Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/DRehyAFEusf10gNz2CrTuABUsVI.roa
File: DRehyAFEusf10gNz2CrTuABUsVI.roa (raw, json)
Hash identifier: UVhKvTmLkHMS5Z1cuCI11E7junlrGf6KEusiNcTzmd8=
Subject key identifier: 0D:17:A1:C8:01:44:BA:C7:F5:D2:03:73:D8:2A:D3:B8:00:54:B1:52
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0196F6FD33C5F9166A70F73D85E7A0C80AF2
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/DRehyAFEusf10gNz2CrTuABUsVI.roa
Signing time: Thu 22 May 2025 07:55:11 +0000
ROA not before: Thu 22 May 2025 07:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.56.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 12:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:fd:33:c5:f9:16:6a:70:f7:3d:85:e7:a0:c8:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 22 07:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d17a1c80144bac7f5d20373d82ad3b80054b152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:8b:1c:52:a4:44:cd:16:c4:12:b2:b8:8c:
49:fb:45:b4:db:33:ea:4d:ca:ad:20:32:99:72:27:
f8:e1:a0:5e:04:87:78:7c:d3:4f:2d:96:ce:25:6e:
81:e8:b3:c8:27:3b:01:f6:a0:9e:52:f4:5e:35:5d:
ef:ab:5b:2d:47:0f:d8:61:f2:8b:22:29:83:8e:22:
39:82:41:36:b1:bd:e9:0b:24:d0:3b:34:bc:11:62:
8f:df:25:3b:95:68:e4:f7:27:a2:bf:43:57:83:23:
9c:78:a1:e3:1f:51:41:64:eb:c2:31:81:81:06:ce:
8b:cc:c6:6d:43:d9:e5:93:18:0b:fe:07:be:2c:52:
c2:1c:3a:f4:81:f3:cf:28:b5:ec:ef:06:6b:a9:fa:
1b:bf:7b:98:9d:f0:a2:60:85:1d:b3:38:26:24:d8:
d6:80:23:26:80:b8:50:e2:1d:24:74:48:b3:43:33:
40:90:fc:b4:f6:2d:d0:1e:b2:98:bb:8d:0d:32:08:
d4:49:45:99:94:b2:5a:94:4c:cd:b2:72:5a:91:87:
f0:eb:64:a7:0b:f6:79:7c:65:72:39:f1:5e:2a:97:
d5:00:7b:52:d5:bb:de:28:da:e4:99:bf:c6:99:14:
ea:80:26:1a:6f:79:7a:20:af:8c:19:43:5e:e8:7d:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:A1:C8:01:44:BA:C7:F5:D2:03:73:D8:2A:D3:B8:00:54:B1:52
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/DRehyAFEusf10gNz2CrTuABUsVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:13:8b:1a:a3:0d:63:88:6a:e6:aa:25:cc:3f:b2:bf:eb:4e:
13:b9:57:56:d4:79:18:20:46:99:57:87:ac:3d:6b:f0:5b:f9:
55:7c:bc:50:79:6a:a0:c2:d4:1c:d3:9c:b0:bb:e2:38:ac:ca:
91:28:c7:41:7d:5d:5f:5f:42:ab:ed:a0:f5:ee:7b:3c:bd:7b:
fb:3a:b9:6e:32:a9:3e:3c:d8:40:46:35:ad:94:37:09:df:fc:
2b:c1:73:79:d3:d6:68:56:ad:a0:fd:c5:e1:19:41:8f:73:66:
c2:52:98:bf:ce:da:89:9c:93:63:de:14:f3:eb:4a:f8:92:f8:
bc:87:4a:c6:4f:1e:de:f8:3c:17:35:71:82:ff:50:92:4c:95:
d6:fd:fb:1c:7f:b7:34:2d:56:15:c3:cb:6a:5f:05:1d:e6:fa:
01:5d:29:7b:d6:37:b0:c4:75:05:e9:3f:0f:25:33:e6:6d:e1:
be:73:db:65:d1:81:ed:69:78:25:6c:49:d6:a3:98:29:75:81:
d9:86:a6:6e:fc:b5:66:6e:24:d9:2f:03:61:b3:c6:b7:d1:7b:
91:5f:28:1a:3f:d4:e6:f5:2c:8c:6e:3d:68:84:5f:0b:c9:f4:
6f:8b:50:26:61:08:92:46:cb:26:2b:4a:69:11:27:78:65:ea:
6a:2d:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:15 2025 by rpki-client