Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/03crHQg-2mTAHI3pC_b_lPaAok8.roa
File: 03crHQg-2mTAHI3pC_b_lPaAok8.roa (raw, json)
Hash identifier: qkVzro7eFShrJXi4RbHhqCBPvma5Pa8QdEmG96k6T/g=
Subject key identifier: D3:77:2B:1D:08:3E:DA:64:C0:1C:8D:E9:0B:F6:FF:94:F6:80:A2:4F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0196DDD7341F02EF50CA18EC7C4F8B2B1AB7
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/03crHQg-2mTAHI3pC_b_lPaAok8.roa
Signing time: Sat 17 May 2025 10:43:10 +0000
ROA not before: Sat 17 May 2025 10:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215310
IP address blocks: 176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:d7:34:1f:02:ef:50:ca:18:ec:7c:4f:8b:2b:1a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 17 10:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3772b1d083eda64c01c8de90bf6ff94f680a24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:0d:a9:53:2f:41:4e:84:36:ed:17:98:0e:
9e:6b:03:5f:2d:6a:23:3f:ac:02:19:02:18:ed:2a:
60:86:da:35:f0:11:62:5b:aa:22:fc:7b:e6:c3:62:
eb:fd:1a:3b:ba:ec:0e:4f:df:ac:06:e7:fa:6d:c2:
87:ac:d3:f7:6f:39:2b:e8:3b:86:f5:8a:de:9d:32:
c8:1d:9d:11:41:d0:44:4f:16:13:d5:13:53:02:b0:
9f:f5:e0:46:49:ae:ad:ac:e7:c3:ed:f2:4a:e7:44:
9c:19:51:be:06:8d:5a:de:30:e7:34:8e:ea:cb:aa:
35:91:fa:20:4f:fb:01:a7:07:57:f8:d2:62:b7:ae:
ae:7d:85:08:fc:33:2f:a6:21:06:2f:cb:d9:07:eb:
1f:60:d3:82:18:36:c3:28:d6:ec:e0:ee:9c:48:11:
6f:b6:fe:33:15:45:94:b1:d0:af:fc:56:18:05:41:
38:4c:91:e8:37:17:75:2d:25:f3:01:59:d2:4d:eb:
0e:af:cf:1e:fa:d2:78:61:dd:94:0d:7c:55:1f:4a:
85:9d:d3:c7:7f:0f:39:e9:f9:30:f0:fc:76:10:75:
65:88:f0:0a:61:28:75:78:78:b7:d2:b9:16:89:e4:
16:46:66:36:d8:b5:c2:a5:d9:67:e7:ce:14:b6:e1:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:77:2B:1D:08:3E:DA:64:C0:1C:8D:E9:0B:F6:FF:94:F6:80:A2:4F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/03crHQg-2mTAHI3pC_b_lPaAok8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.157.0-176.46.158.255
Signature Algorithm: sha256WithRSAEncryption
94:fd:ca:c7:d9:64:5e:f2:16:18:a2:22:20:dd:9e:1b:8c:08:
a8:4d:bf:b6:23:ff:13:e4:a8:d1:e0:5a:5f:35:66:51:b3:09:
cb:e0:d7:b4:cf:dd:6a:ed:9f:22:c1:ea:00:02:e7:c4:92:d5:
94:1f:cd:f9:a0:e5:48:e9:b9:b9:ca:4f:80:7e:ce:d0:4d:78:
f5:5d:c2:f6:d6:0a:71:7e:80:9e:2c:25:54:ee:96:2b:e6:d7:
a4:d4:c9:98:36:8d:51:b8:10:38:c5:b9:87:ca:67:d6:39:c6:
01:97:11:af:d4:23:e0:a1:50:ee:cb:d4:3c:6d:24:aa:19:2e:
b2:3f:6d:2b:27:0b:b1:b2:c3:f7:88:08:f1:93:23:f9:45:7b:
6a:30:1c:c6:fa:a9:d3:9b:48:c3:7a:68:8a:ba:09:04:25:e5:
ca:40:1d:95:75:7d:d5:93:e0:8f:f2:ed:88:f1:b7:0f:ea:2b:
85:cd:cc:01:46:2d:28:0b:aa:57:ec:c4:08:de:0f:17:12:f7:
3a:fa:6d:2e:fd:0e:44:9f:b6:a8:e6:58:03:48:00:15:16:20:
65:6c:27:1c:01:d5:7b:f7:7c:7e:bc:a6:84:a3:bb:1b:bb:bb:
c2:3b:8e:db:80:d2:da:2c:d0:2f:b8:35:8c:c8:18:c1:95:64:
5a:44:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:10:08 2025 by rpki-client