Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/z2y1Sdqh-amhVl0Eee-ylanUuyA.roa
File: z2y1Sdqh-amhVl0Eee-ylanUuyA.roa (raw, json)
Hash identifier: mf2baOTD5Qk4QB59rgv8DYXZusUdgJZ59+YnJfgEYPc=
Subject key identifier: CF:6C:B5:49:DA:A1:F9:A9:A1:56:5D:04:79:EF:B2:95:A9:D4:BB:20
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0194387378D60960FC5ADCFAA688BF9C7A1A
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/z2y1Sdqh-amhVl0Eee-ylanUuyA.roa
Signing time: Sun 05 Jan 2025 21:51:19 +0000
ROA not before: Sun 05 Jan 2025 21:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 07 Jan 2025 21:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:73:78:d6:09:60:fc:5a:dc:fa:a6:88:bf:9c:7a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jan 5 21:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf6cb549daa1f9a9a1565d0479efb295a9d4bb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:06:86:93:7f:b8:da:1c:74:10:af:a0:3a:f7:
06:64:f2:b1:78:53:b5:bf:77:9c:6a:85:2d:18:e9:
2c:86:57:02:e6:50:28:fc:60:5c:d4:2e:53:90:bd:
33:56:c1:10:9c:ca:4e:76:f2:ed:9d:cd:b7:a8:9c:
57:c3:70:5a:4b:f8:7e:67:16:79:99:a0:77:fe:da:
3c:c3:0a:b3:c3:de:72:2e:ad:03:57:92:eb:94:c6:
b2:23:d3:38:ca:75:16:b3:b3:a4:1b:c6:d8:89:1b:
69:2a:61:53:09:80:a8:cd:81:9a:53:3b:cf:99:2f:
d2:cc:74:90:cd:fd:5e:ee:4e:48:96:57:63:df:f5:
13:fb:f0:b2:5b:0e:09:2d:6e:42:75:ce:50:a7:5f:
1e:1d:4c:d9:b4:4c:9f:22:3e:6c:19:83:6f:1d:f2:
a8:3c:3f:25:66:17:b1:ef:9b:22:2a:a9:80:90:80:
c2:13:2a:52:b3:47:6e:c2:c7:05:a9:e4:2a:80:80:
94:fb:a4:81:3a:b8:cf:1c:de:a1:88:f7:98:de:60:
f5:8b:7b:75:e4:25:c0:21:79:38:90:64:64:2f:f7:
78:6e:4d:1d:3f:fa:bb:f9:b6:2b:8e:05:3d:41:13:
44:8c:bc:ce:29:32:05:f4:74:cf:13:3b:f1:67:55:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:B5:49:DA:A1:F9:A9:A1:56:5D:04:79:EF:B2:95:A9:D4:BB:20
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/z2y1Sdqh-amhVl0Eee-ylanUuyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/20
Signature Algorithm: sha256WithRSAEncryption
00:b8:80:99:fd:9a:0a:24:4f:23:f4:a1:72:6e:d0:00:14:96:
f0:3b:82:1e:20:03:e8:e0:d5:b3:d4:f1:f7:6f:78:77:aa:c4:
4c:12:43:75:48:3d:9a:dc:31:8e:c2:20:53:53:5e:e2:28:e8:
56:4b:b9:e5:44:2f:b6:1d:0e:a3:f4:56:04:f7:f2:3a:e7:bd:
36:45:0e:3d:cd:c1:83:67:34:02:49:1f:27:f2:0c:6b:98:9d:
be:03:07:ed:25:91:bb:f4:ae:e3:b5:56:79:34:62:37:52:42:
c2:0b:11:49:3f:9d:31:f1:fc:71:29:91:59:a6:3c:d4:26:20:
37:23:5b:79:49:46:83:2b:5d:18:57:bd:3d:4c:1b:bc:49:b6:
a6:6c:71:35:cc:63:a0:2e:49:e2:70:93:56:16:47:b5:bc:44:
21:a5:7b:1e:e8:47:e3:ec:af:a4:00:0e:d1:6a:a1:a0:6c:40:
a1:23:a6:c7:20:8f:77:e6:0d:ed:6b:4f:c6:e1:82:d0:81:c8:
46:e8:9b:40:30:2e:20:9f:9c:65:91:34:1e:d0:07:26:42:39:
0b:43:36:13:95:62:34:32:86:2c:e6:b6:fb:6b:34:72:b0:20:
93:ce:03:4d:9b:fd:da:3f:0b:30:b7:48:0b:d4:c0:91:97:c5:
58:3f:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:42:53 2025 by rpki-client