Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/c_TSc_0VUPCSIkbFn_FPzPGM0F8.roa
File: c_TSc_0VUPCSIkbFn_FPzPGM0F8.roa (raw, json)
Hash identifier: xezFlPzrJalHbTLvZaHt78Rcv/0Gq1ZU28yG/tCK5zY=
Subject key identifier: 73:F4:D2:73:FD:15:50:F0:92:22:46:C5:9F:F1:4F:CC:F1:8C:D0:5F
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 01970D284F728180F3DE678614373B066762
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/c_TSc_0VUPCSIkbFn_FPzPGM0F8.roa
Signing time: Mon 26 May 2025 15:13:54 +0000
ROA not before: Mon 26 May 2025 15:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 145.224.128.0/20 maxlen: 24
145.224.144.0/20 maxlen: 24
145.224.160.0/20 maxlen: 24
145.224.176.0/20 maxlen: 24
145.224.192.0/19 maxlen: 24
145.224.192.0/24 maxlen: 24
163.76.128.0/20 maxlen: 24
163.76.144.0/20 maxlen: 24
163.76.160.0/20 maxlen: 24
163.76.176.0/20 maxlen: 24
2a03:5d67::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 11 Jun 2025 09:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:28:4f:72:81:80:f3:de:67:86:14:37:3b:06:67:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: May 26 15:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f4d273fd1550f0922246c59ff14fccf18cd05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:14:9c:02:22:f5:6b:f8:14:72:52:46:7b:
2b:a3:4b:24:6d:12:bc:8c:11:84:fc:19:dd:dd:ab:
1a:63:44:57:66:f5:a3:38:d5:9d:de:bf:33:c5:98:
fc:3b:a8:30:b0:28:c0:aa:89:f6:59:74:48:7c:26:
89:ca:d1:6d:61:98:e9:26:45:cb:8e:d0:49:0e:80:
4c:6c:7d:27:18:3d:6f:72:73:f3:29:73:06:68:ff:
2d:f0:52:90:76:40:14:f7:ef:68:74:22:f7:fc:88:
e4:98:59:1d:30:2b:6d:22:d8:91:ec:ef:0f:77:40:
16:cb:b3:67:6b:d8:53:a2:84:3b:4a:c7:ca:98:e6:
d3:42:ca:7b:eb:01:fb:ce:0f:3a:44:b7:b6:e3:fc:
da:15:64:ca:48:3d:a9:0b:49:a0:c7:a2:67:1f:1e:
ed:0a:39:62:a4:79:17:cb:74:5c:4c:2f:2b:f5:40:
2f:4b:f1:cf:6f:0f:4a:d4:f1:8c:95:90:a9:de:d8:
8c:4b:5f:70:ad:e3:ba:8b:26:e8:1b:cd:4e:b0:61:
ad:12:b7:e6:df:0a:79:fa:02:fc:86:86:9f:4c:ae:
bd:f8:b7:99:ec:34:39:17:44:cd:0b:15:4a:0b:c8:
ab:2b:87:02:77:60:03:1c:20:76:2e:db:16:c2:b8:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:D2:73:FD:15:50:F0:92:22:46:C5:9F:F1:4F:CC:F1:8C:D0:5F
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/c_TSc_0VUPCSIkbFn_FPzPGM0F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.128.0-145.224.223.255
163.76.128.0/18
IPv6:
2a03:5d67::/32
Signature Algorithm: sha256WithRSAEncryption
53:cd:12:bf:41:4a:4e:f1:57:1f:9a:21:7e:c0:8c:68:58:d0:
69:61:cd:a1:e4:79:2f:2a:1d:6c:26:d9:39:e0:41:71:d4:04:
b6:64:f1:0c:7a:42:21:b3:b5:53:8a:df:6e:b3:03:38:48:86:
dc:0b:1d:f8:f5:29:83:67:09:bd:b6:04:a6:69:33:fa:63:46:
e9:ac:a4:a7:64:c0:65:1e:34:9c:5a:51:80:7b:fa:2f:ae:c4:
16:d8:3f:44:2e:1a:9d:26:03:94:32:e4:c3:ea:58:ec:6a:cd:
0d:1a:29:42:05:75:c0:e3:ee:60:74:f2:3f:df:9a:2d:19:3d:
68:dc:d9:1b:99:6c:a5:91:4b:5d:3c:85:2b:d1:bc:12:4c:7f:
2c:2b:f8:e5:0a:c7:bc:10:96:ce:25:72:78:44:cc:08:a8:ef:
e7:55:02:65:55:97:25:0e:5a:ff:01:72:c0:3e:ee:0a:87:88:
0c:14:9a:b9:fc:a4:b2:72:31:47:df:c6:b7:c9:00:c5:84:68:
d5:ef:64:bf:5e:58:9a:ac:bb:13:d5:f9:ee:59:65:00:bb:62:
b1:54:fd:b4:62:4c:00:93:e7:3e:23:3c:0d:d9:2a:1f:f0:c0:
c1:06:b3:ca:c9:2f:6f:26:33:e1:87:7b:b6:03:2f:bf:a8:d8:
ec:28:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:37:28 2025 by rpki-client