Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/5BxjFGibN4nvCtzriqd5fyFm12g.roa
File: 5BxjFGibN4nvCtzriqd5fyFm12g.roa (raw, json)
Hash identifier: bFjc/WNF3h4pBoPglUUz58KCbSH4/jZHgGhY4qsHvQE=
Subject key identifier: E4:1C:63:14:68:9B:37:89:EF:0A:DC:EB:8A:A7:79:7F:21:66:D7:68
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0196F14802C6C41445EC0E9A6C1B8C4F9AE0
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/5BxjFGibN4nvCtzriqd5fyFm12g.roa
Signing time: Wed 21 May 2025 05:19:10 +0000
ROA not before: Wed 21 May 2025 05:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 188.191.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 12:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:48:02:c6:c4:14:45:ec:0e:9a:6c:1b:8c:4f:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 21 05:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e41c6314689b3789ef0adceb8aa7797f2166d768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:86:93:2f:34:97:3c:ae:af:08:05:b4:4f:
94:37:a0:35:df:ea:9d:19:48:a2:01:c2:35:fb:72:
1a:b7:85:e1:f7:a8:f9:03:01:5b:cf:02:cf:3e:62:
f5:ad:b3:57:c5:94:ad:9b:df:8b:e4:ab:d1:c3:fc:
4a:c3:fe:27:ba:51:7a:0f:49:3c:c6:f6:65:b7:09:
9a:cc:17:dc:95:fa:fa:a2:f5:bf:1d:10:2c:4d:d3:
74:41:08:af:ae:60:7e:ff:9a:f8:99:ea:64:83:3e:
92:1d:7b:67:d8:a6:ea:c5:eb:36:09:be:78:b9:fe:
d1:fd:85:4e:9b:15:40:4a:41:8d:1a:88:f4:be:39:
34:c9:69:01:11:57:5a:db:ce:22:93:72:6e:6d:37:
5d:94:bb:58:f9:b1:8a:59:85:bc:2f:65:93:34:fb:
b9:93:d6:cb:a0:6f:0b:13:28:90:6f:d5:fb:ac:69:
bc:c4:4c:c8:72:81:63:38:47:ae:85:d8:f2:a6:c6:
73:69:84:a8:0f:83:e4:86:0c:90:95:bc:ca:3f:7e:
16:89:28:41:f9:c6:2c:66:94:6c:4f:dc:10:46:32:
6a:6c:51:59:c4:b2:28:fb:84:07:42:3b:76:64:8c:
54:3c:03:28:36:2a:26:1b:9c:2e:5f:48:3d:fe:54:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1C:63:14:68:9B:37:89:EF:0A:DC:EB:8A:A7:79:7F:21:66:D7:68
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/5BxjFGibN4nvCtzriqd5fyFm12g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:61:49:9c:df:f8:35:bd:6c:a3:fe:22:70:3c:0b:38:28:1c:
ed:75:7a:73:18:69:3e:d6:d8:e6:e6:04:0c:ce:c6:ff:d3:8c:
e6:13:96:62:41:07:a2:cd:18:56:cf:28:63:c0:8a:a1:c2:5c:
17:7c:c2:b1:f5:72:7b:12:e9:b1:f8:cf:a2:9b:7a:40:9e:a0:
4a:bc:53:0b:71:91:66:e6:a7:db:f6:90:cb:e1:8f:e1:f5:d6:
bc:b9:ab:31:f2:37:07:e1:18:bb:73:fa:0e:fe:0d:ee:c0:04:
b3:fc:4e:a0:74:cb:87:d0:1c:eb:f8:da:e1:f0:4a:30:c9:b4:
63:95:5b:95:3e:26:ca:1e:13:55:88:27:33:54:13:d9:74:70:
26:2a:07:af:95:46:10:a5:59:0e:df:18:78:cf:13:e9:07:be:
af:11:84:da:4a:cb:19:8c:2d:af:d2:28:1a:69:24:14:a0:0a:
fc:75:81:dc:ae:40:80:30:86:cb:bb:42:cf:3d:e4:ca:d9:cd:
61:64:91:01:9c:e1:5f:0f:6b:ae:dd:b2:94:cf:12:e6:fb:56:
2e:2c:fd:3c:9c:2f:68:f3:70:aa:88:f9:74:d8:ee:c0:7f:53:
cb:9c:a6:93:3c:ba:16:60:d2:fc:4d:1d:f9:23:47:93:2b:e2:
72:fc:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:39:12 2025 by rpki-client