Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/5W0e0Kd9TP4I2BNrDc8nusqtdV0.roa
File: 5W0e0Kd9TP4I2BNrDc8nusqtdV0.roa (raw, json)
Hash identifier: v0oKk8cRtMcKlMwN6/S3Z3L5y/eGsQTIhrXQf0l7/eE=
Subject key identifier: E5:6D:1E:D0:A7:7D:4C:FE:08:D8:13:6B:0D:CF:27:BA:CA:AD:75:5D
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019712600FFBF1755793DC1602AD198CFA41
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/5W0e0Kd9TP4I2BNrDc8nusqtdV0.roa
Signing time: Tue 27 May 2025 15:32:54 +0000
ROA not before: Tue 27 May 2025 15:32:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.10.212.0/24 maxlen: 24
5.10.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 07:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:60:0f:fb:f1:75:57:93:dc:16:02:ad:19:8c:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: May 27 15:32:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e56d1ed0a77d4cfe08d8136b0dcf27bacaad755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:cd:53:5a:7d:48:c3:54:d6:c6:71:d9:ab:
e5:b6:b3:0f:8a:69:1c:69:e1:75:16:e5:81:e4:09:
42:39:ce:8d:a8:4d:38:2d:87:87:a7:f1:a0:e3:1a:
ef:d1:22:2e:ee:4d:cf:73:90:f2:a6:fc:7f:bd:9e:
16:c8:d1:58:1d:63:6a:84:d3:23:c0:d5:8e:03:22:
95:27:11:22:a7:db:8c:5a:eb:c4:80:6c:9b:0f:e6:
df:df:ce:4f:4d:6e:b8:6f:72:45:17:23:6c:f3:fa:
ac:a7:64:05:1f:f9:6f:cd:38:50:55:fa:3f:de:f2:
10:ee:9c:1b:90:b7:a2:1a:d7:ef:b5:59:9b:d8:49:
56:a6:ec:8b:f3:e2:b2:14:28:f6:5e:5c:93:4c:57:
1c:ef:5f:5f:64:bd:5f:09:75:08:84:c8:b4:ef:51:
02:ea:d4:52:8b:b9:da:e4:62:55:51:e1:f6:e6:85:
ed:41:95:4a:ce:b1:03:fd:b6:1d:74:c3:a3:48:fc:
4b:0d:da:d4:89:be:cc:93:cd:a7:1b:7e:b2:d7:35:
cf:78:90:98:61:21:ce:f6:81:8f:88:2d:d3:55:e1:
30:c2:06:e2:b3:a4:17:c6:88:4c:3c:08:06:c1:ef:
32:a7:cb:52:e2:ee:b1:90:9e:77:5f:2e:26:d3:3a:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:1E:D0:A7:7D:4C:FE:08:D8:13:6B:0D:CF:27:BA:CA:AD:75:5D
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/5W0e0Kd9TP4I2BNrDc8nusqtdV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.212.0/24
5.10.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b3:95:44:03:33:7c:44:16:ea:1b:c2:13:e7:2e:f1:6f:27:
db:d9:25:31:6f:44:94:66:f2:6b:0e:fe:a2:d4:75:d9:f6:93:
f7:74:2c:19:9d:07:c4:b2:57:1d:ca:1a:81:11:c8:98:1f:6c:
43:3e:ca:dd:87:b3:d9:21:8f:fd:5a:b5:72:78:3e:b3:82:1e:
19:4f:d6:4d:09:8e:db:99:f5:9e:78:a8:08:06:93:57:f4:36:
00:25:56:3f:e8:1f:e1:3b:fa:ce:9f:06:45:18:6f:4a:ae:cd:
11:f9:57:8e:64:18:21:0d:c8:4d:e0:43:fa:f9:39:2d:cb:fa:
94:3e:9b:a1:94:c5:2d:81:ba:e6:25:7b:2d:5a:ce:09:aa:b9:
71:e9:22:8a:1f:aa:4a:a5:54:50:5c:de:2d:28:12:9d:77:01:
c4:7f:94:0a:f6:a7:0d:c8:b8:1f:20:22:68:97:6a:d5:89:68:
cc:7a:86:b1:a3:3d:e4:13:ce:92:92:a6:58:b0:f7:9c:48:50:
6c:42:e6:bf:a6:66:fc:c2:5f:11:a2:06:8c:9d:f8:27:14:b4:
78:0a:4b:ea:8b:2c:1c:4e:82:2d:99:ba:00:98:f6:5d:ef:b7:
78:f5:62:c4:ab:2a:25:90:2b:9c:85:92:49:c1:f8:86:e3:7e:
3c:a6:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:56:56 2025 by rpki-client