Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/1-EEZ-jreakOt-y6MaCooPFM2yVg.roa
File: 1-EEZ-jreakOt-y6MaCooPFM2yVg.roa (raw, json)
Hash identifier: HJbvey7oYqxcJ9G5TWQTjYBGGZYpLribf/EQL0Efp7s=
Subject key identifier: F8:41:19:FA:3A:DE:6A:43:AD:FB:2E:8C:68:2A:28:3C:53:36:C9:58
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0195DC19BF5465E7A3F73588F1DEEBD31A55
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/1-EEZ-jreakOt-y6MaCooPFM2yVg.roa
Signing time: Fri 28 Mar 2025 09:33:49 +0000
ROA not before: Fri 28 Mar 2025 09:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 5.255.57.0/24 maxlen: 24
5.255.63.0/24 maxlen: 24
91.92.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 09:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:19:bf:54:65:e7:a3:f7:35:88:f1:de:eb:d3:1a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Mar 28 09:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f84119fa3ade6a43adfb2e8c682a283c5336c958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:77:0a:22:92:82:c7:68:6b:3e:57:6b:67:
14:c5:6d:f4:74:96:fc:54:80:dd:bc:2f:81:9b:9a:
3b:03:31:17:d5:34:a6:c3:41:26:60:c7:2e:a5:ad:
72:aa:1e:9d:90:73:63:16:e3:59:8e:26:fd:be:1e:
08:fe:50:22:3d:81:77:64:54:cf:29:67:43:3e:bb:
88:67:69:18:c5:63:2c:6e:7e:af:05:7d:a5:b2:48:
f5:a2:78:27:a7:6b:61:18:ce:23:2f:4a:b4:93:a5:
ef:cd:52:f6:ca:65:55:88:a8:2b:ed:a5:d0:3a:f2:
63:01:2d:e8:1c:3a:b0:93:e9:2c:3f:26:8c:5d:20:
6f:94:73:f4:b1:d7:c7:61:ce:0b:27:96:42:1b:11:
7c:7a:39:6b:e0:02:d8:9d:82:e7:c5:18:58:2b:2d:
32:77:b4:a3:f2:fe:4a:06:a0:b1:7d:fc:5f:a2:97:
68:4c:6e:67:a9:88:d4:08:7c:2b:77:2a:6b:ff:61:
09:8b:11:a5:f4:46:3f:0c:5c:cc:52:b7:f9:63:bb:
bf:8c:be:e3:ac:8d:ce:dc:cc:5b:e7:36:57:6e:68:
5a:17:a7:5c:ac:2b:0b:12:30:3b:ae:a9:38:0d:6e:
66:9e:d4:98:0d:63:cd:c6:f7:14:27:30:8c:5b:ba:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:19:FA:3A:DE:6A:43:AD:FB:2E:8C:68:2A:28:3C:53:36:C9:58
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/1-EEZ-jreakOt-y6MaCooPFM2yVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.57.0/24
5.255.63.0/24
91.92.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:15:9e:2a:cb:da:0b:ab:1c:94:02:92:f9:4e:3b:0b:51:8d:
9d:b0:22:e0:c4:0b:d3:a6:3d:61:d9:fe:18:94:41:69:ae:84:
c1:43:da:84:a6:f2:07:be:59:61:6f:0e:85:12:a5:f7:08:d0:
7b:a4:0e:f7:2d:e3:e7:eb:c4:28:d4:47:ba:8d:55:13:3d:46:
e3:38:67:b0:48:76:67:89:27:be:a3:9b:dc:03:e1:88:73:4b:
6c:e1:c0:37:a3:45:25:9b:9e:04:dd:9a:0e:3d:79:56:00:19:
16:bc:10:0b:61:3d:05:24:72:93:bd:25:fd:84:03:c7:13:4e:
ec:b7:40:a6:3c:78:8b:d7:a7:e1:4e:9f:53:b5:c9:c9:89:a4:
14:e1:40:39:62:b5:2a:08:0b:db:1f:2b:e0:32:80:b2:8f:7d:
47:d9:b3:15:c4:0b:ad:ea:95:29:2a:b1:53:51:ab:07:34:11:
55:f3:ec:09:46:aa:6b:42:df:51:32:c2:b0:db:33:e4:bd:7a:
8b:09:08:08:9f:03:51:d6:29:bd:e7:fc:ed:88:77:09:a6:cc:
ac:36:54:c8:84:39:84:fd:0b:15:4e:f1:ec:8d:95:c0:86:37:
70:80:51:32:25:a4:2c:fb:c2:41:73:8b:b1:73:a3:fe:75:64:
db:e0:35:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 14 03:02:09 2025 by rpki-client