Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/AExM1UlAO81RgBcxR8-bvyu2IGg.roa
File: AExM1UlAO81RgBcxR8-bvyu2IGg.roa (raw, json)
Hash identifier: x3RTds/t9+qEka5buaHBynf5KKtSziyHy8E7Poc261w=
Subject key identifier: 00:4C:4C:D5:49:40:3B:CD:51:80:17:31:47:CF:9B:BF:2B:B6:20:68
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0197104FCE2017B1D22CDBB81420F8933303
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/AExM1UlAO81RgBcxR8-bvyu2IGg.roa
Signing time: Tue 27 May 2025 05:55:54 +0000
ROA not before: Tue 27 May 2025 05:55:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207840
IP address blocks: 5.10.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:4f:ce:20:17:b1:d2:2c:db:b8:14:20:f8:93:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: May 27 05:55:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004c4cd549403bcd5180173147cf9bbf2bb62068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:1d:36:35:f5:b0:51:af:24:d9:dc:0a:1f:60:
b5:2e:81:4b:d1:20:ef:88:bf:50:08:33:1e:7c:d1:
eb:fe:13:b5:d8:95:d0:ae:84:c3:21:c3:89:0b:b5:
84:0f:03:b3:4e:51:48:01:82:a0:c2:5e:30:41:53:
10:11:64:78:63:36:3d:cc:50:9e:d5:ac:85:3f:e3:
85:9d:94:84:e0:8b:8d:d2:15:d5:0c:bf:f8:b0:0e:
7e:58:e3:ab:ca:92:d0:cd:a5:54:db:29:75:9e:2f:
ca:fc:07:7e:90:aa:97:8b:72:47:8b:24:ca:49:ea:
11:dd:04:64:c4:c2:a0:9f:81:26:b2:c8:fe:d4:b6:
d1:6b:fb:99:51:a7:f2:01:d3:4a:a6:89:97:8b:ac:
a6:35:1d:3f:49:07:dd:ef:fe:90:aa:8b:10:5c:d2:
d1:54:ca:3f:37:2c:bf:c9:e7:0c:fb:3b:71:11:b3:
43:11:16:84:77:37:50:f0:c5:7d:f3:f8:c9:64:2b:
18:3b:86:67:b8:be:b9:c3:59:81:a3:22:67:25:97:
a3:43:1a:fc:a6:91:20:53:7c:27:9a:e0:bb:2f:18:
99:56:a1:48:6e:99:f6:80:28:27:7d:16:5e:de:95:
29:ee:ef:91:b4:d6:b9:e4:ae:ef:64:e7:87:da:ad:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:4C:D5:49:40:3B:CD:51:80:17:31:47:CF:9B:BF:2B:B6:20:68
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/AExM1UlAO81RgBcxR8-bvyu2IGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
Signature Algorithm: sha256WithRSAEncryption
03:85:fd:4b:f9:e1:fd:63:08:1c:3f:02:2e:9d:22:41:27:18:
79:3f:2c:fe:bb:9b:66:a4:06:be:54:db:a1:4b:31:6c:90:03:
68:b0:7c:eb:66:a4:ba:df:6e:35:78:99:c8:df:3e:22:2e:78:
5c:25:06:97:57:7d:eb:c9:42:af:d6:6c:56:f4:6c:67:ce:33:
b6:97:e1:7a:11:bd:c8:53:2e:fc:e3:39:74:9e:b1:24:e5:1a:
09:94:cf:22:98:fa:e9:c0:cb:3b:40:f0:c7:09:2e:3a:f7:25:
36:19:4c:c0:f1:19:4d:a3:3a:3c:7d:38:d6:2b:36:8f:55:a3:
ec:80:3c:f5:87:5c:e6:ea:08:6d:f5:a1:15:04:f2:b6:f6:9d:
cb:f7:9d:ad:e4:b0:33:b2:d0:57:61:96:69:b5:bf:a3:93:72:
1c:e8:f8:a3:b7:b8:7e:1e:9f:6d:75:b4:0f:74:8a:64:dd:65:
59:f3:70:eb:31:1e:65:db:c8:02:8f:39:a1:a1:d7:32:2d:ea:
f8:8d:e3:d4:6d:55:6e:46:e5:c0:31:db:05:5c:15:1e:1c:48:
ad:54:52:25:78:dd:7e:32:0f:6f:36:72:45:21:48:97:53:1a:
87:4b:a0:1a:f8:ea:13:11:0a:c0:30:7c:69:61:69:eb:71:0d:
c8:4a:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:45:16 2025 by rpki-client