Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wrm3d2wXbNHJYiDyL1ZSrD5jL44.roa
File: wrm3d2wXbNHJYiDyL1ZSrD5jL44.roa (raw, json)
Hash identifier: xgZSzvtg7NgJ0dib40CTX6i5y+Y3sv48sFzYeiTx9dY=
Subject key identifier: C2:B9:B7:77:6C:17:6C:D1:C9:62:20:F2:2F:56:52:AC:3E:63:2F:8E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0197EB07D6E36EE83F3A88A94BDACC85D38F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wrm3d2wXbNHJYiDyL1ZSrD5jL44.roa
Signing time: Tue 08 Jul 2025 17:14:08 +0000
ROA not before: Tue 08 Jul 2025 17:14:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213568
IP address blocks: 5.181.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 18:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:eb:07:d6:e3:6e:e8:3f:3a:88:a9:4b:da:cc:85:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 8 17:14:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2b9b7776c176cd1c96220f22f5652ac3e632f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:64:f4:d2:5f:9e:cf:75:5e:12:dd:39:d1:
9f:18:64:54:32:06:4d:4d:f4:d8:6c:2a:fe:f3:3e:
4d:3d:52:f0:7f:ec:14:b6:0a:5e:4e:05:12:7d:94:
2c:33:da:ee:66:79:ba:be:04:2e:5a:a8:ab:73:13:
37:e8:57:7d:78:69:23:13:b4:9b:7f:78:28:48:7d:
f4:ba:9f:64:0f:a9:46:f5:18:c8:96:6c:14:4d:b6:
8f:b9:0b:fd:d5:33:39:4e:08:5f:80:88:99:1d:64:
8e:0e:4f:4d:f3:46:df:62:57:ab:cd:d7:e7:a5:7d:
37:45:7c:4e:25:b9:45:8d:40:a1:71:e8:1d:bb:d2:
4c:c1:a7:33:56:50:ab:77:33:35:e7:bc:f3:22:4a:
33:2d:b6:48:42:03:f6:e7:3c:47:17:09:22:da:79:
3c:f9:99:35:fb:5b:d0:d5:c7:12:ea:6e:7b:e9:01:
bf:0c:42:f6:4c:5a:7b:ef:af:37:4a:a7:cc:6c:a0:
ae:6e:37:6f:af:e5:32:33:fa:8a:68:0e:c1:2a:39:
0a:99:2b:ae:d4:4d:ec:d2:08:3c:d6:ff:7f:08:e6:
98:ab:7f:09:a0:b9:87:c4:f5:c9:bd:84:1f:6b:75:
e5:08:c4:40:30:80:4c:e3:e9:82:96:07:94:1f:77:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B9:B7:77:6C:17:6C:D1:C9:62:20:F2:2F:56:52:AC:3E:63:2F:8E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wrm3d2wXbNHJYiDyL1ZSrD5jL44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.183.0/24
Signature Algorithm: sha256WithRSAEncryption
af:37:6d:90:b7:63:18:ee:36:00:e5:3f:60:51:9e:88:37:93:
1b:67:cd:df:1e:3f:44:d0:e5:68:54:34:e7:39:96:0a:b9:1a:
9a:83:1c:38:85:0e:4f:69:84:f2:ce:dc:55:bf:56:b6:e2:40:
6f:35:49:e5:ab:27:34:df:c5:72:01:17:80:96:b8:e7:13:11:
d1:e3:c4:c2:8b:51:aa:37:3c:ad:32:2e:0c:58:57:03:5a:62:
4e:cb:4a:36:e7:ec:b5:41:20:af:5d:fe:06:6f:e5:98:21:70:
39:84:fa:b9:03:c3:c7:7c:d1:04:32:39:64:74:63:14:b6:54:
a8:1a:2b:51:6b:73:f1:17:86:96:9a:1b:84:e8:d3:ad:b0:06:
6e:d1:e5:c7:6d:de:9c:17:1b:af:6c:3c:1d:40:a4:76:69:5f:
a5:b9:50:50:ac:12:60:60:75:30:11:d2:ab:85:06:b4:d3:f1:
70:c3:b0:31:31:ec:01:7d:5d:71:87:62:fa:5c:5e:0b:40:a3:
e9:39:95:71:17:18:a0:81:06:be:b7:07:b8:53:f6:a8:a1:68:
75:48:02:0c:32:66:f0:99:0f:53:2d:99:1e:a6:15:a8:86:c5:
17:d3:4f:36:f5:25:03:a3:bf:50:a0:30:f9:b3:fc:bf:40:65:
0b:b6:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:59:55 2025 by rpki-client