Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4b_oGkbsILyAQ-5ceE7FoXmQu7o.roa
File: 4b_oGkbsILyAQ-5ceE7FoXmQu7o.roa (raw, json)
Hash identifier: mjPcm+/TLrlqgqti9vRteVR3v52Tn6mg4jqLWlt5AxA=
Subject key identifier: E1:BF:E8:1A:46:EC:20:BC:80:43:EE:5C:78:4E:C5:A1:79:90:BB:BA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01960CDECC25680BFC3BA927A11666153C45
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4b_oGkbsILyAQ-5ceE7FoXmQu7o.roa
Signing time: Sun 06 Apr 2025 20:50:49 +0000
ROA not before: Sun 06 Apr 2025 20:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 09:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:de:cc:25:68:0b:fc:3b:a9:27:a1:16:66:15:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 6 20:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1bfe81a46ec20bc8043ee5c784ec5a17990bbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:cf:20:92:7c:06:89:0a:f6:4b:9f:7a:4a:
90:a6:d0:8f:b7:13:ff:f5:51:f4:ef:d7:3e:64:57:
f1:f0:30:4d:a4:39:34:54:33:7e:cd:37:94:45:f0:
9d:8f:b0:92:c1:fd:ff:18:fc:ac:d3:c3:59:8a:6f:
47:c5:b6:b7:b4:af:c7:9e:5f:ad:4c:a8:b8:20:c1:
af:34:e8:ea:d7:9f:1b:ad:d9:f7:9e:24:64:97:e2:
97:df:fe:e2:6b:4c:20:f1:e2:1a:32:f2:66:0f:82:
a3:56:37:29:8f:25:89:55:b6:43:ef:fe:01:0a:e7:
5c:d1:8d:8f:d9:6d:5d:1b:4e:57:40:8f:f1:6f:9c:
93:3a:96:f5:56:2f:8d:36:2a:0c:f9:1f:81:f0:81:
c4:20:47:e6:3a:27:dd:88:d1:9e:f6:1e:23:5d:10:
b7:f6:57:a9:62:a4:67:a2:09:63:59:74:01:ee:29:
2c:d8:a7:a6:30:8b:b4:5c:2f:47:9a:f7:16:dd:81:
c2:90:cf:27:8d:36:a2:b6:53:ab:89:8b:a0:40:8f:
6d:3a:0c:f8:23:c6:49:e1:d4:f5:26:e4:38:14:19:
95:65:49:65:6e:34:31:09:c6:f6:34:be:b5:e8:05:
38:17:62:11:a8:84:f6:0f:e3:22:cd:b2:67:aa:99:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:E8:1A:46:EC:20:BC:80:43:EE:5C:78:4E:C5:A1:79:90:BB:BA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4b_oGkbsILyAQ-5ceE7FoXmQu7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
be:bf:c9:01:7b:b2:f3:99:44:17:81:e4:2c:93:14:53:a5:df:
ef:93:d4:c2:97:90:a0:b8:e7:34:5e:0f:58:f0:4c:7d:16:12:
37:19:d1:c4:74:92:8a:5a:6e:b0:a4:57:e6:2d:2f:c9:49:8b:
fd:f0:9a:a1:1e:90:03:ce:71:fc:c5:97:19:81:ae:8c:37:b3:
f5:9d:fb:44:dc:4e:61:aa:fc:b0:49:bf:4c:a7:84:92:e1:b6:
be:a2:3b:73:14:77:50:75:23:28:56:b2:00:98:4b:1c:30:ad:
4e:fb:73:6b:58:a5:7e:ec:9e:a6:18:19:20:b5:cb:11:c6:e4:
0a:7d:0b:1d:94:ba:73:7d:f2:a3:23:96:b1:89:ae:5d:75:35:
55:99:8a:81:fe:4f:63:6e:d9:f2:18:f7:22:c2:8a:bf:c0:6e:
bf:c6:b0:77:75:aa:93:55:fb:06:df:60:28:47:c1:e6:72:1f:
2f:76:26:57:8f:a0:dd:4b:fb:55:22:1e:df:55:dc:4e:53:4a:
fe:26:e4:1d:80:17:54:8f:73:ed:4f:35:be:5b:c9:19:67:b6:
18:f3:2f:86:f9:2d:51:89:14:ea:f8:08:77:45:fe:e8:1d:36:
d8:14:e6:b1:a1:64:79:ff:b5:7b:cd:6b:35:d6:c3:ec:c8:81:
b1:74:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:45:23 2025 by rpki-client