Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/EnhLExm-8PQDlyuAmpRlGJnr2XA.roa
File: EnhLExm-8PQDlyuAmpRlGJnr2XA.roa (raw, json)
Hash identifier: HxtHSiYkomHUz4M6yx0wOMTMcDQOK5o9hGaUI3woGhE=
Subject key identifier: 12:78:4B:13:19:BE:F0:F4:03:97:2B:80:9A:94:65:18:99:EB:D9:70
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0195C9332F81A26649C98495A3BA59C6DD8E
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/EnhLExm-8PQDlyuAmpRlGJnr2XA.roa
Signing time: Mon 24 Mar 2025 17:28:49 +0000
ROA not before: Mon 24 Mar 2025 17:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.10.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 16:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:33:2f:81:a2:66:49:c9:84:95:a3:ba:59:c6:dd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Mar 24 17:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12784b1319bef0f403972b809a94651899ebd970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:55:f9:d9:fc:98:14:6f:fa:a8:87:1d:ee:
cf:2c:c1:84:3e:a1:36:31:cc:11:e4:5a:7f:db:ff:
ae:36:b2:87:8a:89:d1:cc:cf:28:bf:d3:20:7b:63:
46:c4:a5:20:ee:af:6e:eb:c6:66:42:e8:66:02:4f:
2a:09:0d:a8:7b:19:54:44:e1:2d:4d:50:06:d7:5c:
4b:b0:55:6a:a0:72:11:65:7e:17:a2:08:37:bf:5b:
b5:83:ca:00:e8:b0:7d:da:e0:ff:3b:73:24:d9:4b:
06:3f:d8:2b:a7:d0:35:4e:44:10:04:66:9b:d8:4e:
62:03:95:53:6a:f4:ee:69:d9:1f:95:f1:65:a0:f7:
97:fd:49:16:24:df:ce:55:27:2b:00:20:ee:41:2e:
ba:0b:e3:17:34:ad:c3:7f:88:f6:4b:32:16:bc:c5:
f6:d3:ae:a4:28:7f:79:da:6c:36:02:55:19:20:43:
8d:64:e8:78:aa:f2:a0:d6:4a:22:d7:3a:9d:4c:3b:
93:70:df:6e:d7:3f:69:65:50:e6:5c:c0:52:3f:a4:
97:e1:60:4a:45:35:a1:3f:84:e9:f1:d9:ec:3a:7b:
72:4f:57:2d:ef:9f:b3:23:f2:28:ab:83:df:04:0b:
f6:60:d2:f2:23:49:dc:fc:f7:2a:14:c4:69:56:5d:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:4B:13:19:BE:F0:F4:03:97:2B:80:9A:94:65:18:99:EB:D9:70
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/EnhLExm-8PQDlyuAmpRlGJnr2XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1f:14:ca:c3:7c:0c:61:c7:22:12:9e:ee:b3:69:26:01:b3:
5f:ef:11:2e:b0:76:f0:06:23:eb:ad:1c:ac:2c:68:8a:fa:45:
05:b6:ce:13:78:81:0d:1f:59:1b:05:1d:4b:69:11:cc:54:af:
01:bb:98:46:d0:c4:38:ab:00:ce:21:3e:6d:b6:d2:ab:f1:48:
b9:1c:82:00:a0:67:4b:d6:9b:9e:18:c9:b7:22:6a:b7:f6:4e:
0d:49:02:65:f0:08:e8:65:3f:cd:aa:01:d4:24:c0:a3:7f:22:
22:70:b5:b3:58:97:c0:73:29:3b:69:99:b3:54:1b:3c:85:43:
13:e6:e4:5f:0a:9c:67:29:e5:ba:a6:ad:4c:df:44:80:9a:9e:
ea:1d:60:df:ba:27:a5:f5:ae:f4:82:5d:8a:40:01:4a:44:9f:
3f:63:84:15:d2:6e:eb:16:63:dd:83:6f:4a:38:a7:8e:84:e9:
0e:b0:64:f1:b7:94:0e:c9:90:87:8f:5d:05:77:a4:a4:78:7b:
9a:e7:56:31:ab:6c:5b:e8:8f:27:69:ce:ef:8c:67:13:e4:df:
53:67:40:1f:77:2d:1d:2b:dd:0b:a4:2c:7d:a5:89:76:3e:03:
1b:88:86:63:cc:9a:84:2f:b2:d8:cc:d7:1e:c5:2e:cb:1b:97:
8d:79:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:37:41 2025 by rpki-client