Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v59AGCa0VvEB8QcsCcAIbNl9AFM.roa
File: v59AGCa0VvEB8QcsCcAIbNl9AFM.roa (raw, json)
Hash identifier: RXeUkKAYMZFe/CL9v7f8RSB7zAO36/sQEYe0Nw6/4OY=
Subject key identifier: BF:9F:40:18:26:B4:56:F1:01:F1:07:2C:09:C0:08:6C:D9:7D:00:53
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0197D1B11CB5ED1FD104B185E328F0E55F67
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v59AGCa0VvEB8QcsCcAIbNl9AFM.roa
Signing time: Thu 03 Jul 2025 19:08:54 +0000
ROA not before: Thu 03 Jul 2025 19:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.212.0/24 maxlen: 24
5.10.213.0/24 maxlen: 24
5.10.218.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Jul 2025 19:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:b1:1c:b5:ed:1f:d1:04:b1:85:e3:28:f0:e5:5f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jul 3 19:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf9f401826b456f101f1072c09c0086cd97d0053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:a1:12:44:df:55:63:67:4b:e9:8a:ff:8d:
26:0f:b5:06:16:44:9b:5d:4f:d4:73:99:a3:f4:75:
6d:58:35:57:f7:dc:ae:be:bf:95:be:ba:0c:a7:bf:
e9:14:fd:00:ae:8b:4f:2b:17:ee:7d:57:3c:fe:18:
a0:11:1a:e6:59:88:97:8e:91:81:73:01:53:12:11:
55:4e:e0:87:9d:fd:d4:4b:1d:19:62:6b:a4:21:35:
35:2c:83:a3:50:e7:91:c7:ff:c5:8c:d1:5b:8d:42:
4e:cb:05:a0:c0:f3:1f:95:09:f1:a7:b5:af:99:dc:
b4:8e:bd:52:80:83:ee:66:be:12:dc:58:74:26:70:
15:a4:1f:78:64:20:42:72:6c:6b:02:48:09:2f:8f:
81:a5:a8:b6:a1:e0:01:1b:7c:67:17:97:94:10:65:
e4:dc:9f:9b:c1:66:82:b7:00:57:c4:8e:30:03:e1:
5c:4a:4d:fd:e8:b1:cc:06:31:89:a5:01:ad:a4:6b:
44:b6:d5:0f:3c:c9:4b:08:d8:e3:42:77:7d:f2:92:
0a:d6:62:91:a2:b2:d6:d4:19:85:d8:e8:2a:5f:f3:
a8:93:53:be:af:36:38:e5:ab:9c:4b:2a:d6:0b:79:
b4:21:08:8b:13:31:07:e8:db:c1:d0:83:c7:92:2d:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:40:18:26:B4:56:F1:01:F1:07:2C:09:C0:08:6C:D9:7D:00:53
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v59AGCa0VvEB8QcsCcAIbNl9AFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.212.0/23
5.10.218.0/24
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5e:10:a0:11:e0:5a:29:2d:10:44:7c:e7:38:3e:11:1d:c4:
00:62:bd:bb:1a:88:87:cf:5b:37:05:a4:18:55:6e:2a:74:d5:
b9:b8:1b:ac:07:33:b6:44:75:19:e1:50:d0:37:bc:a0:e2:eb:
40:0c:88:99:fe:91:cd:0f:70:d8:73:5f:63:94:d7:69:ce:75:
90:fa:e4:79:be:4f:b2:83:b6:49:93:73:72:a5:13:c9:26:60:
fd:80:6f:a1:8e:63:a5:83:8c:6d:f0:57:81:c4:0c:60:d4:c0:
43:69:02:56:7b:6c:86:02:e8:6e:7e:a8:80:0c:b2:82:6c:4e:
e3:8a:a0:e7:7d:a2:8f:cd:cd:7a:87:53:5d:53:7f:04:7b:4c:
51:67:29:bc:27:85:18:24:b0:f0:5b:4f:48:91:e2:50:14:73:
2f:21:3c:3c:3b:68:b4:7e:1d:8e:a0:35:07:91:f3:b7:7a:a4:
c3:97:33:44:32:da:f9:45:56:3e:43:95:7b:cb:ca:f5:78:fd:
20:99:e9:95:00:32:92:20:32:9b:76:d3:5e:98:18:11:1c:57:
1b:e2:55:25:c6:3a:89:9d:08:6e:2a:af:09:0f:f0:03:2f:96:
07:ba:be:f7:4a:a6:b0:53:d6:b1:fe:8c:0e:60:01:5d:e7:67:
24:be:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:48 2025 by rpki-client