Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1CmW0NTvJxAjDfe5bmpIeIYQYMM.roa
File: 1CmW0NTvJxAjDfe5bmpIeIYQYMM.roa (raw, json)
Hash identifier: l6VSG52nyMYopo/j2CoaULghqRp0DR0MWhThBYqLf0Q=
Subject key identifier: D4:29:96:D0:D4:EF:27:10:23:0D:F7:B9:6E:6A:48:78:86:10:60:C3
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019442AB21D9FACBBACC911902D2A7ACEA02
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1CmW0NTvJxAjDfe5bmpIeIYQYMM.roa
Signing time: Tue 07 Jan 2025 21:28:19 +0000
ROA not before: Tue 07 Jan 2025 21:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 5.10.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 17 Feb 2025 22:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:ab:21:d9:fa:cb:ba:cc:91:19:02:d2:a7:ac:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jan 7 21:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42996d0d4ef2710230df7b96e6a4878861060c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:e4:aa:f7:17:84:42:ad:f0:0f:a7:12:8c:
4e:9e:6a:11:cc:61:be:5c:27:68:68:45:8a:64:0b:
fc:c1:d4:43:ee:bb:f8:2a:49:94:c6:de:76:c4:95:
01:c0:2f:26:c7:64:cf:80:45:8e:ac:35:fd:9c:6a:
1f:e3:19:c5:39:61:23:27:3f:f3:c7:be:19:8c:8c:
8c:2d:9d:82:ce:f0:3b:0b:10:af:5e:5b:1f:83:4d:
02:91:c4:48:18:b0:f5:b1:96:30:b5:2e:70:2b:d2:
b3:96:0d:f3:fa:01:9a:8f:bd:c5:c5:c5:65:3a:b2:
42:0f:80:2f:35:32:15:f7:24:08:ce:3f:aa:6b:3f:
21:56:33:5b:30:b7:b7:36:af:11:28:db:62:6e:b7:
a9:dc:78:1b:bb:af:71:10:6b:d8:40:db:e9:73:a5:
60:00:3b:4d:20:3d:27:ad:6d:f7:7f:e9:88:42:21:
7b:b5:81:3c:1e:cf:2c:3c:28:9c:43:4c:27:48:6b:
73:fb:ba:ff:8b:a6:95:71:fb:53:6e:33:b7:8e:a3:
8b:c8:b7:13:eb:a1:c8:42:59:88:f3:40:6c:86:96:
18:45:f2:42:0e:75:4d:b9:19:a2:40:b2:d6:d5:2a:
e0:f2:b7:b2:4c:3d:84:ef:bf:d5:3d:80:72:6d:63:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:96:D0:D4:EF:27:10:23:0D:F7:B9:6E:6A:48:78:86:10:60:C3
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1CmW0NTvJxAjDfe5bmpIeIYQYMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:06:a2:4a:01:3e:ba:87:58:b7:76:4a:4e:68:5e:89:62:68:
98:f4:56:00:9f:02:70:31:a2:de:a4:7e:f7:ea:e1:7f:f5:21:
d2:a6:23:b9:1b:fc:e0:8f:4e:b3:b2:05:b9:a2:1e:5f:da:10:
be:aa:a6:1d:4b:b3:4e:43:5f:62:81:0b:7c:65:cb:39:d6:20:
ca:2c:9b:19:99:49:8d:a3:20:4a:b0:21:12:94:3f:c3:0f:3a:
dc:df:25:bf:76:a2:ad:fb:f3:fe:29:d5:03:a0:38:1d:48:70:
24:65:0d:4e:fb:89:20:3e:aa:fd:a1:a3:fc:6c:0b:e0:4d:63:
88:79:55:af:8c:ec:88:a2:1c:f4:a2:2a:88:5e:3b:db:8d:be:
79:30:66:a2:71:a7:e8:b3:39:00:ef:32:25:b5:90:d0:99:8b:
c7:4c:e1:17:c5:ab:ff:4f:a3:1c:2d:db:d1:db:36:69:7f:72:
44:41:f1:80:b6:6a:82:c3:ed:29:e6:24:24:77:a0:86:05:2b:
9a:6a:b3:73:ce:d2:23:1f:4d:39:50:5e:9e:e2:59:42:12:c8:
cb:91:c8:7b:61:bd:5c:e1:39:91:27:12:39:7b:fd:4b:0b:27:
e2:1f:a5:23:b6:2c:38:a7:95:85:8b:7e:f9:75:b1:17:64:29:
8d:11:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:39:38 2025 by rpki-client