Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5JnI8xpw2gVXdIzuoUbS6YyqkRU.roa
File: 5JnI8xpw2gVXdIzuoUbS6YyqkRU.roa (raw, json)
Hash identifier: 7aekEarOIs0eDdou0k/lP7Ygwu5+O+1aWPyb3cNZUTg=
Subject key identifier: E4:99:C8:F3:1A:70:DA:05:57:74:8C:EE:A1:46:D2:E9:8C:AA:91:15
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0196EDFCCF964CD6A8F3CFF9A9B6055318C3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5JnI8xpw2gVXdIzuoUbS6YyqkRU.roa
Signing time: Tue 20 May 2025 13:58:10 +0000
ROA not before: Tue 20 May 2025 13:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11351
IP address blocks: 92.71.32.0/20 maxlen: 24
92.71.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 08:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:fc:cf:96:4c:d6:a8:f3:cf:f9:a9:b6:05:53:18:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 20 13:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e499c8f31a70da0557748ceea146d2e98caa9115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:1a:cc:d3:4a:b8:34:5a:f9:dc:1a:c9:e8:
6a:e7:56:8b:09:4b:9d:2c:76:54:77:00:a7:00:2c:
62:7c:d0:6f:7d:ae:b5:4e:07:55:05:64:16:6d:af:
0c:ec:a5:22:e2:bc:23:03:4f:28:03:b0:e0:be:dd:
d5:37:42:d7:d9:50:d9:6a:b5:fb:68:a0:2f:d5:da:
be:b0:d8:2c:48:33:2e:77:f9:da:66:eb:87:7f:d0:
9a:2f:c1:83:1f:94:0a:27:5b:e9:15:b6:53:78:9f:
e0:ff:22:dc:22:2b:eb:c2:0b:c7:49:db:69:72:5a:
7b:da:5e:44:e8:02:e9:e8:2d:61:03:ee:d0:b9:57:
f4:2b:4c:45:8a:d8:62:53:16:c4:f6:63:2d:b2:b6:
ea:92:d8:4a:a2:a6:45:a7:e6:b5:1f:bb:0a:2c:eb:
c9:5d:17:07:d9:77:24:43:fd:df:a2:e7:a9:79:da:
0b:2e:ce:fc:fc:64:08:da:2d:e0:db:0b:53:4d:83:
0c:cd:13:17:10:d3:45:a2:15:0d:8e:0b:19:66:1f:
54:a1:68:4e:bc:57:96:d1:61:6e:d2:18:27:ba:19:
51:77:00:f8:d9:89:6b:d6:78:56:85:e4:f3:ea:3d:
19:f8:a3:a9:31:c0:69:71:5e:33:21:da:de:5e:9f:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:C8:F3:1A:70:DA:05:57:74:8C:EE:A1:46:D2:E9:8C:AA:91:15
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5JnI8xpw2gVXdIzuoUbS6YyqkRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.32.0/20
92.71.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c7:27:01:d8:2e:9d:84:8a:73:73:e8:fa:e7:94:8f:89:3c:cf:
b1:fd:63:f5:83:c7:b1:ba:36:6f:0f:6d:4e:fc:25:2d:40:dd:
68:b5:dc:ba:6e:14:f2:47:c2:b4:35:5d:0c:71:a9:c2:c6:37:
2c:53:d7:a7:d5:0b:36:51:e5:27:c7:89:5e:32:20:c6:5e:2d:
70:3e:b3:4d:2e:ae:cb:f3:cb:1a:bc:c6:51:ed:97:33:c2:b3:
22:39:80:ca:4a:1e:01:1c:53:b6:93:77:5c:17:b3:65:fb:f9:
ba:2a:ab:cd:cc:b2:19:7b:37:79:f2:01:d2:ae:95:f0:1d:dc:
b4:df:95:bd:04:be:07:6e:e9:16:b6:e2:df:33:fd:e8:69:67:
9a:61:c2:ee:ae:d3:06:68:1c:2d:bd:b7:9e:87:37:23:42:a7:
92:6e:5a:de:7d:5d:0f:35:93:18:16:8a:fb:71:a2:20:9e:9d:
e3:a7:54:fd:fc:5c:b1:0e:5b:a1:60:ca:22:8a:e4:c1:1d:a2:
77:70:ca:e6:15:ab:2e:1b:00:fa:b4:75:25:73:49:e5:cb:f7:
70:eb:20:de:31:6f:7a:ff:a9:62:17:37:d3:98:08:c9:81:a8:
d0:9e:73:1a:ce:c7:83:bb:26:87:3b:13:5e:a7:f0:02:96:47:
3c:1c:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:34:17 2025 by rpki-client