Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/RUTA5tml_ZImgyaxgI9xeHb3O2w.roa
File: RUTA5tml_ZImgyaxgI9xeHb3O2w.roa (raw, json)
Hash identifier: pzYWHKPKROGKVPPFpPcek5nt2+dCoPC7D9SGEnknJrk=
Subject key identifier: 45:44:C0:E6:D9:A5:FD:92:26:83:26:B1:80:8F:71:78:76:F7:3B:6C
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 0195657B14CCB79CD223A386210F670D4E5C
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/RUTA5tml_ZImgyaxgI9xeHb3O2w.roa
Signing time: Wed 05 Mar 2025 08:45:19 +0000
ROA not before: Wed 05 Mar 2025 08:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 78.153.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 13:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:7b:14:cc:b7:9c:d2:23:a3:86:21:0f:67:0d:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Mar 5 08:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4544c0e6d9a5fd92268326b1808f717876f73b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:3f:c9:cd:d0:43:28:48:6a:1b:08:ea:e6:
4f:0c:a3:45:d1:07:1f:e1:16:ba:2b:99:fd:b3:08:
13:62:00:ce:4c:26:fc:c1:b2:2b:13:60:1f:06:ec:
66:3e:a1:95:b9:f9:0c:e5:e6:0e:1a:83:a1:3e:69:
a9:a8:4a:0c:ba:72:24:f8:fa:8e:1e:d2:12:f5:36:
a4:75:31:98:53:02:3b:fb:e4:f5:e8:f1:ad:2d:68:
75:08:73:24:36:dd:e4:26:de:42:8f:35:52:70:cd:
9a:3d:65:8f:4f:a2:74:cf:cb:eb:88:95:9c:2e:00:
16:b0:cb:cb:6c:5d:16:ac:7a:c4:1a:8e:83:a7:3e:
ac:48:75:ec:f0:78:b4:20:76:c9:d0:d9:83:20:1b:
a4:71:2c:20:e9:7e:1d:79:73:9a:13:43:0c:11:f7:
f6:fa:98:fe:d7:63:92:eb:4c:2c:c9:90:7c:14:39:
3c:70:8a:1a:4b:13:0a:2d:dd:ac:54:78:b9:8f:b4:
f0:80:9b:68:cf:87:c8:91:27:73:e8:e0:e4:9e:7e:
10:53:4c:8d:44:e7:2f:d4:65:56:a2:b2:ed:6f:c9:
c5:e5:1d:6a:08:07:60:f4:03:cc:35:ef:54:f5:70:
b1:e9:ed:38:d6:b7:4f:78:66:ef:53:e4:1d:17:93:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:C0:E6:D9:A5:FD:92:26:83:26:B1:80:8F:71:78:76:F7:3B:6C
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/RUTA5tml_ZImgyaxgI9xeHb3O2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:db:61:48:2c:43:f0:25:61:38:cd:75:3c:05:04:20:07:e4:
b5:8e:9e:59:5e:b2:0d:68:a8:31:be:6b:de:5e:e9:51:fc:34:
5c:08:99:67:68:d3:57:d9:bc:f3:a3:63:ed:40:85:2a:97:2d:
97:2e:8c:9c:2a:d6:14:c8:fd:66:ec:28:31:65:dc:f1:70:52:
94:9c:4d:7e:d5:a3:a9:1f:2c:75:9d:a8:3f:72:70:b8:04:dc:
55:f4:bf:75:84:24:41:15:d4:e3:e8:24:4a:cd:a3:33:69:02:
7b:89:cf:d1:82:d5:90:fd:28:fc:f4:f6:68:e7:48:d3:d3:7c:
38:a0:b5:c0:05:a6:dc:b0:68:25:b8:47:45:c1:15:cc:3a:e1:
f3:f1:cf:2e:40:c6:c3:79:ea:f0:19:62:71:e0:e0:0a:31:bd:
69:60:14:f9:cf:82:f4:07:97:03:fa:20:d1:20:11:19:b6:84:
47:2a:4c:ca:16:01:c6:3c:d9:70:00:d0:91:f7:ab:05:90:77:
08:9c:43:cf:0a:c6:a7:3a:83:1a:35:51:88:ca:4e:b8:ff:a1:
cc:ec:1a:07:ca:eb:d4:55:4e:83:60:97:a2:3b:b2:f0:35:66:
08:4c:1a:60:9c:8c:eb:8c:b7:19:03:15:fa:38:28:f5:a6:19:
e1:3b:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:49:57 2025 by rpki-client