Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/DC5ZkjaY6CUJ9NX_foynGRGR5KE.roa
File: DC5ZkjaY6CUJ9NX_foynGRGR5KE.roa (raw, json)
Hash identifier: wvlSofESt0Ahn1I10dezmVv1HC01YoqY6jkUb5NONMk=
Subject key identifier: 0C:2E:59:92:36:98:E8:25:09:F4:D5:FF:7E:8C:A7:19:11:91:E4:A1
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 0196488B9B51AB2A133C54FC01EA08106020
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/DC5ZkjaY6CUJ9NX_foynGRGR5KE.roa
Signing time: Fri 18 Apr 2025 10:57:10 +0000
ROA not before: Fri 18 Apr 2025 10:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211316
IP address blocks: 147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 08:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8b:9b:51:ab:2a:13:3c:54:fc:01:ea:08:10:60:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Apr 18 10:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c2e59923698e82509f4d5ff7e8ca7191191e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:04:75:c2:d2:58:1f:d4:2f:d8:da:b0:22:
7f:50:ed:94:57:84:87:4f:4a:07:ab:f2:ae:ee:e7:
05:c1:f2:82:5c:6e:0d:a8:e6:42:7b:c6:ab:1d:1c:
2a:6b:74:64:3c:35:02:62:b2:92:9f:b7:bd:65:fc:
f2:4d:3a:7c:3f:84:fa:ad:8c:d1:a5:dd:2c:bb:0f:
fd:c7:b5:b8:56:6d:ad:16:f2:51:78:04:5d:16:e8:
43:79:bc:8c:b0:47:45:b4:42:3d:f8:a8:0f:c5:04:
55:67:f9:6a:a3:75:72:f0:4f:e8:04:b3:6e:3a:5a:
6e:3c:10:8a:32:3b:d7:0f:7e:67:40:35:43:10:f7:
33:6c:6a:b9:f9:16:dc:e1:8d:e3:58:cd:03:52:e6:
19:ee:2e:a2:cf:81:f1:4a:b1:1c:44:dd:6d:b5:dd:
dc:48:2e:db:8b:ab:ed:55:de:ab:0a:dd:2e:3c:14:
97:b0:16:7c:11:9e:a9:db:80:e4:cd:5d:fb:cc:83:
80:d0:c2:f3:9f:79:91:43:db:c7:1e:8f:d4:48:ab:
9a:23:57:48:5e:50:38:cb:6f:21:9d:09:d9:db:c7:
f7:25:a9:5d:ba:d2:04:7a:96:bc:88:d6:06:59:7c:
67:e3:10:17:87:2a:e2:93:8f:83:57:2b:89:56:9e:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:59:92:36:98:E8:25:09:F4:D5:FF:7E:8C:A7:19:11:91:E4:A1
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/DC5ZkjaY6CUJ9NX_foynGRGR5KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.12.16.0/20
185.101.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:2b:ef:94:78:15:53:67:f7:2f:83:58:88:b6:fd:30:01:98:
23:95:a1:c7:25:9e:af:19:7e:53:01:94:23:57:3f:99:09:1a:
85:5a:e1:ae:37:75:16:af:7b:80:53:78:8d:6a:19:46:61:68:
81:c1:c1:a2:cd:06:37:f3:fc:3e:90:eb:d9:79:6e:9d:e1:23:
33:00:4e:36:99:fe:06:91:80:df:b2:a2:f7:a1:e0:b8:c1:59:
4b:4c:73:60:e2:6d:c6:75:ff:48:6f:8c:7f:53:a5:b6:34:43:
b5:53:71:e2:24:d0:da:7f:90:4d:71:a5:3c:71:47:94:bb:9f:
3a:27:3c:95:c5:8a:d4:60:22:ce:6e:65:4f:b8:ef:8f:c7:bf:
8c:1e:3a:fb:3d:36:52:f1:1d:1d:90:f9:63:45:a0:84:2e:04:
60:2d:79:15:7c:36:95:c4:3b:32:e3:71:af:4a:03:23:13:f6:
48:bc:43:ea:a8:71:da:c8:e2:91:05:c1:aa:e7:49:dc:b3:3e:
4e:50:f2:43:ea:a3:51:4d:a2:6f:4d:ec:77:ee:d9:f1:e2:26:
11:dc:ff:05:f3:e6:fa:20:26:50:c8:02:0e:cc:51:41:58:dc:
48:b8:0c:ab:43:a5:2d:cb:1c:61:28:a3:3e:57:63:a6:9c:32:
da:e7:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:53:46 2025 by rpki-client