Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qBctsfgVgx6qgc_uy4FkQmpKm5o.roa
File: qBctsfgVgx6qgc_uy4FkQmpKm5o.roa (raw, json)
Hash identifier: EbgZCWK/PdkhXzdyWSV7yHzNy37jvCRKGYU2z9BtouY=
Subject key identifier: A8:17:2D:B1:F8:15:83:1E:AA:81:CF:EE:CB:81:64:42:6A:4A:9B:9A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196C12D40C56198B574C09F325935938014
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qBctsfgVgx6qgc_uy4FkQmpKm5o.roa
Signing time: Sun 11 May 2025 21:08:10 +0000
ROA not before: Sun 11 May 2025 21:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204044
IP address blocks: 5.231.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 12:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:2d:40:c5:61:98:b5:74:c0:9f:32:59:35:93:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 11 21:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8172db1f815831eaa81cfeecb8164426a4a9b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:b3:89:51:91:e8:c3:a0:ea:ad:54:e9:a4:
66:f6:96:c0:97:14:51:3e:db:ff:77:f9:17:34:0e:
dd:71:9a:05:d3:2b:3c:2b:a9:df:46:8c:61:d9:23:
06:89:cc:99:47:fe:ca:5b:5c:3a:f0:8f:76:3a:df:
68:5b:3b:36:9b:3a:78:9c:58:10:c0:41:b0:83:4a:
33:4c:00:5d:3b:cc:8e:9e:da:46:9b:02:61:c7:9b:
93:4c:21:df:9f:c5:01:5d:6a:ed:2f:af:91:ff:02:
fc:c0:c3:30:ad:39:be:d2:4d:4d:33:94:44:aa:36:
f3:d2:a3:ab:40:b5:06:79:30:21:49:eb:ec:25:e6:
cc:f8:b6:09:2b:c9:55:58:c5:f6:eb:68:bc:a6:0e:
07:8c:a9:aa:8a:c9:79:4a:aa:e2:97:89:0e:cd:70:
f5:e4:ab:83:61:3b:08:d4:b0:b5:10:2a:52:43:fc:
03:99:81:ab:ed:97:b3:13:b6:c8:61:c2:0b:47:44:
69:da:b0:1d:5d:c3:45:8e:26:06:ff:90:5d:80:92:
27:e5:a0:79:08:4a:18:2d:80:80:d9:91:58:93:75:
03:90:b7:e5:0d:85:ff:d7:48:78:43:32:f7:8f:aa:
28:bb:e6:7d:01:55:89:5d:f7:6a:6f:b0:c5:1f:6b:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:2D:B1:F8:15:83:1E:AA:81:CF:EE:CB:81:64:42:6A:4A:9B:9A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qBctsfgVgx6qgc_uy4FkQmpKm5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.225.0/24
Signature Algorithm: sha256WithRSAEncryption
54:62:55:e7:18:a9:11:b6:6c:6b:5c:ac:a8:f8:f3:46:30:91:
68:c8:2b:ac:50:64:ca:79:f1:63:a6:ef:78:f7:4d:49:dd:ae:
5f:49:69:50:4b:59:b6:27:a5:3e:cc:23:1e:44:34:60:84:36:
1b:6b:27:df:b0:0c:94:4f:35:64:55:a1:04:68:1a:00:70:d4:
01:43:6f:10:71:c5:57:a0:02:de:db:bf:76:b7:4a:f7:82:3e:
da:9e:0f:77:a7:da:3a:18:f3:dd:3f:76:b7:4b:d1:2b:8c:1c:
75:62:02:5e:3f:fe:5e:21:22:e5:22:1a:7e:83:af:63:79:9c:
82:46:ff:67:73:db:55:08:53:40:67:3e:fc:4b:95:e1:cb:08:
c8:30:f9:ce:e8:35:47:ba:75:31:51:a2:64:ff:78:5b:a5:97:
11:11:13:d7:d5:60:3d:01:6c:dc:fc:b5:3a:93:a1:44:cb:b5:
0d:3f:d7:0f:c4:4f:88:d4:88:4c:3c:b4:d1:f0:16:8f:0b:56:
71:e8:4e:0e:6b:b2:40:f1:f9:b8:e7:b5:ab:6c:8b:91:cc:c8:
1a:70:db:c7:c4:05:5e:78:14:09:11:65:b7:19:e4:61:94:b0:
7b:9f:f8:1d:6b:4c:9f:fe:3f:dd:28:00:60:f6:fb:1c:77:12:
4a:ce:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:52:45 2025 by rpki-client