Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qRowzOyGG53yOXSAJ0ouWAhhIaI.roa
File: qRowzOyGG53yOXSAJ0ouWAhhIaI.roa (raw, json)
Hash identifier: 1UA+Jq0mWua6J0WkXMOHzNaxd1SeF8U5I7620qMlQAA=
Subject key identifier: A9:1A:30:CC:EC:86:1B:9D:F2:39:74:80:27:4A:2E:58:08:61:21:A2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0196C470385C4C7A6A2F9117D041EBAD9EF9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qRowzOyGG53yOXSAJ0ouWAhhIaI.roa
Signing time: Mon 12 May 2025 12:20:10 +0000
ROA not before: Mon 12 May 2025 12:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 88.216.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 05:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:70:38:5c:4c:7a:6a:2f:91:17:d0:41:eb:ad:9e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 12 12:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a91a30ccec861b9df2397480274a2e58086121a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:1e:d8:8b:b5:e3:69:11:90:92:26:bc:99:
f3:79:e3:0f:b8:e1:21:bc:a7:15:55:93:2c:29:d8:
64:57:0f:c5:4c:97:73:cf:5f:1d:3a:7a:b8:9c:00:
9c:59:4f:26:fb:38:c2:83:14:ee:31:1b:6d:e9:ae:
7c:f0:84:19:ca:c9:57:bd:06:be:91:8c:43:44:be:
9f:79:ba:0a:37:d2:0c:a5:46:96:92:2d:67:09:30:
e9:68:54:3e:5a:bd:72:57:c2:80:09:f8:70:5f:63:
9b:c3:68:d7:e5:f8:8a:77:32:35:ab:ff:56:9c:f0:
65:8b:8e:e7:a3:3b:6e:a7:8e:fa:56:c4:e1:5c:14:
86:c1:07:1d:0a:19:bd:f2:ba:46:72:91:0b:e4:b5:
9f:53:7f:c3:bb:8a:12:93:6f:47:df:f0:e7:ff:30:
79:f4:c7:e0:4c:d7:d8:79:56:84:90:bb:0d:c2:c8:
42:fd:4d:99:bc:6b:a3:4d:80:49:af:0f:f5:c2:73:
8c:8d:90:b5:81:a7:0b:e0:02:a9:ce:79:b3:4a:07:
85:9d:87:d1:ac:1e:19:95:22:5b:c4:0b:5b:ff:51:
24:44:95:c7:07:6b:3e:88:92:58:6b:c8:cd:c9:94:
f3:f1:8d:0a:f3:b6:03:61:8c:3c:e3:72:b0:96:e7:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1A:30:CC:EC:86:1B:9D:F2:39:74:80:27:4A:2E:58:08:61:21:A2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qRowzOyGG53yOXSAJ0ouWAhhIaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:c4:a4:18:a4:f8:19:5a:4d:ad:71:74:cc:ab:e6:7f:0e:
1c:3e:cd:6b:88:d2:7b:da:33:f1:52:34:7e:70:79:be:a1:dc:
ed:f5:c2:ef:fa:a2:79:17:5e:69:89:f8:df:34:09:f5:47:78:
9d:c2:20:1f:29:bf:9b:23:4e:de:12:22:7f:62:0f:43:56:82:
c0:aa:d8:62:ae:1d:69:6a:d3:fe:77:72:25:04:26:fa:bc:3c:
ad:24:93:00:1f:e4:ca:77:be:5b:49:e1:c8:da:24:9d:ef:51:
12:05:78:5a:32:33:a2:b2:7f:55:c3:69:d6:b1:35:3f:06:4f:
e5:15:a6:b9:24:8b:d3:26:dc:54:f1:60:db:8d:35:35:d2:a7:
a7:c6:2a:60:11:59:e1:6e:c0:c3:2b:fb:b3:3e:04:94:d4:34:
b4:3c:78:6a:44:f4:7d:78:af:de:58:5d:d2:aa:ee:5d:7a:db:
f4:a5:58:81:60:11:e5:a9:4b:6d:61:ae:06:a8:97:f5:45:69:
e9:28:c5:83:c0:ac:ed:e6:7a:14:5f:cf:bb:ec:98:02:e6:e4:
a4:b0:15:dd:39:36:33:65:29:98:97:f1:05:9d:41:8b:63:fe:
a8:d6:ee:2e:9e:56:50:2e:35:f0:fb:c8:4e:59:ee:8a:29:72:
0d:aa:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:05:00 2025 by rpki-client