Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/IPNs4r7YUZxV5NpIkqvmn9Gf_j8.roa
File: IPNs4r7YUZxV5NpIkqvmn9Gf_j8.roa (raw, json)
Hash identifier: eljg7xKNgSCPrc+bo072dY8jKxGWkC+mVsqyqY2hDQA=
Subject key identifier: 20:F3:6C:E2:BE:D8:51:9C:55:E4:DA:48:92:AB:E6:9F:D1:9F:FE:3F
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019687F213969F5E25FEA8F64403448676D7
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/IPNs4r7YUZxV5NpIkqvmn9Gf_j8.roa
Signing time: Wed 30 Apr 2025 18:25:10 +0000
ROA not before: Wed 30 Apr 2025 18:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 144.56.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 19:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:f2:13:96:9f:5e:25:fe:a8:f6:44:03:44:86:76:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 30 18:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f36ce2bed8519c55e4da4892abe69fd19ffe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0e:25:84:d7:96:e5:7d:05:8c:70:24:6f:44:
d0:19:0f:51:1d:75:8f:3a:97:c7:ea:c7:1a:0f:ba:
59:ad:e8:06:8a:cb:e9:12:2b:0b:62:d1:44:ee:cd:
19:23:62:5e:69:cd:58:16:57:42:3e:2b:47:31:1f:
7e:03:21:80:00:6e:29:b2:57:b6:04:b7:97:f9:bc:
3c:ef:27:42:fb:b4:c9:0b:13:81:6c:e4:d6:1b:ec:
17:7e:36:bd:f5:84:0e:53:10:e8:4e:e1:71:f4:ca:
5e:ae:98:cc:34:ce:c4:f5:91:1d:eb:8e:b2:6e:12:
dd:0a:90:dd:3b:88:1f:32:d0:d7:42:63:06:4c:f4:
ca:46:97:fd:3b:f7:63:75:ab:b8:65:31:f3:c0:38:
53:0b:96:b7:1e:b5:bd:ab:45:ff:a9:18:45:b2:89:
22:45:96:a4:10:3d:41:cf:f8:7c:75:02:d3:13:4d:
fc:7a:f7:f8:ed:a0:92:a9:08:f9:29:61:8f:0a:f5:
6d:2a:0e:07:83:74:c5:5b:69:33:cb:15:fe:55:6b:
50:5f:4b:fc:72:4c:41:4f:5c:1e:d2:5e:e7:17:6f:
d4:66:f6:bc:70:4d:c5:9e:1c:06:d3:35:1f:13:c3:
fa:a5:d4:7a:ab:42:05:1f:51:9a:2b:d1:5e:56:f9:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:6C:E2:BE:D8:51:9C:55:E4:DA:48:92:AB:E6:9F:D1:9F:FE:3F
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/IPNs4r7YUZxV5NpIkqvmn9Gf_j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.20.0/24
Signature Algorithm: sha256WithRSAEncryption
78:08:b0:0b:bb:b9:e5:51:b7:88:3f:4f:5f:36:2d:d7:1f:43:
7b:e1:93:0d:0f:f7:c7:f9:3c:3b:af:d7:e8:6a:f5:7e:6e:a7:
fb:a8:ee:37:3f:7f:d4:f3:99:36:f1:63:84:47:a7:a7:00:fa:
77:12:4a:06:2b:fd:ae:27:fd:3a:dc:bc:4d:d0:29:64:68:61:
c6:75:e9:1e:a1:28:c4:20:ed:fe:e2:5c:83:fc:27:76:fd:0d:
21:c9:fa:8a:13:e9:7d:9a:d6:e3:6c:44:9b:8a:a0:d7:03:28:
f9:2d:30:68:8d:28:9e:05:d2:8f:0d:1e:e1:de:5c:c0:89:84:
ef:32:96:60:f4:e9:4e:59:47:b3:6a:09:07:f8:42:9f:0a:68:
4a:25:af:d7:2a:91:61:fd:04:87:fc:25:9b:ef:22:3d:6c:00:
3e:10:4a:a9:02:ef:4b:f7:90:ab:60:21:81:e4:35:94:fc:ba:
7d:cc:af:f9:82:85:ab:38:45:14:35:aa:47:7e:32:84:11:11:
ac:96:05:c0:63:6f:9a:77:79:ac:b3:15:1a:5e:c2:6f:51:25:
4d:e4:bd:4c:98:a4:2f:81:10:81:df:8b:24:bf:f3:e8:27:58:
84:f6:a8:bf:92:99:da:b7:fe:6a:f4:37:96:3a:99:10:da:4a:
a4:15:15:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:32:52 2025 by rpki-client