Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/sLbh9fK74kNfMzdayKqSDIDmzgI.roa
File: sLbh9fK74kNfMzdayKqSDIDmzgI.roa (raw, json)
Hash identifier: AEPakQo4C9LlLFYvYH8Z2RC32otnV/ZSfqAWVHZfFUg=
Subject key identifier: B0:B6:E1:F5:F2:BB:E2:43:5F:33:37:5A:C8:AA:92:0C:80:E6:CE:02
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019606736BEF20C42F32F5C22050A3A1DB93
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/sLbh9fK74kNfMzdayKqSDIDmzgI.roa
Signing time: Sat 05 Apr 2025 14:55:49 +0000
ROA not before: Sat 05 Apr 2025 14:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212582
IP address blocks: 31.14.183.0/24 maxlen: 24
2a14:9680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 05 Apr 2025 16:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:73:6b:ef:20:c4:2f:32:f5:c2:20:50:a3:a1:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Apr 5 14:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0b6e1f5f2bbe2435f33375ac8aa920c80e6ce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:de:02:4b:0d:7a:f2:49:5d:33:fc:1c:b4:
18:05:40:2b:a7:25:ba:1b:f4:bd:ca:50:68:be:05:
d0:49:cb:05:46:ab:51:62:b9:dc:09:7a:c6:53:ab:
fd:4b:05:a4:b1:17:c2:9b:c5:28:4e:27:89:0b:ff:
39:c3:67:8d:0e:95:b1:f0:5f:00:6a:ba:0d:6c:39:
3d:94:55:56:e8:c2:89:51:e0:82:e0:a7:fa:eb:03:
1f:0e:99:7d:0d:27:18:78:96:23:13:b6:7c:6b:70:
b2:51:2a:50:52:31:97:dc:ad:25:ca:27:ca:9f:6f:
df:68:7e:eb:d3:34:85:e5:f6:e6:8a:ab:09:fd:86:
ff:4f:c3:11:8f:b2:89:2d:28:4f:37:ba:1d:3c:17:
d4:f0:a0:84:79:4c:bd:7b:2e:74:ec:2e:7c:67:69:
43:98:7e:75:76:79:cd:c1:ac:cc:fc:98:ba:9e:4d:
35:e7:14:32:30:d2:5c:e1:cf:81:84:ac:1b:aa:e9:
75:8b:58:cc:db:75:e0:89:d5:6d:b2:27:03:e7:74:
71:ee:9e:c0:20:1a:17:f1:2a:5a:ea:5c:6c:af:2f:
ea:25:11:be:52:11:a1:1b:35:a6:31:7c:e7:46:2a:
ba:3f:0d:7b:cd:30:48:ac:b6:02:0a:16:f6:5c:30:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:E1:F5:F2:BB:E2:43:5F:33:37:5A:C8:AA:92:0C:80:E6:CE:02
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/sLbh9fK74kNfMzdayKqSDIDmzgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.183.0/24
IPv6:
2a14:9680:1::/48
Signature Algorithm: sha256WithRSAEncryption
2c:9d:95:7b:be:56:81:44:cb:74:14:e1:db:47:9a:88:e0:02:
8b:00:4c:fc:7f:ca:1a:58:5d:13:6b:92:4a:65:0c:6c:7b:56:
20:67:55:3f:72:89:2e:bf:19:2b:22:4a:3c:0b:a5:df:3a:86:
77:41:f9:0c:78:3e:14:2f:af:dd:9b:27:2e:98:06:3f:b8:7a:
c0:16:d2:e8:c1:5c:e5:cb:b4:3d:15:a8:98:02:09:83:57:4a:
e5:8f:e3:c7:7b:f9:61:fa:e5:b5:85:c2:4e:ea:32:64:25:8a:
9e:4a:84:f6:a5:b6:83:9b:f7:54:e1:13:8b:04:ef:0d:99:4a:
fb:06:d4:d9:92:13:8e:4a:b1:89:4c:1c:e8:1a:6a:19:bf:9c:
de:66:49:05:81:f0:0a:cc:81:f1:65:63:27:65:14:13:22:c8:
01:15:ea:fe:85:08:78:77:72:5a:ff:66:f6:da:35:88:7a:9d:
3c:db:44:66:0e:9f:af:af:c2:2b:6e:41:7e:b0:54:25:af:37:
f5:07:0f:69:61:c5:3a:84:f7:99:95:98:9f:41:da:c1:d6:41:
4e:48:80:c4:ff:33:74:54:5c:c5:78:78:62:2d:0d:bc:44:63:
48:8b:bc:c2:f8:fe:87:f8:16:dd:b0:3c:89:0c:37:b3:40:52:
96:bb:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:06:44 2025 by rpki-client