Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bH9zZv5IIFezf4_ljE5I_Bbvn-8.roa
File: bH9zZv5IIFezf4_ljE5I_Bbvn-8.roa (raw, json)
Hash identifier: CWusHWszSKPmRf1CbQ2c2p/4qnvZ00vkEEsVNSOTw3s=
Subject key identifier: 6C:7F:73:66:FE:48:20:57:B3:7F:8F:E5:8C:4E:48:FC:16:EF:9F:EF
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01968094151EF528D23402AE52AB0F5C43E8
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bH9zZv5IIFezf4_ljE5I_Bbvn-8.roa
Signing time: Tue 29 Apr 2025 08:05:10 +0000
ROA not before: Tue 29 Apr 2025 08:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 123.253.212.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 29 Apr 2025 12:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:94:15:1e:f5:28:d2:34:02:ae:52:ab:0f:5c:43:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Apr 29 08:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c7f7366fe482057b37f8fe58c4e48fc16ef9fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:1f:e6:7f:e4:81:96:bd:97:5c:c6:bb:6a:
40:60:6e:78:be:5c:3b:b5:09:00:36:e0:03:12:07:
c8:c1:87:2b:fd:25:a2:5e:c7:f4:ba:99:b9:2c:c4:
ec:5e:fc:a8:76:56:19:9d:db:2e:6a:97:7b:49:ec:
62:37:8b:f6:13:bb:de:45:69:8a:eb:33:b4:dd:e8:
c2:a8:2b:5a:37:bb:dd:e7:aa:74:3a:ce:4e:8b:21:
34:43:48:ee:e6:41:fa:09:bd:b4:a4:b7:f4:53:19:
3b:ab:5d:e2:01:58:b7:20:5c:44:d6:18:fd:7c:71:
1a:46:11:f9:58:f4:55:0b:4f:55:b8:4f:1a:6c:de:
98:10:91:5f:f9:1e:81:a5:0c:77:e6:56:63:4d:c8:
fd:27:49:2d:32:ac:d1:78:db:57:cd:04:3b:9d:ad:
1f:6e:ec:e4:df:3b:ec:c2:e9:60:52:56:61:16:e4:
ae:6e:6a:f2:d5:26:bf:af:21:15:41:0e:8e:04:aa:
74:10:82:5a:84:90:91:9e:e1:1e:55:97:6a:a0:7d:
cd:72:59:dd:d6:ad:09:26:7a:2d:4a:3d:cb:84:98:
2b:18:93:69:72:12:20:52:e9:89:7f:04:ba:21:dc:
6b:9c:79:f0:db:3a:67:d0:2b:01:8c:b1:e4:67:24:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7F:73:66:FE:48:20:57:B3:7F:8F:E5:8C:4E:48:FC:16:EF:9F:EF
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bH9zZv5IIFezf4_ljE5I_Bbvn-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:c2:33:f1:18:d1:58:fa:5a:34:d9:24:74:6a:e8:3f:54:a7:
e5:1c:f8:a4:f9:a2:d9:58:ab:2f:53:84:e7:ee:01:37:9b:73:
26:7c:88:76:4e:b5:58:19:51:7c:82:20:f4:b0:12:1d:4a:53:
0a:2e:73:fb:6c:db:71:11:01:3c:96:47:0a:40:4e:6f:ca:f6:
2f:4a:5b:61:7a:fc:dd:fd:6d:b0:15:66:98:76:56:24:c6:36:
70:ca:45:45:52:8e:5a:d2:5b:1b:98:4d:a7:5f:aa:ad:be:84:
67:f4:2c:1b:b0:ca:82:c6:81:87:3d:b6:20:3e:b9:ad:02:d5:
33:12:b9:c5:17:13:5e:c1:be:c8:fa:68:ce:ef:e4:0f:8b:3a:
67:81:6f:3f:56:a4:b8:6f:54:76:d0:7a:39:c0:2d:2a:6a:c8:
b7:c1:3b:65:e5:09:2c:e5:bc:2a:90:4a:3c:52:da:68:e9:3b:
4f:ca:28:7b:13:32:b8:05:ff:aa:bb:6d:cb:4f:ca:86:8f:48:
ca:32:27:17:8a:b7:98:1b:ab:11:09:15:41:d8:e8:d2:8a:bd:
a3:3c:e6:e2:0a:6f:24:c9:33:e2:09:61:84:8d:1b:90:e0:73:
56:84:02:6f:ed:02:ba:c1:4f:23:a3:eb:dc:55:71:69:b6:a8:
1b:e6:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:22 2025 by rpki-client