Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/mL5Dz9AMr4D9EFwQwMJwVDgju0U.roa
File: mL5Dz9AMr4D9EFwQwMJwVDgju0U.roa (raw, json)
Hash identifier: b22ipUz5rtxfFjAu7m3XUw3bS/P/IEyysJWciE/sjq8=
Subject key identifier: 98:BE:43:CF:D0:0C:AF:80:FD:10:5C:10:C0:C2:70:54:38:23:BB:45
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0196C9242149B3D0B378DC3F57CF3CFEABCD
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/mL5Dz9AMr4D9EFwQwMJwVDgju0U.roa
Signing time: Tue 13 May 2025 10:15:10 +0000
ROA not before: Tue 13 May 2025 10:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57161
IP address blocks: 152.89.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 12:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:24:21:49:b3:d0:b3:78:dc:3f:57:cf:3c:fe:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: May 13 10:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98be43cfd00caf80fd105c10c0c270543823bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:35:24:d8:f5:aa:c4:5e:c9:15:06:83:2a:
a8:d6:b9:ff:98:66:0d:25:6b:7d:0a:b8:5d:9c:cf:
d7:44:82:43:03:e2:86:49:94:2c:c0:c0:7e:11:dd:
fd:73:93:9b:14:66:29:36:b3:8f:7a:77:64:a1:60:
0e:c8:fe:ce:ea:64:70:1c:09:74:98:27:c5:f0:7a:
2f:2b:c4:e6:5a:9e:2e:25:df:92:bb:89:8d:3c:cf:
fc:56:dd:bd:cf:fd:a5:79:76:21:ba:82:23:4a:79:
7e:8e:8e:95:e4:3a:14:41:55:3e:27:49:07:3f:d4:
47:99:42:c1:e1:a6:17:bb:5a:8d:9a:0a:86:71:e7:
d6:90:45:ea:a7:37:10:5f:de:9f:14:b0:65:c5:93:
a2:51:87:d6:4a:e6:36:eb:45:06:b3:e7:39:cd:ca:
a7:1e:c9:f2:66:e1:df:df:90:6b:13:85:e4:64:0d:
93:4b:a8:ed:97:0e:ac:6a:86:08:ba:66:3a:a5:15:
30:e5:ad:56:e0:0a:90:c3:c7:20:6f:b5:9f:df:00:
35:eb:d9:90:b9:c2:ce:fe:d9:23:4c:75:78:e8:ac:
05:3b:14:99:af:0b:fd:95:11:ea:c8:0f:a0:d4:95:
0c:f1:e5:5a:8a:81:f6:aa:a6:c5:ea:cc:d8:90:28:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BE:43:CF:D0:0C:AF:80:FD:10:5C:10:C0:C2:70:54:38:23:BB:45
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/mL5Dz9AMr4D9EFwQwMJwVDgju0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.30.0/23
Signature Algorithm: sha256WithRSAEncryption
33:4b:26:17:a9:a3:bf:7a:42:9f:bb:4c:b0:23:78:34:d8:6d:
bd:93:c4:33:62:6a:0d:21:c2:5a:7c:25:8c:39:03:d6:cd:02:
c9:99:6e:dc:d2:c1:90:93:d2:00:56:78:18:b5:26:c5:31:6c:
dc:a3:6b:22:bb:1e:fc:80:5e:a5:b9:52:24:30:d6:27:2a:cd:
24:f7:f9:25:3f:dc:57:53:96:8b:2f:e0:79:da:48:23:5d:de:
e6:35:c2:dc:d8:09:61:bd:f0:6f:3f:27:d5:b7:13:01:3e:93:
3d:a0:af:3e:49:b6:81:5b:2e:20:e3:8a:05:a6:cd:71:13:55:
0d:31:28:7b:0b:c8:99:d1:14:44:ea:dc:ea:8e:78:13:20:fe:
a1:f1:38:dd:7a:e3:31:4f:14:c8:88:4e:ac:4e:44:07:78:2e:
f8:b0:cd:88:04:7d:47:4a:49:cd:3f:eb:89:ac:21:99:fa:e4:
41:37:5d:76:66:e7:18:3f:8d:70:37:c9:e0:81:f1:61:6e:4c:
ad:12:79:d2:99:b4:f6:04:a2:93:de:5f:84:ea:90:70:1f:db:
4e:89:9b:0a:e6:f4:1e:ed:9d:f6:fb:39:aa:f0:c7:55:0f:39:
fc:00:9b:1b:67:69:08:18:14:cb:08:24:e5:77:65:4f:ab:42:
b5:35:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:51 2025 by rpki-client