Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v1QSg3J6WCOp06IAlrXazrTDOYo.roa
File: v1QSg3J6WCOp06IAlrXazrTDOYo.roa (raw, json)
Hash identifier: DPFabpZLSn98juW2KyKMIS53yHttkdzHqBQyiLqQgI4=
Subject key identifier: BF:54:12:83:72:7A:58:23:A9:D3:A2:00:96:B5:DA:CE:B4:C3:39:8A
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0197004FBC05D2EFC5EC6523B154933727C5
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v1QSg3J6WCOp06IAlrXazrTDOYo.roa
Signing time: Sat 24 May 2025 03:21:54 +0000
ROA not before: Sat 24 May 2025 03:21:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204870
IP address blocks: 5.10.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 05:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:4f:bc:05:d2:ef:c5:ec:65:23:b1:54:93:37:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: May 24 03:21:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf541283727a5823a9d3a20096b5daceb4c3398a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:c8:35:dc:5d:ea:b4:a9:24:2e:0e:6b:63:
9e:ce:04:24:3e:d7:74:3c:5f:a6:04:b8:27:9e:ef:
73:2a:b4:a3:73:70:72:be:1e:35:40:c0:ec:99:8f:
6c:7f:e3:59:99:95:04:bf:0e:bc:c1:12:6c:27:e6:
59:bc:13:43:e6:13:30:da:f6:62:d8:29:fd:03:e4:
b7:cc:87:2d:19:86:80:11:c3:4e:dc:08:39:34:ce:
4d:28:09:5f:12:94:19:ea:24:26:85:ae:10:86:5c:
a6:21:6a:fd:2d:44:4a:53:e9:ee:d8:c3:2f:b1:08:
df:c8:07:84:58:c8:6c:ca:81:7a:b9:e6:cc:f7:b2:
6b:cf:80:f2:8f:d0:2a:78:3c:6f:da:7c:8e:81:96:
f6:6c:9d:6d:08:41:d7:4a:b6:a7:2a:f3:5d:8d:af:
0c:73:51:3c:25:b3:85:74:78:99:50:fd:b3:5e:9e:
19:76:23:b3:b3:dc:f4:ba:aa:cc:75:df:4a:e1:35:
71:d0:ec:cc:ad:ea:46:60:dd:25:3a:51:62:8d:87:
e8:c8:f3:f0:4d:d9:d2:3e:fa:ed:a0:f4:2b:bf:1f:
63:64:8a:47:05:0a:d7:cb:c5:a9:e6:db:f6:6d:c0:
13:4f:05:6a:20:a2:7f:94:52:b5:86:ff:e2:0f:d6:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:54:12:83:72:7A:58:23:A9:D3:A2:00:96:B5:DA:CE:B4:C3:39:8A
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v1QSg3J6WCOp06IAlrXazrTDOYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
Signature Algorithm: sha256WithRSAEncryption
28:77:3e:5a:2a:56:3a:92:d3:a9:55:e8:6e:90:d1:b0:74:65:
f5:66:20:2a:e5:2a:92:50:ed:32:88:81:10:2b:40:63:f4:b8:
c7:21:19:66:b0:a5:f1:bf:11:64:f7:31:1b:44:14:af:e2:b4:
47:34:4e:56:51:65:6e:a0:c8:fb:bf:5f:64:cd:0c:5d:6e:f7:
ac:f5:c1:83:d8:51:df:5e:28:eb:74:61:00:1e:e7:35:01:91:
70:28:28:44:05:be:75:31:bd:72:82:4b:0d:2a:2f:ed:06:a2:
51:d1:7e:43:51:50:07:8e:f4:70:52:c4:f1:82:ac:cb:72:3d:
96:97:26:26:bb:5f:58:0d:8a:02:08:07:4c:23:b0:fd:4e:5b:
bb:14:91:3d:d7:8a:a7:05:8a:4d:11:4f:29:d3:06:ab:1c:98:
9b:09:82:f7:6b:ce:2c:71:45:63:d3:0c:f4:21:59:d2:7d:41:
99:4d:b3:8b:19:d0:b9:57:f9:91:24:83:0d:be:26:bd:2b:96:
0f:67:44:28:1d:af:df:8b:60:b1:26:a1:05:89:b9:d3:0d:57:
d1:97:61:a3:4b:22:56:fa:b6:d9:63:34:aa:bc:e4:cc:77:8f:
21:76:5a:ec:b5:0f:37:72:b8:21:c1:48:6c:54:03:9c:32:20:
f6:e3:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:57:04 2025 by rpki-client