Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/t7IgiRSnSIni91UPFOm3TkXePWI.roa
File: t7IgiRSnSIni91UPFOm3TkXePWI.roa (raw, json)
Hash identifier: fmgGGNNw/0UC+wW86U/y4Q9Wb0VKGAAQai8Ke+ZBApY=
Subject key identifier: B7:B2:20:89:14:A7:48:89:E2:F7:55:0F:14:E9:B7:4E:45:DE:3D:62
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B54045BA4F7DEB345B7F13DA05E1ED
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/t7IgiRSnSIni91UPFOm3TkXePWI.roa
Signing time: Mon 14 Jul 2025 16:12:10 +0000
ROA not before: Mon 14 Jul 2025 16:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209181
IP address blocks: 5.252.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Jul 2025 15:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b5:40:45:ba:4f:7d:eb:34:5b:7f:13:da:05:e1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b2208914a74889e2f7550f14e9b74e45de3d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:68:df:f0:98:3d:4e:5d:92:d8:27:35:3a:
40:e4:0d:92:d0:0b:a8:8b:58:12:b6:c7:41:aa:31:
35:fb:35:62:87:a4:94:e0:5f:79:c0:40:e0:11:22:
62:db:55:e5:ba:e1:b6:a3:d9:22:24:49:d0:be:66:
a9:70:c5:0c:81:64:f3:07:ee:a0:f4:d8:63:05:bd:
0e:e7:a8:93:b9:72:6c:86:51:cb:c2:6f:82:ba:92:
90:67:40:c5:c6:29:41:64:95:0f:47:69:81:b5:d6:
b5:c1:62:51:1d:72:90:b7:b9:80:26:08:24:18:96:
4b:b4:bf:0d:da:f0:21:44:2b:21:ea:ed:fe:5b:21:
c2:e5:9d:2b:58:a8:8b:31:a6:ac:f2:94:91:03:e2:
30:56:ad:0e:1f:f7:03:43:3e:2a:bb:78:1f:b9:ad:
98:67:b2:1d:da:06:4c:72:00:37:92:bf:28:dd:42:
5b:f7:fb:70:ff:c5:03:fa:90:3b:7a:64:dc:ec:03:
3f:54:7d:1d:d0:f3:e6:88:21:33:9c:32:2e:73:31:
37:f4:50:c0:14:23:9f:f3:00:86:0c:40:00:62:18:
5e:f2:67:cd:f6:18:06:2f:f8:4d:6b:d0:3c:c1:5f:
a7:5d:21:be:88:be:2d:db:7b:09:d4:4a:bb:d0:68:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:20:89:14:A7:48:89:E2:F7:55:0F:14:E9:B7:4E:45:DE:3D:62
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/t7IgiRSnSIni91UPFOm3TkXePWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.117.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5f:9a:1e:ce:02:a1:4f:b6:25:ff:79:31:11:8a:66:b0:1c:
8a:94:6c:bb:82:a7:57:eb:e4:c5:f4:c0:c7:87:3d:9a:db:d3:
d7:83:73:0d:eb:ab:ca:f7:98:f3:1d:b4:a5:9f:29:e4:82:33:
59:2c:71:e0:c7:07:30:a6:c0:74:93:e3:f9:da:82:bb:00:2a:
0b:99:df:bc:79:e3:64:d7:05:8e:1e:a6:d8:73:88:25:5a:be:
2c:3e:11:1b:b5:2f:e3:95:05:f2:4e:91:8d:bb:80:99:c2:d0:
50:27:dc:81:58:ba:d6:e8:8d:bb:1d:b4:67:e8:fe:8b:3f:b7:
96:e4:a8:7b:c8:f0:13:d2:8c:dc:2b:c6:20:a0:00:d3:e9:db:
ae:9f:b2:8a:b8:45:85:99:19:61:a6:06:30:b9:ae:ca:8e:b0:
f7:73:54:64:4e:9e:10:d1:4f:01:b5:83:55:ef:65:ea:da:e4:
28:7a:f5:93:3e:57:7a:80:ad:0e:f6:94:07:28:fa:9b:9d:fc:
6d:7f:e1:25:de:4e:31:e7:7a:e9:94:a5:ee:af:44:16:5d:f5:
2c:38:d4:b4:da:68:ad:3a:30:46:f3:6a:0e:78:9e:94:b5:8c:
e7:5f:a2:22:17:87:ab:d3:75:37:48:f7:50:5f:04:6f:f2:2b:
dd:bf:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:22 2025 by rpki-client