Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/XxCezrFG1z6LMQqnnusi4oVI2Rw.roa
File: XxCezrFG1z6LMQqnnusi4oVI2Rw.roa (raw, json)
Hash identifier: aQwsLLH/DYviqZaUdqHboOiXYrGgKiL+RqsYRjZPBhA=
Subject key identifier: 5F:10:9E:CE:B1:46:D7:3E:8B:31:0A:A7:9E:EB:22:E2:85:48:D9:1C
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0197AC90D65B38FC8DD0C3A2BBDB5AB7FEED
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/XxCezrFG1z6LMQqnnusi4oVI2Rw.roa
Signing time: Thu 26 Jun 2025 14:07:42 +0000
ROA not before: Thu 26 Jun 2025 14:07:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.212.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
5.10.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:90:d6:5b:38:fc:8d:d0:c3:a2:bb:db:5a:b7:fe:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 26 14:07:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f109eceb146d73e8b310aa79eeb22e28548d91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:78:36:91:bd:10:ef:a5:50:72:6c:97:21:
b6:56:cf:30:64:12:d6:58:03:5d:09:f5:14:23:66:
80:01:1a:b3:1b:08:72:af:99:8b:2d:ea:95:bb:6a:
eb:94:7a:bc:53:76:b7:03:d2:ab:99:ee:c8:e0:9d:
ba:e9:50:ea:b4:7f:61:e9:f5:02:53:6e:93:19:fa:
f0:4d:2b:29:6d:cb:8f:ac:8c:f2:e4:5a:d4:ea:db:
0b:fc:9d:2c:ec:f0:6a:c1:7d:b9:9a:2c:dd:b0:36:
34:a7:b4:82:ae:34:16:58:fc:a0:25:4c:7f:af:4c:
95:1f:b8:fc:d9:00:75:dd:21:64:9b:a1:13:4a:8b:
9e:95:4a:06:37:97:41:d0:f6:51:4d:a6:e8:9b:c6:
10:f3:c6:2c:ad:cf:4b:3d:63:75:53:24:89:e2:f9:
10:b1:52:bb:ea:b5:3e:e0:63:42:d4:58:03:67:66:
74:31:ac:c7:54:cf:61:70:48:65:ed:27:c0:48:e8:
fe:0b:2a:3c:09:7c:b7:10:03:58:e6:36:7f:9a:6c:
d8:0f:2e:73:66:1c:dd:87:3c:b2:f1:3c:cb:7d:76:
29:d3:a5:08:8a:07:18:b8:2c:d8:ab:b3:97:ac:9a:
61:5a:c2:31:81:77:c6:88:3f:7a:0d:77:d2:cb:5e:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:10:9E:CE:B1:46:D7:3E:8B:31:0A:A7:9E:EB:22:E2:85:48:D9:1C
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/XxCezrFG1z6LMQqnnusi4oVI2Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.212.0/24
5.10.222.0/23
Signature Algorithm: sha256WithRSAEncryption
23:fb:69:ba:7f:34:d6:30:03:b6:08:72:10:2b:71:a8:61:61:
05:cd:80:0b:36:cd:8f:f9:76:92:4f:35:7c:1f:24:67:a1:7f:
04:be:36:3d:24:3d:af:25:41:71:7c:62:02:33:16:0c:2b:25:
c9:80:26:ae:b4:e4:a8:02:3c:22:4f:30:78:b7:40:89:a4:ca:
12:fc:a1:17:16:1d:aa:ed:42:d3:40:2e:d1:39:6a:85:eb:e0:
c0:5c:8c:f3:7a:35:d4:47:77:22:f6:cc:6f:96:aa:76:21:3d:
5e:b1:f4:2a:01:96:7c:e2:99:fb:7b:40:cd:79:a3:7f:32:3b:
87:cf:84:d4:a2:75:a8:3a:bd:bc:ac:2a:c0:86:de:a7:2a:2c:
f4:1a:d7:e0:b8:19:d9:7b:39:98:8a:31:7e:aa:a6:f0:29:0c:
4d:b5:f1:4f:1d:d0:91:9e:ef:cf:68:05:b6:f7:0c:ec:96:87:
00:de:58:cb:a8:fe:fd:9a:c8:59:ad:3a:7f:a0:d8:d9:55:db:
9d:46:4d:47:f8:f1:23:5a:03:7e:99:61:73:f9:34:ea:b0:39:
ca:32:8d:f7:fd:8d:1a:19:fb:85:ba:5d:e0:84:3e:5f:ca:18:
75:f1:39:b3:06:39:e9:d1:1b:6f:c9:2a:97:da:dd:bd:83:7c:
34:e4:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:27:16 2025 by rpki-client