Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x4Jx-QBo84jNB7Yl3OZWVaM4EaM.roa
File: x4Jx-QBo84jNB7Yl3OZWVaM4EaM.roa (raw, json)
Hash identifier: V+CAoPLFLVwwD5if3uFhw4MR41JDh+lBN6aeeo3KiiE=
Subject key identifier: C7:82:71:F9:00:68:F3:88:CD:07:B6:25:DC:E6:56:55:A3:38:11:A3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F08501B8106FF9EB70F75C57E1FBBBD4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x4Jx-QBo84jNB7Yl3OZWVaM4EaM.roa
Signing time: Wed 21 May 2025 01:46:10 +0000
ROA not before: Wed 21 May 2025 01:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200993
IP address blocks: 5.175.134.0/24 maxlen: 24
5.175.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 04:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f0:85:01:b8:10:6f:f9:eb:70:f7:5c:57:e1:fb:bb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 01:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c78271f90068f388cd07b625dce65655a33811a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:56:25:c2:c5:c4:52:d5:0a:8e:6b:8c:dc:
ec:a5:ef:a9:37:79:60:a1:48:e5:5a:6e:14:67:2b:
e7:51:fd:3f:f0:ff:88:4d:f6:d3:a5:99:61:f7:eb:
81:af:1c:5d:12:58:24:77:cb:8d:3e:88:47:f6:0f:
11:34:03:91:cc:79:86:f7:cb:08:33:df:12:ec:ac:
be:a5:db:12:76:a8:92:a7:1e:b1:41:9f:b8:70:61:
ab:99:c3:de:6a:36:8f:3a:79:02:43:f9:3d:08:ea:
3e:fe:cb:ff:30:d2:f8:b0:0d:94:2d:16:78:97:2a:
29:eb:11:1c:03:6f:ac:4d:05:00:26:7e:b7:83:ba:
a8:c0:05:58:71:e7:98:85:23:07:eb:34:1f:60:d4:
b5:ef:3a:b0:0a:a7:bd:4e:ba:a7:b0:ba:9e:f9:31:
94:1d:ef:a4:66:98:a1:72:10:5b:d9:ce:6e:16:2a:
86:51:0b:77:d4:73:4b:49:cf:b5:fa:fc:0b:22:2c:
d3:b7:cf:ac:1f:2a:69:4f:49:ff:33:fa:ad:e5:4b:
01:81:1e:1b:ad:70:0e:65:5a:18:e2:bb:8e:4c:de:
00:0b:7e:e2:99:bb:f5:6c:91:6c:51:26:1a:3c:21:
61:f2:68:21:c3:2c:34:b4:5e:52:57:1f:e6:72:70:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:71:F9:00:68:F3:88:CD:07:B6:25:DC:E6:56:55:A3:38:11:A3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/x4Jx-QBo84jNB7Yl3OZWVaM4EaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
5.175.197.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:f6:e6:2b:3b:2d:83:ed:13:0b:73:07:a0:d3:0b:0c:d3:0f:
ca:71:c3:c8:3f:9a:73:33:87:27:e4:82:ee:9f:ed:2b:e0:9c:
53:8f:37:6c:0e:b3:db:9a:59:d6:70:57:b7:6a:81:18:ad:06:
bc:ac:4c:f5:22:9f:42:41:8f:2d:6a:39:38:34:0a:af:79:18:
4c:91:c2:62:ea:1e:0e:92:f7:c8:ce:0f:9a:59:11:bf:42:11:
aa:5e:97:97:e9:22:52:c6:2f:32:fe:a7:f2:55:e0:af:db:9c:
e1:a8:52:55:85:8d:f5:50:48:a6:eb:d8:1f:e6:97:6e:82:93:
89:59:a7:b6:3f:f7:50:cc:6a:4e:a6:6c:e8:37:07:93:f3:48:
67:7d:58:57:db:45:da:bb:6d:82:c2:22:3b:47:3b:fe:0d:d4:
83:74:a2:07:1b:11:1e:72:a6:bc:95:92:5e:84:79:57:83:13:
88:e3:ff:c3:5c:1a:2f:2a:70:5a:b7:fd:0e:8e:25:6f:11:64:
7f:91:ff:54:29:ba:d3:68:f8:d0:62:83:58:4a:a4:dd:be:87:
96:fc:cc:75:db:79:41:23:26:c6:7c:fc:24:ff:b7:26:1b:38:
08:b3:85:e2:16:43:fa:1c:7f:1a:24:81:32:05:96:4b:5c:07:
ab:13:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:20:14 2025 by rpki-client