Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/v-0kMrp7xdTMkq7AwIzPN740OFY.roa
File: v-0kMrp7xdTMkq7AwIzPN740OFY.roa (raw, json)
Hash identifier: YTkwEgEqCXxE7EnE5lEPIgasV4E5WhAQ110zm/n8GwI=
Subject key identifier: BF:ED:24:32:BA:7B:C5:D4:CC:92:AE:C0:C0:8C:CF:37:BE:34:38:56
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0197ED8E7748B5A503CA1246D7F756F7F034
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/v-0kMrp7xdTMkq7AwIzPN740OFY.roa
Signing time: Wed 09 Jul 2025 05:00:26 +0000
ROA not before: Wed 09 Jul 2025 05:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 14:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:8e:77:48:b5:a5:03:ca:12:46:d7:f7:56:f7:f0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jul 9 05:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfed2432ba7bc5d4cc92aec0c08ccf37be343856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:f2:ef:8a:88:8f:a4:aa:a3:e8:1b:bc:ac:
74:4d:97:52:64:00:aa:4a:0c:b5:b9:44:ec:9f:d1:
0a:28:c2:e3:cc:8b:df:49:2f:96:3e:f1:d7:2a:e4:
9d:6a:af:ae:40:5a:02:7e:41:de:e6:c0:bc:50:d3:
8e:fd:e9:89:35:e9:a2:53:92:83:a1:d9:dc:d6:b5:
71:57:20:4d:85:b2:54:70:f7:a6:7d:66:d6:b9:5a:
0a:0d:29:a5:2d:c9:31:b4:44:4d:dc:03:2e:c2:36:
33:c4:f3:dc:1e:6d:4e:9b:75:ad:f7:19:99:a6:2e:
c5:38:ab:f5:db:3a:8e:e7:e5:78:4b:4f:58:f8:0d:
5d:de:7c:2a:cc:95:ea:93:37:a8:06:de:4e:86:7a:
c2:f1:24:bb:d9:bb:3a:4a:af:0c:eb:1d:8f:db:b7:
05:6b:54:a0:01:83:4b:9e:bf:b2:ee:9a:49:e4:03:
3e:c6:0b:3e:ce:8e:da:b7:57:a8:e1:99:d5:79:18:
c2:10:24:d3:6e:78:58:ff:21:c6:5d:64:9c:05:d7:
40:32:e2:27:64:eb:60:90:3f:e5:37:3b:e1:06:01:
20:fb:0f:9d:d9:1f:8d:a6:c6:1a:5b:48:1d:57:25:
28:ca:ec:cd:39:06:e3:3c:99:bd:8b:b9:97:cc:e9:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:24:32:BA:7B:C5:D4:CC:92:AE:C0:C0:8C:CF:37:BE:34:38:56
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/v-0kMrp7xdTMkq7AwIzPN740OFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a0:7d:12:f9:05:03:ce:e0:c5:88:73:61:94:a3:f0:6e:83:
27:1c:25:40:ba:64:a0:24:22:2a:83:11:2c:4d:70:6b:c4:56:
8a:f9:21:d9:33:b4:52:81:c0:24:e2:3c:ca:3a:cc:6c:b9:55:
e0:50:cc:1b:4c:96:78:19:2c:d2:b2:85:fc:9a:f0:9f:1f:d2:
63:6e:ef:9f:f2:f7:9b:04:26:03:82:5c:3a:4a:ce:15:47:32:
b8:5d:5a:2d:84:bb:12:68:9a:65:ab:88:1a:75:41:db:95:b7:
45:fe:09:34:09:b5:fe:d4:f9:a8:12:73:66:84:75:d2:0a:64:
1e:eb:72:77:23:ac:99:29:3d:8c:9e:ad:44:fd:26:a0:14:49:
6c:a2:b0:cf:f4:a3:f3:d0:15:1c:e9:c5:a6:c6:d7:7c:04:c8:
be:89:30:dd:74:db:4b:2f:b9:3a:fd:1e:61:62:28:0f:21:ec:
72:72:38:13:48:bc:5c:b0:3e:c9:d4:97:d7:97:b1:18:75:54:
f4:c3:7d:ca:2e:9b:dd:45:66:63:0d:18:b7:05:a2:0b:ce:fd:
6a:3d:a2:8d:48:b2:82:f6:79:38:ff:45:f8:10:ec:e2:3d:dc:
82:5f:03:f0:18:aa:03:b2:2c:ba:ae:07:3b:08:ad:50:7e:d5:
06:ee:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:27:13 2025 by rpki-client