Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/Frq1gp3GyW1UyqCnHNMjVVEC9sA.roa
File: Frq1gp3GyW1UyqCnHNMjVVEC9sA.roa (raw, json)
Hash identifier: LjOPKw2fufmm0wCAu6MWDCzQD6yFRygFjCIRjD6zgIs=
Subject key identifier: 16:BA:B5:82:9D:C6:C9:6D:54:CA:A0:A7:1C:D3:23:55:51:02:F6:C0
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 01961F7E971B3F66618B2B52C33937574B53
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/Frq1gp3GyW1UyqCnHNMjVVEC9sA.roa
Signing time: Thu 10 Apr 2025 11:38:31 +0000
ROA not before: Thu 10 Apr 2025 11:38:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51514
IP address blocks: 46.31.48.0/21 maxlen: 24
185.53.16.0/22 maxlen: 22
185.79.82.0/23 maxlen: 24
2a02:23e8::/32 maxlen: 48
2a02:23ea::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 08:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:7e:97:1b:3f:66:61:8b:2b:52:c3:39:37:57:4b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Apr 10 11:38:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16bab5829dc6c96d54caa0a71cd323555102f6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:ae:3b:81:44:11:ff:a4:b0:33:bb:9e:37:
b8:b4:d5:40:fd:bf:20:6e:fa:a8:6a:be:36:43:27:
e7:56:65:76:c9:03:20:5b:46:92:80:64:62:4b:18:
07:8d:c7:20:b1:e9:9d:2f:54:12:c1:eb:39:9c:67:
a6:d1:37:21:6a:d6:90:01:c5:d6:8e:ee:7e:85:fa:
65:ec:06:14:14:ff:f0:07:b5:99:a9:20:b0:39:38:
ae:cf:36:eb:60:cc:0e:b4:fe:43:86:5b:57:44:a7:
9d:42:f6:82:26:4a:4e:5f:38:4c:87:c9:62:ef:b6:
6f:0f:7b:3d:71:a8:80:9f:a8:de:f9:37:22:54:e1:
5a:31:38:27:6c:8f:14:86:fe:14:f0:49:c6:7f:34:
51:22:92:ea:56:d8:53:9d:0d:58:f1:f9:e4:95:a3:
88:9b:f5:4d:ff:8c:54:11:0d:63:0a:d9:48:01:97:
bf:bf:a2:ad:05:c8:0f:ad:ec:95:da:a3:ab:cd:9e:
e2:2b:97:82:c4:22:26:92:e0:ce:14:19:40:ab:6e:
da:cd:be:81:63:d2:4c:26:e1:23:ad:2b:a6:1d:29:
94:4d:1d:3c:9b:3a:00:14:33:57:3b:08:1d:12:cc:
6b:dd:6d:17:d8:4f:c0:fc:b6:a2:6f:a9:13:04:d6:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:B5:82:9D:C6:C9:6D:54:CA:A0:A7:1C:D3:23:55:51:02:F6:C0
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/Frq1gp3GyW1UyqCnHNMjVVEC9sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.48.0/21
185.53.16.0/22
185.79.82.0/23
IPv6:
2a02:23e8::/32
2a02:23ea::/32
Signature Algorithm: sha256WithRSAEncryption
19:71:6a:57:8f:98:b9:65:7b:36:4c:ae:5f:1c:02:42:07:23:
08:66:6f:9f:ff:0e:d2:ed:0e:91:2d:39:53:d4:d4:a8:46:5e:
aa:57:65:6e:62:ef:54:a2:21:4c:47:d2:a1:26:4a:65:3e:1f:
3d:0b:04:4c:ae:b2:3d:ac:bf:3c:9e:00:e2:7e:29:16:46:3c:
88:3d:ab:44:2a:b6:71:1d:d0:ce:f0:41:8c:70:d1:2d:ef:45:
61:78:8f:87:25:e5:9a:8b:9a:df:e8:b4:3e:a3:07:11:87:89:
c3:65:f6:2c:86:c1:cd:fc:5d:1d:aa:cd:5c:15:da:d7:38:6b:
12:b7:d7:7f:74:66:f5:15:99:90:4e:89:ed:a3:66:b3:c2:8b:
b1:64:49:82:e7:1b:58:4b:2d:13:2e:82:61:7f:73:94:e0:c5:
bd:93:2b:0f:f9:7e:fd:83:1c:cb:07:51:9a:8e:a4:79:1f:b7:
61:5e:a9:b1:6c:90:e5:e8:77:79:1a:bd:2c:82:60:66:23:d9:
b4:09:80:df:6c:2a:1b:1d:fc:12:87:90:a0:7d:19:cb:a4:e4:
1b:4e:57:f8:a7:0b:dd:8d:bd:f8:7f:ba:0a:fc:17:f1:b0:08:
a1:61:c0:94:41:71:ea:41:54:a3:6e:ec:49:40:4e:7e:e0:38:
c6:18:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:44:03 2025 by rpki-client