Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/wGT5DtyogPLrsCAdhqJO5CvW_Mg.roa
File: wGT5DtyogPLrsCAdhqJO5CvW_Mg.roa (raw, json)
Hash identifier: XcL39+8XrxL5wz8tZwd5teXWRwkmhJYjWRyCsKtLNs0=
Subject key identifier: C0:64:F9:0E:DC:A8:80:F2:EB:B0:20:1D:86:A2:4E:E4:2B:D6:FC:C8
Certificate issuer: /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial: 0192BF0F802255AFC7D5BA648680FF851C7B
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/wGT5DtyogPLrsCAdhqJO5CvW_Mg.roa
Signing time: Thu 24 Oct 2024 15:05:16 +0000
ROA not before: Thu 24 Oct 2024 15:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 5.182.157.0/24 maxlen: 24
2a0b:95c0:8000::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bf:0f:80:22:55:af:c7:d5:ba:64:86:80:ff:85:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Validity
Not Before: Oct 24 15:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c064f90edca880f2ebb0201d86a24ee42bd6fcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:5d:79:5c:6a:2a:fe:18:2e:3c:f0:d9:ee:
c5:32:3d:4f:24:f5:cd:67:6a:9f:47:9e:4a:14:e6:
14:71:10:00:dd:9f:bb:8f:4d:f7:4d:ea:8e:82:69:
ae:92:09:ea:3d:a8:5d:bf:59:40:c5:2d:75:f3:ab:
61:c9:9b:d6:93:86:77:b9:ff:ec:f3:d1:f6:9c:d1:
98:4b:5e:c2:fb:bf:6d:c6:5b:d9:b9:29:ce:42:52:
65:d5:9b:42:63:15:10:28:dc:90:14:4a:46:e7:37:
03:02:66:ae:82:f4:9c:dd:ad:a9:ea:e4:6c:f7:92:
2f:d1:73:16:53:f1:8a:2b:76:2b:37:a4:2b:84:92:
52:a1:ff:bd:c8:3a:22:ab:51:0d:71:81:61:9e:48:
9f:2f:69:88:bb:34:42:7b:7e:88:0a:73:a8:ad:7d:
65:82:2f:6d:9b:1b:d2:c7:ba:e9:89:cf:57:0d:1b:
22:c1:f0:87:42:3d:44:ec:53:04:c4:c7:44:d7:d5:
8a:fb:14:cf:ad:2d:ef:1c:69:db:bc:58:f2:8e:80:
93:bc:3d:cf:41:4d:83:ac:23:3b:65:06:4f:24:7e:
58:fc:22:58:98:0d:d4:ce:cf:c6:3f:b8:44:4d:49:
d8:17:58:13:43:7e:36:50:20:2c:7d:e2:44:6f:1d:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:F9:0E:DC:A8:80:F2:EB:B0:20:1D:86:A2:4E:E4:2B:D6:FC:C8
X509v3 Authority Key Identifier:
keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/wGT5DtyogPLrsCAdhqJO5CvW_Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.157.0/24
IPv6:
2a0b:95c0:8000::/48
Signature Algorithm: sha256WithRSAEncryption
48:7d:b9:9e:72:30:d4:f6:48:04:fa:0b:fc:a6:19:a5:a5:f2:
c3:19:8b:2c:76:eb:34:67:0b:f3:10:40:0e:76:61:81:0a:83:
2d:8d:06:54:1a:5b:90:66:69:c8:0e:9b:f2:13:2b:d2:25:c2:
b0:7b:78:ee:d8:6d:cd:cd:e9:fc:3f:98:95:be:71:0a:dc:90:
f8:20:5e:d8:aa:06:cd:37:67:6a:88:67:cd:48:a4:4e:40:f4:
07:99:7b:e9:78:db:44:eb:8d:5b:3f:b2:e7:3d:b4:f7:03:6a:
f0:6a:4e:4c:20:66:45:ed:de:05:00:7e:bf:e5:aa:78:25:72:
13:f6:85:8f:3f:e7:75:2c:f3:ca:58:49:c9:00:ac:5b:dd:f2:
99:a7:94:fe:b6:cb:e4:73:0d:8f:ce:8e:e7:52:34:1f:cf:4b:
88:d0:3c:40:65:b0:0f:cd:82:b7:af:0a:43:d5:a7:36:16:e3:
b4:a6:0e:a2:66:ee:f7:2d:b4:e8:7c:4e:1e:6f:98:fc:e9:02:
01:be:5a:1e:02:c7:4b:7b:4a:ca:9e:89:83:1d:74:25:e0:42:
bb:1b:21:25:5b:5c:42:38:14:39:a7:0f:f4:19:63:7a:46:9e:
50:c4:c3:f6:cf:70:eb:38:82:c5:ff:d9:60:46:77:4e:81:9a:
af:1f:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:30:49 2025 by rpki-client