6AhNIcmE4Vt9JAg/FXLlxaeGHaxucyKl5WruOYsRLpwji7aeAD/
yP1Ny0U6LTh6gvG5jflZ7Uf+K5hf9bDIsodddM/GMg2LIUN7TZSI/9qXjrQL+MsG
vtQuRu5sK8njnp/vYUJe9eolZP1ln0XZ0ajhqUBi8VyztFJ410mTRQj8ROOIB4ly
Yg+LqVtooOtHAYc0Zd2oOshZQJBNTuSoX313IEUUckPbQyMn3kNCU7hhowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ/5p0T9ohk4u2JPaRqcD8reIwM3MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvbl9tblJQMmlHVGk3WWs5cEdwd1B5dDRqQXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbRpMA0G
CSqGSIb3DQEBCwUAA4IBAQANaXw00HGgphn1gfxOrk2wrONPwGAmvF+HRIze9A5o
RwDVAfgBATYIHCciD2C+I2t6rsQ2zSBtvplAaPplrIr3ogIqrLx6Rlr7jfHxTG4s
9oZST/DGMq6W9HVAzNG20C2mPgWMu/OPwIBdcVwd3exeOWZKC0fgmVPXP2v6ad+f
EeKJIMjmcgT3txKPqII3Zoj2g0LzfdNrZVxtRwonzxVpteHGLx/u0yvTHARq0QIG
xVm7fnO3qqUc10QY9rEaGjhLmc7Df3peYCCmEKgUemPdNir+lRoepwcXEKxMVUw+
1182rliPFbcBTGp7//qI/uwR8h6uA1BoNtpaFQJVOe9b
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:48 2025 by rpki-client