Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nRhgx-2ukyufRZ8qNJ5YQkEJPwQ.roa
File: nRhgx-2ukyufRZ8qNJ5YQkEJPwQ.roa (raw, json)
Hash identifier: T81nPzP/NckqmKuQ034z8VjHAHy0uFZKerp3CzqyYfY=
Subject key identifier: 9D:18:60:C7:ED:AE:93:2B:9F:45:9F:2A:34:9E:58:42:41:09:3F:04
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0197E86B8049FF0EDCE858F9F83FAA5F36A3
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nRhgx-2ukyufRZ8qNJ5YQkEJPwQ.roa
Signing time: Tue 08 Jul 2025 05:04:08 +0000
ROA not before: Tue 08 Jul 2025 05:04:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Jul 2025 09:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:6b:80:49:ff:0e:dc:e8:58:f9:f8:3f:aa:5f:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jul 8 05:04:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d1860c7edae932b9f459f2a349e584241093f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:aa:63:0b:fd:ed:7a:88:e9:ab:e2:ad:65:
90:58:42:1c:aa:5a:97:43:bc:5f:60:16:74:61:5f:
55:62:49:00:08:5f:6c:6b:f6:88:d6:0f:7a:df:1c:
15:aa:f7:fd:d9:9b:37:0b:1b:b9:3c:c9:6d:5c:83:
24:83:3c:68:94:90:87:29:96:5f:18:02:d1:99:d3:
b3:8e:ec:a4:39:5f:13:8d:c1:29:8c:aa:f7:fd:34:
a3:71:70:c9:f0:ae:56:e6:13:ee:29:4d:ad:8a:65:
31:13:b9:94:27:61:8a:d1:c8:ff:e2:fe:ad:3e:05:
fa:86:53:0e:2d:92:5c:17:0b:01:3b:f7:66:32:ff:
3d:87:72:fd:12:5a:5b:1f:5b:4b:c1:ce:87:25:2c:
9f:64:c5:ae:c4:cd:6a:40:ff:3d:a3:2d:fc:5d:f7:
bc:8f:b4:d5:10:2b:97:7b:22:bb:de:38:9c:f4:ef:
49:be:97:7f:83:0f:29:84:84:b2:66:f7:28:ff:09:
7c:b2:9a:40:c4:90:6e:d0:84:35:24:77:99:6d:74:
4a:52:93:77:51:64:e2:11:1f:2d:ea:d2:86:fd:b8:
0a:b9:80:6c:8f:12:d6:06:85:80:8c:f8:5f:48:38:
fe:3d:d7:e6:b0:f3:5a:3a:aa:93:fb:76:dd:84:cd:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:60:C7:ED:AE:93:2B:9F:45:9F:2A:34:9E:58:42:41:09:3F:04
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nRhgx-2ukyufRZ8qNJ5YQkEJPwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b2:c1:f9:03:21:2d:6e:97:33:1c:9d:dc:6d:0d:d2:14:c6:
a6:7f:7d:c8:3d:8f:dd:f9:7d:3f:27:a6:19:98:24:6a:52:d7:
f0:0c:13:ae:6a:3c:ec:49:08:01:8d:d5:47:86:72:9c:a5:15:
c9:df:72:c2:82:46:35:c5:68:2c:88:03:f3:e8:47:41:13:e3:
cd:fa:e0:2c:32:38:ff:29:2e:ac:09:0c:98:74:42:9b:e9:e3:
33:0c:95:3e:6e:7d:c4:14:ad:ad:73:40:f0:7b:28:8a:0f:2f:
7a:2c:07:08:fc:ed:51:6d:f3:93:fd:0e:de:a5:37:a9:28:48:
50:08:1d:1f:97:25:58:a6:4e:6b:e0:a6:f7:07:a1:40:9f:be:
66:93:fb:71:2b:da:0b:dc:52:16:5d:d3:8f:2e:4e:37:16:d3:
cf:6b:ee:ed:28:81:4c:a5:cb:d9:98:f3:6f:82:a1:26:df:49:
f6:d1:6e:8b:bc:99:4d:60:b3:2b:d8:a3:61:79:09:aa:84:18:
13:84:6f:b0:a5:b0:23:6e:c6:cb:7e:90:e2:e3:ea:b5:65:45:
d2:9f:d3:f9:6e:6b:a9:7d:c8:50:0c:e2:07:a0:51:67:b4:78:
b1:f8:20:91:c6:35:2e:4f:75:37:0a:4a:1b:87:94:7b:49:bb:
ea:67:01:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:33:03 2025 by rpki-client