Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ed0enA3tJXthEUW5a3fObK7VTWk.roa
File: ed0enA3tJXthEUW5a3fObK7VTWk.roa (raw, json)
Hash identifier: +iwztkY3GIDOc5BEhj0WAAX86IfuGi/bDDl+2gkK3kY=
Subject key identifier: 79:DD:1E:9C:0D:ED:25:7B:61:11:45:B9:6B:77:CE:6C:AE:D5:4D:69
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01976B268D7D62016C0D7C67BA615A50F3D2
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ed0enA3tJXthEUW5a3fObK7VTWk.roa
Signing time: Fri 13 Jun 2025 21:16:18 +0000
ROA not before: Fri 13 Jun 2025 21:16:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 144.56.20.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
144.56.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 05:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:26:8d:7d:62:01:6c:0d:7c:67:ba:61:5a:50:f3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 13 21:16:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79dd1e9c0ded257b611145b96b77ce6caed54d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:f1:2a:5a:a9:11:7d:56:6f:c5:08:1a:6f:
26:c3:b7:e6:ed:e2:7d:11:70:47:d2:2b:ea:ac:6c:
aa:85:49:f7:b9:c5:76:6d:89:73:33:34:a8:7b:4a:
cf:bc:5f:29:6b:97:09:42:92:68:3f:ef:c1:51:1c:
37:6e:1d:c0:e1:0c:c3:a1:a2:0d:54:47:25:f1:e8:
b3:2e:58:fe:cb:f2:ae:e2:0b:b9:f3:71:ef:13:0a:
24:12:68:56:fa:18:90:cf:88:72:a8:24:97:8c:b2:
8c:34:f8:58:79:b5:d3:72:5b:d0:98:0f:5f:14:12:
2c:a8:1a:44:f1:f5:4d:62:58:ad:a7:ba:54:99:0a:
08:bd:38:19:71:47:b7:63:36:b5:45:42:6a:7c:b9:
fb:ab:55:fc:11:7e:36:f9:45:d7:bc:b6:04:84:a4:
f7:19:e8:ab:f0:4a:38:2d:bb:a1:be:2b:29:f6:fb:
53:fe:78:92:d9:d4:74:93:10:ce:10:d4:2e:6b:83:
48:b8:b9:e6:73:a8:f3:6a:c7:f2:4b:5d:23:02:0f:
98:44:70:e1:fd:d5:1e:82:00:02:7a:d9:14:22:e8:
39:e0:fd:a7:19:02:cd:64:79:51:93:04:ba:3c:07:
ae:66:83:bb:91:b8:d8:2c:c7:39:fb:34:f9:aa:d4:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:1E:9C:0D:ED:25:7B:61:11:45:B9:6B:77:CE:6C:AE:D5:4D:69
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ed0enA3tJXthEUW5a3fObK7VTWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.20.0/24
144.56.33.0-144.56.34.255
144.56.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:62:26:d8:3f:7a:2f:4f:fc:06:15:cc:48:30:f5:61:11:a8:
4b:ff:a7:e8:4b:f5:a7:da:e2:f5:6f:c3:2b:ff:e1:82:ad:c0:
25:d8:b9:99:90:98:9d:7c:f6:cd:b8:5b:e8:9b:f2:f1:3d:43:
99:eb:5f:e8:ee:aa:cb:cd:20:24:d5:c1:e9:0f:34:d3:d0:a9:
5f:12:b2:d0:64:f2:49:99:88:77:5b:1d:fe:28:23:f7:b2:bb:
26:cb:7b:55:8b:de:f6:1c:b2:de:e1:66:92:56:38:21:65:91:
bb:e1:2c:ff:ce:1a:df:96:1c:12:28:76:af:75:85:6d:67:2f:
45:04:f0:e8:7e:f3:b2:07:91:87:15:93:2c:e2:f4:48:15:58:
05:36:96:86:c7:f7:24:e0:53:14:b8:22:7a:27:30:03:e2:d2:
1f:9f:30:8c:f0:9b:60:49:1d:d2:45:57:92:e3:23:14:68:6a:
76:60:9c:47:27:de:4c:0d:4f:2d:c8:8d:29:d5:2b:e9:31:dc:
27:2c:db:54:37:9e:75:09:b4:24:6e:01:dd:38:05:8e:c2:04:
ed:75:f8:b7:9f:a6:90:25:6e:1b:82:a5:9e:17:85:51:6b:ea:
6c:10:7b:65:b1:14:2c:24:2b:03:db:c4:81:d9:78:7c:90:f4:
b0:fc:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:00:22 2025 by rpki-client