Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/R4SKQ2hXzhqYy1-gt9bqhH8TReI.roa
File: R4SKQ2hXzhqYy1-gt9bqhH8TReI.roa (raw, json)
Hash identifier: 7hfqZPflhV1Qg2qVAcvcUCvFF5ut6X58uETJVFwmOq0=
Subject key identifier: 47:84:8A:43:68:57:CE:1A:98:CB:5F:A0:B7:D6:EA:84:7F:13:45:E2
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01986F0BEC93901040F677A6284C2D2CBE2C
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/R4SKQ2hXzhqYy1-gt9bqhH8TReI.roa
Signing time: Sun 03 Aug 2025 08:28:29 +0000
ROA not before: Sun 03 Aug 2025 08:28:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 10:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6f:0b:ec:93:90:10:40:f6:77:a6:28:4c:2d:2c:be:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Aug 3 08:28:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47848a436857ce1a98cb5fa0b7d6ea847f1345e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:16:71:9a:10:4f:af:30:ee:49:a5:83:a3:
b8:59:c6:dc:34:f1:1b:d6:9b:75:ab:20:90:33:a7:
60:3a:5f:21:4d:24:d2:51:7a:c8:6d:6d:28:a4:6c:
89:be:60:ec:90:a5:cb:5a:ba:7f:40:08:81:78:8e:
4d:2a:8b:f4:ed:aa:c0:ef:10:ec:d3:93:ba:2d:70:
4f:ee:ff:65:d7:28:ca:ea:29:44:e7:c0:c0:b3:83:
a3:fd:0d:ea:18:b8:ad:49:7f:17:ed:65:48:85:61:
17:e2:73:50:bc:28:43:eb:53:95:ba:ed:cd:bf:97:
b1:6f:25:38:53:e8:07:57:66:a3:f9:bb:4a:e0:9d:
70:13:5e:8c:16:49:fe:f6:34:8a:da:9e:54:66:7f:
3b:aa:0b:14:63:47:71:8f:a8:de:69:c3:a1:60:ce:
8d:ba:8d:35:6b:c3:0f:3c:27:7b:2a:43:90:ff:d7:
3d:1c:2f:07:19:52:8b:e1:34:cf:61:84:0f:dc:d5:
8c:a5:9f:bf:ff:9d:f0:86:af:4c:d1:ac:73:ef:a3:
5a:41:af:68:55:49:b7:7d:96:aa:97:b2:a4:c3:14:
a6:c3:6e:3e:6b:7f:90:6c:38:be:5c:93:62:7b:23:
bc:a3:1c:34:cd:05:55:43:5e:14:38:04:dc:a2:e3:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:8A:43:68:57:CE:1A:98:CB:5F:A0:B7:D6:EA:84:7F:13:45:E2
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/R4SKQ2hXzhqYy1-gt9bqhH8TReI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1d:ff:ee:d4:1e:cf:bc:3e:5f:75:65:fc:de:9a:09:25:82:
e4:8e:46:05:dc:c4:52:fe:9c:d2:9e:a2:a6:fb:4b:fd:44:ec:
27:b9:cc:62:c8:28:4b:55:9e:84:b0:db:a4:8f:84:64:fe:fd:
f7:ad:77:24:bb:99:4d:f7:a8:10:74:90:28:2a:80:4f:45:07:
2f:2f:9a:47:8a:f4:40:cb:79:22:f2:f5:0d:5d:9c:01:e0:a1:
5c:ae:df:e1:a4:f8:5f:15:ad:72:f8:71:67:02:b0:7d:2b:ca:
b6:31:4f:0f:99:e5:46:46:94:d4:7c:c1:ca:20:af:d4:ec:e2:
51:c9:dd:a9:42:1a:48:be:12:c6:a3:93:74:b4:0e:48:d1:4f:
ec:9e:46:37:b1:27:4b:7d:b4:8c:ef:34:29:bc:b1:fc:76:ca:
89:f6:47:79:08:d9:1f:a0:68:9a:2f:cf:53:e4:69:5c:9f:54:
9c:f2:31:4d:71:b1:a7:6c:1f:a7:b2:c1:c5:99:e9:a0:59:6f:
5c:74:d9:d4:51:ea:93:26:fe:74:3e:7b:74:77:0f:54:04:45:
f7:d9:be:ca:73:ab:66:16:b7:47:8f:4d:af:42:b7:28:0f:9f:
8d:b0:4e:ef:46:af:e5:53:5a:25:f8:80:a1:b5:bf:35:4d:08:
80:cc:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:24 2025 by rpki-client