Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/7OcZ89sPqtG3SG8xWT2c23LDjFE.roa
File: 7OcZ89sPqtG3SG8xWT2c23LDjFE.roa (raw, json)
Hash identifier: mo6BcMxm/QuVHkDO49b/wcPO8xVh7bglq3Lul+EUK5o=
Subject key identifier: EC:E7:19:F3:DB:0F:AA:D1:B7:48:6F:31:59:3D:9C:DB:72:C3:8C:51
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0195D91D48C46F657F1AC0946FF107FF1C92
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/7OcZ89sPqtG3SG8xWT2c23LDjFE.roa
Signing time: Thu 27 Mar 2025 19:38:49 +0000
ROA not before: Thu 27 Mar 2025 19:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.213.0/24 maxlen: 24
5.10.214.0/24 maxlen: 24
5.10.215.0/24 maxlen: 24
5.10.217.0/24 maxlen: 24
5.10.218.0/24 maxlen: 24
5.10.219.0/24 maxlen: 24
5.10.221.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 17:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:1d:48:c4:6f:65:7f:1a:c0:94:6f:f1:07:ff:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Mar 27 19:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ece719f3db0faad1b7486f31593d9cdb72c38c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:b7:6a:26:65:e1:58:da:3b:ca:71:b4:cd:
f2:0f:e3:55:24:cf:0d:be:57:bf:b1:51:a1:03:8f:
c7:e0:96:57:d5:f6:1e:6a:c4:e7:d8:78:e3:e3:42:
0b:0a:e7:c0:a6:70:28:e2:3d:f9:9e:f4:34:c5:60:
83:9f:41:6c:31:c8:6e:3e:cd:79:d5:31:df:f0:22:
79:2c:2e:08:92:a1:3c:71:7b:7f:ca:91:91:18:e6:
b6:50:62:9a:d7:61:f3:1a:10:54:e2:81:91:0b:e9:
90:09:85:d1:6c:bb:67:22:4b:e8:bc:3f:63:51:a4:
f7:06:93:69:00:07:f2:b0:05:fd:35:a7:d1:9f:41:
5e:58:1c:45:24:57:7f:c1:fa:67:a3:f2:b0:89:88:
db:21:03:8d:03:bd:4a:0c:9e:70:0a:2d:6d:4f:15:
bc:1c:10:3b:30:11:c3:bd:cd:28:71:30:37:25:ec:
0a:f9:77:76:8d:69:01:9d:63:bf:38:fe:01:3b:78:
16:02:b6:7f:94:49:55:85:2d:9e:aa:d5:0f:0b:cd:
01:94:bc:58:e2:af:38:b0:0b:d6:8e:49:80:b7:74:
a5:ba:60:ed:2e:d1:96:8b:1b:8a:b3:a5:13:3d:23:
5e:85:a6:4f:fd:16:f8:f7:55:80:65:d0:39:64:e3:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:19:F3:DB:0F:AA:D1:B7:48:6F:31:59:3D:9C:DB:72:C3:8C:51
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/7OcZ89sPqtG3SG8xWT2c23LDjFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.213.0-5.10.215.255
5.10.217.0-5.10.219.255
5.10.221.0-5.10.222.255
Signature Algorithm: sha256WithRSAEncryption
90:52:c2:36:bd:f1:4f:f5:46:ce:0d:19:92:9c:b7:e5:38:b3:
39:b2:98:6c:ba:d1:e2:a0:1c:ef:02:c3:9e:38:fc:7d:e6:40:
56:2c:86:3f:12:00:be:e1:87:15:52:2e:22:2c:d7:43:60:b7:
0b:a3:47:94:ae:ae:7b:d3:78:69:60:8b:42:56:98:a1:33:3c:
c8:97:51:99:16:37:0b:8f:79:d7:1e:3e:d0:ae:84:87:a8:86:
ef:d2:4d:90:10:02:8b:7b:e0:68:48:7c:0c:59:83:01:30:97:
41:0d:f7:8a:37:ed:33:05:be:12:3e:cd:36:1c:57:43:43:e1:
c7:cb:39:ab:17:85:da:4d:ec:4c:95:4c:60:06:67:1a:a7:28:
33:b4:07:4e:2f:43:d6:9d:d1:ed:d9:1c:4a:5e:30:26:71:b9:
5a:a1:0d:ae:1a:b8:ff:28:ef:d3:ce:f0:b6:d6:27:a6:45:83:
dc:e0:42:86:4b:1c:19:fd:6a:e1:c3:47:ad:c6:76:c6:a7:03:
46:f5:d0:74:d1:63:2c:68:28:49:a2:83:46:d9:53:59:61:c4:
50:65:e9:31:67:90:b6:12:f0:62:78:a0:81:19:78:85:1b:e6:
3c:80:95:ee:b7:76:39:56:12:30:07:12:c7:4f:ed:54:dc:ae:
f9:2a:dd:e5
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZXZHUjEb2V/GsCUb/EH/xySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjUwMzI3MTkzODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2U3MTlmM2RiMGZhYWQxYjc0ODZmMzE1OTNkOWNkYjcyYzM4YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlq3aiZl4VjaO8pxtM3yD+NVJM8N
vle/sVGhA4/H4JZX1fYeasTn2Hjj40ILCufApnAo4j35nvQ0xWCDn0FsMchuPs15
1THf8CJ5LC4IkqE8cXt/ypGRGOa2UGKa12HzGhBU4oGRC+mQCYXRbLtnIkvovD9j
UaT3BpNpAAfysAX9NafRn0FeWBxFJFd/wfpno/KwiYjbIQONA71KDJ5wCi1tTxW8
HBA7MBHDvc0ocTA3JewK+Xd2jWkBnWO/OP4BO3gWArZ/lElVhS2eqtUPC80BlLxY
4q84sAvWjkmAt3SlumDtLtGWixuKs6UTPSNehaZP/Rb491WAZdA5ZOPKAwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOznGfPbD6rRt0hvMVk9nNtyw4xRMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvN09jWjg5c1BxdEczU0c4eFdUMmMyM0xEakZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAAFCtUD
BAMFCtAwDAMEAAUK2QMEAgUK2DAMAwQABQrdAwQABQreMA0GCSqGSIb3DQEBCwUA
A4IBAQCQUsI2vfFP9UbODRmSnLflOLM5sphsutHioBzvAsOeOPx95kBWLIY/EgC+
4YcVUi4iLNdDYLcLo0eUrq5703hpYItCVpihMzzIl1GZFjcLj3nXHj7QroSHqIbv
0k2QEAKLe+BoSHwMWYMBMJdBDfeKN+0zBb4SPs02HFdDQ+HHyzmrF4XaTexMlUxg
BmcapygztAdOL0PWndHt2RxKXjAmcblaoQ2uGrj/KO/TzvC21iemRYPc4EKGSxwZ
/Wrhw0etxnbGpwNG9dB00WMsaChJooNG2VNZYcRQZekxZ5C2EvBieKCBGXiFG+Y8
gJXut3Y5VhIwBxLHT+1U3K75Kt3l
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:39:01 2025 by rpki-client