Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/wZ0nHBJaWiR4SODtcsyfAwi8970.roa
File: wZ0nHBJaWiR4SODtcsyfAwi8970.roa (raw, json)
Hash identifier: sVUw8YzZKKoIOhdx8aqkvDjj0/FQvEi0Dxy9OeV0dnM=
Subject key identifier: C1:9D:27:1C:12:5A:5A:24:78:48:E0:ED:72:CC:9F:03:08:BC:F7:BD
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01970DF64D7762C91EDAEFB20E2D396A7C4E
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/wZ0nHBJaWiR4SODtcsyfAwi8970.roa
Signing time: Mon 26 May 2025 18:58:54 +0000
ROA not before: Mon 26 May 2025 18:58:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.56.29.0/24 maxlen: 24
31.42.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 19:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:f6:4d:77:62:c9:1e:da:ef:b2:0e:2d:39:6a:7c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 26 18:58:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c19d271c125a5a247848e0ed72cc9f0308bcf7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:52:4e:8e:e7:4c:b1:1b:3e:93:99:01:75:
31:23:01:5e:e3:cd:11:00:3c:6e:d9:80:9d:4e:af:
f2:f3:a2:0e:01:33:a4:a4:1d:28:b0:e1:a8:8f:5b:
2b:21:af:c1:5a:fe:07:1c:c4:9e:12:fa:a4:ea:39:
f8:8a:3c:cd:24:60:bc:fc:3c:d3:f6:3f:1b:df:0a:
54:6b:8a:6d:96:b8:f6:44:ad:f5:8f:6a:08:8b:de:
e3:9d:e3:97:18:c5:59:fa:8f:49:36:2d:97:ca:99:
5c:58:93:a2:e1:ee:d8:72:8d:b6:26:ec:29:b0:bb:
2c:e6:ed:05:1d:9f:be:7c:31:1b:e1:a2:2f:a5:eb:
65:b8:70:3c:14:4b:21:d9:42:3f:9d:47:5a:1a:67:
1c:53:d9:19:e3:9b:e4:e6:02:e1:39:49:11:c7:96:
8c:95:7c:b7:b6:38:b0:a9:8b:61:45:6b:87:05:7c:
82:73:33:b9:45:5b:51:cd:12:65:09:aa:32:d4:5b:
d7:02:57:27:be:e2:ad:cc:48:50:96:0c:56:e4:9e:
c3:2d:e5:e9:eb:f7:27:89:aa:c9:4e:35:6a:f5:d5:
a3:b3:dc:38:60:b7:2b:57:73:fb:64:90:d2:3e:b8:
eb:28:49:8f:2d:8b:c2:27:96:36:cd:ee:eb:3d:3c:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:27:1C:12:5A:5A:24:78:48:E0:ED:72:CC:9F:03:08:BC:F7:BD
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/wZ0nHBJaWiR4SODtcsyfAwi8970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
31.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
55:39:fd:2f:e2:22:35:34:29:4c:ed:90:e8:24:1a:b1:16:69:
9f:58:08:5d:e5:7b:61:30:1f:49:f7:66:21:cc:ff:f2:44:f5:
6f:5a:f1:2f:05:1e:4b:b6:96:2f:84:2a:a9:dd:a4:69:0d:a3:
6e:94:5c:d5:e4:c2:5c:9d:d7:2b:cb:04:d7:90:b6:7c:61:d2:
e2:68:d8:e1:c3:9e:b5:ae:6b:62:b7:fe:13:40:4a:98:1f:8d:
4b:1b:17:0d:d6:c8:6e:c8:48:ea:df:e3:63:b1:1a:60:ad:39:
83:f1:17:28:ff:be:03:f9:8c:53:8e:67:39:8a:85:28:14:e8:
ce:bc:d4:ed:f4:6f:a8:6e:8d:32:f2:06:4e:25:11:64:d5:29:
f4:4c:7b:2b:65:bb:91:76:97:37:6d:ea:76:b3:e6:53:2b:e6:
4e:00:31:8b:14:b9:b1:e3:10:8f:86:5d:97:72:59:56:5b:ab:
31:48:55:6e:aa:e2:ca:f3:ab:b9:86:a3:dc:62:df:7f:96:9a:
0f:51:31:e8:8b:85:a3:26:c9:6a:25:c9:d9:3d:4e:18:1d:f9:
a7:cc:90:4a:4b:23:b6:2f:bc:d0:96:26:43:58:76:cb:ab:f8:
91:6c:08:85:b9:00:d6:44:18:0a:a2:45:85:16:8b:6d:81:d5:
f6:b3:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:26:18 2025 by rpki-client