Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/JFuBA6zq_1SraP7nX-kvyzmsBKI.roa
File: JFuBA6zq_1SraP7nX-kvyzmsBKI.roa (raw, json)
Hash identifier: P6AnRi3CZ4/Euz9WTh+Y0aYwVc0QP9TFGM0quAzuDck=
Subject key identifier: 24:5B:81:03:AC:EA:FF:54:AB:68:FE:E7:5F:E9:2F:CB:39:AC:04:A2
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019734FBF95ED8E63129B0FD0C66270DB93E
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/JFuBA6zq_1SraP7nX-kvyzmsBKI.roa
Signing time: Tue 03 Jun 2025 08:50:17 +0000
ROA not before: Tue 03 Jun 2025 08:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.216.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 08:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:fb:f9:5e:d8:e6:31:29:b0:fd:0c:66:27:0d:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 3 08:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=245b8103aceaff54ab68fee75fe92fcb39ac04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:cc:a6:f1:05:b1:3e:bd:c6:35:d1:a9:62:
8e:42:17:62:21:a7:47:0d:08:56:e9:47:be:55:69:
40:9b:35:b4:c7:5f:09:15:0c:ae:fd:7c:da:48:4a:
5e:2e:f5:1d:0f:ac:93:bc:4a:5c:0f:62:3a:d6:80:
b5:24:b0:fa:8d:ed:34:8e:04:85:af:58:5c:34:83:
85:09:3e:e6:13:fd:42:dc:27:95:6d:86:c0:54:32:
b6:67:9f:3a:19:38:01:f9:47:db:55:62:b5:92:33:
8f:5d:d4:2e:12:3a:d6:d4:0c:0c:2f:62:c2:bd:fc:
20:ec:80:58:d6:6b:a1:5a:9c:92:05:0a:a4:98:86:
f4:a9:55:a0:bd:27:d7:5c:4c:6e:74:f8:30:f0:a9:
48:ee:ce:eb:98:3d:a8:e9:6f:d9:95:69:5c:d5:39:
d6:a5:16:37:43:04:42:6c:58:0b:3c:31:56:1d:5c:
e9:c9:6d:a5:93:49:e1:ec:da:21:93:be:e0:39:11:
8a:0d:8f:67:e1:30:6e:f5:33:9e:c7:0f:b1:e7:fe:
f8:0e:b4:4a:23:99:f2:a8:c0:09:e1:b1:62:8e:3d:
d4:bf:4a:42:d5:0d:0a:37:0c:83:a5:b7:37:f4:1f:
9c:5e:c0:8e:5d:d3:84:b4:a2:cb:6e:2a:03:59:c5:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:81:03:AC:EA:FF:54:AB:68:FE:E7:5F:E9:2F:CB:39:AC:04:A2
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/JFuBA6zq_1SraP7nX-kvyzmsBKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
33:03:a5:d2:ae:a5:93:2a:16:ba:a7:0b:d5:b9:8d:5f:6a:7f:
3a:f8:9a:ec:1e:c2:95:e2:73:e7:7d:a7:49:be:e5:9f:1d:bd:
e9:9c:f0:90:79:58:99:56:47:40:a8:ec:e0:10:8c:67:3f:df:
94:d9:c2:b1:fa:72:72:a3:8f:b8:07:f9:99:e8:75:09:a8:39:
1e:02:b6:43:85:aa:1d:0e:57:82:00:b6:3b:18:fb:d0:ae:ac:
ba:8e:3a:d3:6f:56:f3:54:b4:f7:51:59:fb:86:d5:d7:d4:c7:
51:e3:5e:65:a0:a6:e2:d0:5a:35:2a:78:24:ce:ae:6c:2f:ab:
22:73:a6:88:0d:0e:19:42:18:8d:2e:7e:e9:be:bf:90:b4:c3:
76:59:20:65:77:08:d8:af:b4:c7:cf:d6:3c:8b:20:18:34:48:
a2:1b:20:b5:f2:fa:ec:26:c5:5a:84:60:e9:0a:46:0d:8d:2e:
90:d3:b0:18:fc:ee:1f:b4:82:90:d8:50:51:d6:87:ca:e5:12:
de:51:e9:b6:a5:66:c5:1f:1b:63:ae:73:09:e9:e4:40:42:0c:
e6:0e:d3:6d:81:7c:7c:66:8b:99:5f:4b:1b:ba:d2:e3:a9:1e:
98:d2:41:6e:ab:21:89:d6:1f:12:68:0a:8e:6e:85:43:88:80:
39:d3:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:58:41 2025 by rpki-client