Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/thE7BzcU6R2chn1gxn2WGsM-cvs.roa
File: thE7BzcU6R2chn1gxn2WGsM-cvs.roa (raw, json)
Hash identifier: sR+6NZBQoQWYMDH7HaqrDIHRW/t/dIIp0/HCg+Bfq5k=
Subject key identifier: B6:11:3B:07:37:14:E9:1D:9C:86:7D:60:C6:7D:96:1A:C3:3E:72:FB
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 01929ED2EFA3A136E382851C084234CC0A12
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/thE7BzcU6R2chn1gxn2WGsM-cvs.roa
Signing time: Fri 18 Oct 2024 08:51:16 +0000
ROA not before: Fri 18 Oct 2024 08:51:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39655
IP address blocks: 5.61.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 13:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:d2:ef:a3:a1:36:e3:82:85:1c:08:42:34:cc:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Oct 18 08:51:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6113b073714e91d9c867d60c67d961ac33e72fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a6:c5:8d:96:bf:5d:56:92:02:7a:c2:11:1e:
e0:68:85:81:7a:b8:a0:5b:df:56:46:3a:44:57:bc:
16:08:11:49:f5:08:7e:b5:d1:82:12:9a:56:bd:3f:
66:c8:e6:8a:6a:39:4e:b3:ae:83:9c:53:a3:75:9a:
d8:92:ff:57:48:1e:03:3e:88:8d:ae:4a:76:b5:f0:
77:63:28:0e:4e:b5:0c:16:79:8f:8a:cb:c5:df:fc:
3f:0d:51:3e:86:e0:98:1e:bc:d3:2b:5d:42:f8:95:
5c:d6:05:32:2c:86:5c:4f:7d:f0:5a:81:b2:2c:9f:
70:f4:29:ff:19:6b:29:e2:40:ca:92:06:b1:0d:ce:
2c:0d:4f:1a:4e:d4:fb:04:05:3f:23:ae:d1:48:e1:
be:a5:85:eb:33:9b:9a:b2:17:30:5a:e9:91:50:f2:
ca:c8:b9:2e:f7:6b:b6:9b:5e:98:ea:89:55:d5:4a:
ab:c8:c4:a6:55:94:23:68:59:5c:41:da:2c:9d:1e:
33:0d:9a:76:ae:ac:45:36:56:60:3c:df:c0:f6:5c:
12:82:6f:b4:c3:b2:2e:a6:84:aa:c3:9f:ae:06:9a:
e0:56:4d:41:d2:1d:0b:99:08:9e:18:4e:a6:da:83:
48:3c:b3:c4:5f:c6:1c:cb:ed:00:18:7c:51:b1:e9:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:11:3B:07:37:14:E9:1D:9C:86:7D:60:C6:7D:96:1A:C3:3E:72:FB
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/thE7BzcU6R2chn1gxn2WGsM-cvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:0f:77:c7:9d:f4:4e:9c:bd:72:96:0a:85:c8:27:03:c8:73:
19:1d:f5:d2:67:84:b3:99:58:b6:d7:d8:d7:90:28:dc:ba:76:
94:4b:be:f3:80:4b:00:3a:a5:a6:01:a6:ba:5c:0a:88:a6:0d:
93:1b:ab:2a:34:17:98:eb:07:c7:e5:88:1a:15:de:d0:f7:29:
38:57:6f:fb:21:b3:a2:14:5e:e5:c2:95:d2:51:b7:1c:ab:03:
6b:55:41:f0:6b:b5:c3:b5:cb:8d:95:c0:e3:bc:84:f3:1c:ff:
e6:2c:6f:b0:14:e3:37:64:57:ab:de:36:b7:8a:c7:8b:38:7a:
5a:47:75:e4:56:c4:94:eb:83:07:f0:b1:d7:f3:9d:e1:be:97:
6b:69:90:5a:4a:4b:59:d6:0c:78:48:97:9d:e5:00:dc:71:f0:
bf:a3:92:6a:8f:7d:15:7e:c7:66:ee:4e:18:28:f6:04:86:22:
4a:48:0e:1f:d5:b4:3b:22:71:f7:6e:4a:5e:dc:8e:fe:ce:d3:
29:28:96:47:50:4c:70:6f:c8:9d:b4:89:de:f3:e0:48:16:a4:
9e:dc:79:00:bd:1c:e6:9b:25:17:1d:9e:bd:d3:d1:ea:5e:c8:
d4:02:d0:28:7f:c8:87:81:e8:fa:23:48:c7:03:84:70:e9:88:
04:dc:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:15 2025 by rpki-client