Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EzZKbSJWlk5j2OvB0xr-1Xr6F4U.roa
File: EzZKbSJWlk5j2OvB0xr-1Xr6F4U.roa (raw, json)
Hash identifier: 416Li75F8y/+eC12pHU2C6TWee9UGoTUKzewBFOhnS4=
Subject key identifier: 13:36:4A:6D:22:56:96:4E:63:D8:EB:C1:D3:1A:FE:D5:7A:FA:17:85
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01988848BCB247995ADE282C3A94A41B591E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EzZKbSJWlk5j2OvB0xr-1Xr6F4U.roa
Signing time: Fri 08 Aug 2025 06:05:24 +0000
ROA not before: Fri 08 Aug 2025 06:05:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Aug 2025 15:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:48:bc:b2:47:99:5a:de:28:2c:3a:94:a4:1b:59:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 06:05:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13364a6d2256964e63d8ebc1d31afed57afa1785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:8a:0b:0d:9a:74:d8:a5:44:3e:5b:7a:2f:
07:9a:ee:58:49:92:56:ec:35:2a:4b:bd:fe:8b:a1:
19:a8:fe:04:a0:56:1d:c4:fd:97:dc:53:bc:e4:86:
3f:e8:1e:ff:03:49:2f:a7:bb:2b:f5:55:e6:99:14:
e2:1d:66:b2:3a:d4:d5:66:c9:ab:97:7a:98:77:3f:
49:17:7e:64:77:8c:3d:87:3b:ce:72:41:15:64:cc:
44:c3:97:11:7e:56:fd:a7:ab:09:44:09:3d:9c:8c:
be:6c:f9:56:17:40:3f:0b:18:92:54:9e:e4:79:59:
39:5d:f6:98:93:74:44:f6:a1:33:ef:86:dd:2c:ef:
de:f8:f1:38:a6:ff:3d:ce:ce:ea:5a:a7:f2:c1:bc:
bf:6c:0b:4d:25:1c:06:5d:2d:a0:63:d6:83:1e:95:
ee:70:e0:ab:d4:a7:00:49:5e:1f:df:d9:0d:23:ce:
ba:a8:8b:6c:68:2b:8c:cc:fc:04:a2:42:7a:c8:00:
ad:27:68:98:ee:e2:57:f6:d2:bf:71:fc:2a:ae:dd:
09:cf:22:cd:b6:d6:5d:f8:26:cf:24:e1:b7:a2:62:
e0:13:98:69:53:9b:40:5a:b2:a6:95:ce:94:aa:33:
b6:71:a1:a4:2d:8a:ef:0e:0f:2f:a1:00:8a:f2:dd:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:4A:6D:22:56:96:4E:63:D8:EB:C1:D3:1A:FE:D5:7A:FA:17:85
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EzZKbSJWlk5j2OvB0xr-1Xr6F4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2e:6f:f7:69:7a:16:68:36:ba:ce:29:c1:07:b4:0d:4a:25:
6a:62:20:5a:9e:de:86:9f:7c:d3:85:91:e2:17:cc:d3:b3:48:
43:42:64:9b:2e:21:94:8c:6d:51:09:17:5d:7c:a6:27:91:aa:
18:d2:06:1b:0a:b0:5c:79:1e:0e:df:04:de:b4:c8:50:3d:a2:
6f:9d:bc:7b:8c:e0:11:1c:59:88:11:f9:f5:a2:b3:1c:ef:0c:
f8:8e:11:9e:1a:be:43:b6:95:55:46:63:59:46:59:eb:d3:d7:
93:42:a2:7c:04:27:69:d3:5b:85:14:64:c6:02:26:d0:1d:87:
27:5c:9c:64:42:7b:94:48:3c:9d:c1:d9:86:5e:13:27:42:05:
81:b1:2b:18:e9:ee:0c:7e:04:ff:ca:42:7e:6b:ce:f2:aa:ac:
d9:1d:e3:73:4a:f4:7e:4b:6e:42:a8:dc:4f:ff:6b:6c:0a:1b:
83:bf:5c:f3:83:08:07:bd:86:d0:17:7a:38:77:f1:f5:53:12:
82:7f:dd:62:c8:1d:67:72:7a:78:a3:20:3f:0a:11:50:eb:a7:
02:cf:02:d5:89:d6:7c:e4:c8:dd:c2:4d:52:3b:05:d1:33:57:
68:dc:3f:5e:86:c0:e5:52:49:d0:31:62:58:c6:96:0c:59:d0:
61:ee:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 22:03:22 2025 by rpki-client