Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nZOSdoyWKHKTgBjwOZDBlFmlryc.roa
File: nZOSdoyWKHKTgBjwOZDBlFmlryc.roa (raw, json)
Hash identifier: F1fiL/mmCO3IM71B0yAquXG4bN0kVorM1Yb2SOspAvU=
Subject key identifier: 9D:93:92:76:8C:96:28:72:93:80:18:F0:39:90:C1:94:59:A5:AF:27
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196568A108A489DF281DC99BBF94381B8E9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nZOSdoyWKHKTgBjwOZDBlFmlryc.roa
Signing time: Mon 21 Apr 2025 04:10:10 +0000
ROA not before: Mon 21 Apr 2025 04:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211301
IP address blocks: 5.175.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 07:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:8a:10:8a:48:9d:f2:81:dc:99:bb:f9:43:81:b8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 21 04:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d9392768c962872938018f03990c19459a5af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:bf:6a:da:35:0f:be:ad:ab:ce:63:c8:a6:
2d:b5:74:2a:da:ed:9e:b2:45:d0:0c:ec:54:ef:db:
a6:7e:93:23:93:26:b5:aa:03:d0:c9:01:92:25:0a:
bb:e1:db:c6:aa:28:95:08:2d:3c:5e:b6:35:7d:ce:
ea:65:8b:d5:48:f0:a6:aa:a4:1f:bd:2a:7a:a4:9d:
e4:83:35:9a:3c:eb:08:a3:78:14:43:42:bb:6c:c9:
40:dd:6a:9d:f9:b1:ac:3c:8f:ab:fd:18:cd:06:f8:
32:d3:2e:e3:58:3d:75:66:e3:b0:87:1a:e5:b5:94:
21:89:53:55:3f:24:0e:e7:f4:6f:86:e1:75:43:4d:
17:24:65:f6:30:01:5f:f2:8a:06:99:5c:f9:83:b6:
6f:62:9d:9e:f8:f9:db:56:55:7c:e7:90:2e:ec:c4:
5a:dc:dc:6a:eb:c8:b0:21:28:d8:5c:d7:6c:4e:22:
6f:cc:cd:2e:39:4b:37:63:fd:e5:80:35:8f:a1:e6:
19:8a:29:ce:5f:d4:b4:e4:19:68:d9:9b:de:2d:ed:
f8:64:fd:b9:95:83:1d:d4:f5:5d:63:77:9c:18:5d:
7a:0e:ae:94:a8:02:23:cd:37:4a:cb:91:f9:9c:67:
d4:3b:07:a6:98:4c:c9:eb:d9:31:03:83:74:2a:6d:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:93:92:76:8C:96:28:72:93:80:18:F0:39:90:C1:94:59:A5:AF:27
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nZOSdoyWKHKTgBjwOZDBlFmlryc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.249.0/24
Signature Algorithm: sha256WithRSAEncryption
31:13:fe:63:02:4c:4e:a2:13:f5:d1:33:41:c9:64:d8:c9:cb:
e0:ce:b7:66:75:bc:d6:cf:6f:6f:4f:51:4a:c6:b8:d8:0a:94:
2d:91:53:46:b3:36:4d:5e:a7:2e:e2:81:1c:b5:a2:a6:2b:ea:
52:0f:c4:6e:cd:87:72:77:8d:47:8f:d4:98:3a:0a:35:07:fe:
d0:a4:b8:e1:df:cd:09:f2:35:f2:45:1e:4c:49:73:2d:f3:54:
5f:64:ad:a7:f3:50:3d:dc:d1:02:ec:53:a3:b8:16:b1:62:d1:
78:f9:bf:32:a0:48:62:f8:57:f2:61:02:81:b6:48:86:f8:3d:
d4:06:be:7d:a0:58:15:89:84:b1:d3:fb:6d:f1:7b:2f:25:cf:
1e:61:51:7a:4d:27:b9:0e:09:b4:ad:71:d1:49:4f:cf:7e:e9:
69:3b:9a:f0:f9:2f:85:16:46:39:ca:3e:fa:fe:00:07:3b:98:
0b:69:dc:81:dc:16:04:0d:e1:6a:ca:a8:eb:a5:1c:bd:2f:d9:
64:e3:16:80:f2:71:79:85:35:e4:16:2b:60:32:72:3b:0a:a6:
25:5d:d2:a7:39:66:aa:a1:95:f3:88:95:e1:73:09:55:32:bb:
34:f2:81:17:2e:c7:46:6f:f9:36:8f:52:da:2a:01:4c:ab:2a:
8b:3a:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:45:47 2025 by rpki-client