Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/kIYK9tanotKL0sOsw8MTy2TZZqM.roa
File: kIYK9tanotKL0sOsw8MTy2TZZqM.roa (raw, json)
Hash identifier: 1W1ey5BYNXNAoZnFMbpllEM611AeMxH8edxd3LWSoAA=
Subject key identifier: 90:86:0A:F6:D6:A7:A2:D2:8B:D2:C3:AC:C3:C3:13:CB:64:D9:66:A3
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018D25CE45654CC1845A8A8D364955047D0D
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/kIYK9tanotKL0sOsw8MTy2TZZqM.roa
Signing time: Sat 20 Jan 2024 07:38:11 +0000
ROA not before: Sat 20 Jan 2024 07:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211020
IP address blocks: 5.201.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 14:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:ce:45:65:4c:c1:84:5a:8a:8d:36:49:55:04:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 20 07:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90860af6d6a7a2d28bd2c3acc3c313cb64d966a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:0e:96:37:b6:27:68:c5:de:40:42:c6:57:
c7:df:5e:36:cb:5b:23:14:e5:e5:67:99:b0:6c:cc:
b9:ba:dd:de:a7:e3:8e:ad:8a:24:a5:67:42:99:49:
5b:80:14:e6:3c:3f:5e:0a:6e:9f:21:6e:eb:9c:d6:
43:27:5d:2b:fe:74:1a:20:af:b6:05:05:15:6c:57:
64:57:b7:d4:2e:89:a6:54:f3:88:89:e5:b4:e3:b7:
df:c6:10:a0:1f:af:5e:f6:04:83:5f:17:d3:73:48:
11:52:6a:13:71:c6:0f:d8:9d:86:8a:12:c2:e2:60:
b6:73:04:08:84:b1:a6:ed:08:f7:46:da:87:25:3e:
d8:dd:74:e6:34:66:f2:56:41:60:09:bf:7a:21:9e:
34:dc:47:a4:83:e8:f9:41:27:6c:e7:75:27:21:32:
4c:e4:60:63:0a:7a:d1:99:d3:92:c3:91:fb:ca:95:
14:ff:64:18:47:0d:84:18:04:36:03:4b:b6:42:d8:
a2:01:16:70:c0:45:e3:13:53:d4:b4:b4:5d:1f:9d:
e2:01:25:de:01:60:b4:35:47:a3:42:1f:56:cd:b2:
63:dc:bf:fc:d7:d7:3e:b5:12:09:dd:d1:7b:5a:42:
f7:00:64:79:c4:65:74:62:1f:8d:01:4e:22:b0:57:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:0A:F6:D6:A7:A2:D2:8B:D2:C3:AC:C3:C3:13:CB:64:D9:66:A3
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/kIYK9tanotKL0sOsw8MTy2TZZqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.162.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d8:35:51:fd:44:66:cd:2f:b7:35:67:c3:ad:5b:8b:43:d4:
b8:bc:91:a4:2f:3a:a0:b2:38:6b:c2:1e:6a:0d:8d:34:6a:57:
3f:ef:59:58:22:91:17:4c:65:14:37:ca:67:f3:e2:37:0e:4a:
5f:ce:95:87:9e:e1:0c:57:45:a6:6d:78:62:89:f1:a4:1a:89:
69:8f:a1:ff:74:37:dc:ef:c8:05:af:bd:af:35:a7:ea:48:cc:
6d:30:04:7a:d3:2a:0b:09:87:aa:9f:e7:73:42:b8:cf:b2:57:
5b:6f:25:42:b4:ef:b3:f6:1b:22:73:a7:ed:bd:f3:f9:61:78:
63:81:c0:50:bd:a1:1a:69:04:23:5e:03:ed:5a:8c:96:cd:95:
8e:31:47:93:5b:b6:8e:9a:5b:45:42:94:90:fa:6a:13:67:fe:
55:55:fa:a7:95:48:e3:d1:d8:8e:7a:f2:c7:f3:68:4d:83:82:
6e:5d:74:23:8b:76:68:d0:e6:fe:67:fe:42:f6:35:ef:e8:04:
1e:ef:41:ff:8a:4c:ec:ee:5a:20:07:f4:98:dd:21:9f:31:34:
9d:b7:d9:09:69:ce:2d:16:c8:97:34:85:b3:94:95:23:66:1c:
99:10:8a:79:b2:07:c4:ce:64:79:87:7c:09:9a:44:b2:20:bf:
02:25:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:19:12 2025 by rpki-client