Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/5Zm4AGj0KOuL6fkZYF1JjPrrS6E.roa
File: 5Zm4AGj0KOuL6fkZYF1JjPrrS6E.roa (raw, json)
Hash identifier: 2Tmb3cPzcsdZp3OI1/lMKVFBmTHSVeIdu1f5QGNkhag=
Subject key identifier: E5:99:B8:00:68:F4:28:EB:8B:E9:F9:19:60:5D:49:8C:FA:EB:4B:A1
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01973C0EE2F17DF11EA4B5FABA30FA6C2F33
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/5Zm4AGj0KOuL6fkZYF1JjPrrS6E.roa
Signing time: Wed 04 Jun 2025 17:48:17 +0000
ROA not before: Wed 04 Jun 2025 17:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214497
IP address blocks: 213.21.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 10:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:0e:e2:f1:7d:f1:1e:a4:b5:fa:ba:30:fa:6c:2f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jun 4 17:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e599b80068f428eb8be9f919605d498cfaeb4ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:6f:ab:33:25:25:4d:32:bd:49:1f:51:41:
e4:b2:9a:e1:4d:68:4f:2b:f0:34:d5:25:ac:43:8d:
71:29:3e:d4:6a:15:22:6d:18:1f:b8:4b:73:24:86:
e2:8b:3b:fd:b2:a3:1b:38:da:51:34:52:3f:26:90:
53:fc:b8:eb:e0:45:9a:85:91:7a:2d:4b:5c:34:49:
3d:46:29:41:74:be:19:a5:bf:b5:0f:86:04:57:da:
35:86:92:78:11:10:b3:c8:51:b9:9b:e1:80:89:92:
b6:75:eb:72:52:1f:fd:51:4c:fd:76:33:96:5b:70:
be:d9:3e:16:fb:17:75:37:82:30:e4:e4:2b:77:32:
9c:99:bf:81:47:89:d5:d2:7b:ad:f8:f8:14:45:b0:
3c:31:7f:52:e1:d2:40:59:0a:9c:60:5b:a5:39:cb:
ed:77:be:cd:a0:14:2f:f5:05:84:b8:63:ce:35:79:
99:32:62:9b:db:44:2e:da:12:35:0e:c1:3a:68:ec:
cb:e3:d5:05:49:ac:df:1b:f5:40:8c:c9:20:4d:47:
2a:26:32:95:f4:89:ab:30:44:77:e4:5f:7b:a7:66:
3a:d6:a5:64:4d:28:19:85:f2:e9:a7:98:54:cb:71:
c2:00:d9:6f:f7:61:bf:eb:f8:1d:ef:01:8f:ae:da:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:B8:00:68:F4:28:EB:8B:E9:F9:19:60:5D:49:8C:FA:EB:4B:A1
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/5Zm4AGj0KOuL6fkZYF1JjPrrS6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
Signature Algorithm: sha256WithRSAEncryption
53:fd:9e:09:51:db:6a:5f:57:5c:2f:19:37:4f:89:96:19:b4:
8e:a0:eb:ab:c9:de:8a:aa:0f:bb:6d:2c:d1:b1:cd:d2:b7:f4:
fc:6c:1a:5a:38:a2:9e:f6:79:4f:7d:f7:2b:9a:58:0e:92:44:
d7:18:00:7a:35:80:67:f1:69:94:d8:b0:aa:42:e5:b6:cd:d9:
ae:ba:45:4a:3f:8d:d3:dd:31:26:7a:80:ba:fc:e5:ff:14:cd:
0a:63:f0:0c:ef:98:c9:5d:c4:a6:57:54:c5:f6:a3:af:db:b0:
bb:1b:f8:f2:aa:9a:82:55:d2:4c:81:ae:f5:57:eb:b8:e7:05:
0f:f8:f0:bd:80:27:a3:58:17:32:21:85:26:1d:bf:b1:1f:95:
67:38:6c:ff:b9:66:d3:53:3d:f5:02:30:ae:89:dc:c9:98:9e:
77:30:cf:21:b2:f7:c1:60:22:7a:71:49:f4:99:05:aa:e5:7e:
73:f5:c2:59:f8:8d:31:ab:b7:fd:89:e2:72:a0:02:2a:29:df:
d6:9d:81:8e:30:f1:99:5f:f5:2a:e0:c4:31:3c:3b:cc:fd:20:
f1:81:d7:f7:7e:63:75:0f:02:29:9c:be:ee:5c:63:c2:f4:68:
fb:8b:17:36:1d:1e:ee:9e:8c:b3:70:33:1a:e7:06:42:56:af:
a8:f4:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:49:00 2025 by rpki-client