Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/fPC9cloJHWs9mbEsMBDNQ_nOKco.roa
File: fPC9cloJHWs9mbEsMBDNQ_nOKco.roa (raw, json)
Hash identifier: yNrIWbnwj9VaBiKNQDJqFFHjUPV0T4osawh8N/WHnMs=
Subject key identifier: 7C:F0:BD:72:5A:09:1D:6B:3D:99:B1:2C:30:10:CD:43:F9:CE:29:CA
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 019667948B2F588669BE0329AE806F0D2D5D
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/fPC9cloJHWs9mbEsMBDNQ_nOKco.roa
Signing time: Thu 24 Apr 2025 11:35:10 +0000
ROA not before: Thu 24 Apr 2025 11:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 152.89.28.0/24 maxlen: 24
152.89.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 06:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:94:8b:2f:58:86:69:be:03:29:ae:80:6f:0d:2d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Apr 24 11:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cf0bd725a091d6b3d99b12c3010cd43f9ce29ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:d1:08:af:bd:12:ca:7b:98:1d:0c:a0:64:
51:57:44:2c:d1:e5:de:31:35:7d:56:6c:d6:53:65:
35:4c:6a:d2:85:59:45:69:9d:b5:f2:33:91:94:48:
38:9f:3d:d4:9b:5c:93:e0:c6:80:c8:a4:f2:a4:26:
e3:fd:91:ef:1d:99:6f:ea:d2:be:39:36:a8:9b:28:
e4:0c:99:73:91:46:7d:37:2c:a7:b5:f6:48:1b:34:
48:0c:ac:e9:e4:2a:de:f4:a9:48:b0:84:39:85:be:
44:ef:52:7a:a3:43:bd:e0:e2:e2:bd:2e:40:2c:93:
12:51:74:20:72:17:04:e5:53:87:5c:3f:2f:ec:83:
3e:fd:35:47:85:f5:9f:8b:41:cf:82:24:48:46:ab:
47:bb:35:ae:bb:5a:85:7d:ce:a6:46:fc:f2:80:b9:
88:65:d4:65:0d:1c:44:51:e6:47:e6:ae:c6:36:20:
fa:0b:67:8d:a9:1e:2a:64:9d:d9:c9:dc:d4:bd:5a:
58:61:1f:9c:62:67:9f:ff:8e:82:28:79:40:5c:b9:
ce:1f:72:5f:4b:34:93:d3:ba:7d:e4:81:37:07:83:
38:ca:62:99:95:e3:f5:a1:68:0b:bf:3e:01:64:97:
fe:3b:aa:98:e1:43:9a:16:96:97:f1:5e:4c:e8:b6:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:BD:72:5A:09:1D:6B:3D:99:B1:2C:30:10:CD:43:F9:CE:29:CA
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/fPC9cloJHWs9mbEsMBDNQ_nOKco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/23
Signature Algorithm: sha256WithRSAEncryption
03:2e:06:0b:de:fd:d4:7f:de:4f:c7:f2:54:69:65:3d:b3:23:
01:40:52:2a:26:f2:3a:a3:57:3f:40:7a:57:41:ee:e8:1e:f4:
7a:ae:34:ad:5a:17:68:83:6b:d6:70:1f:d8:f2:3e:6f:90:dd:
26:d1:6c:da:26:40:ba:8a:37:47:b4:82:f6:5c:10:a9:96:4d:
0d:1f:c4:3e:e8:48:f7:45:97:9e:67:bd:13:ae:ae:b5:88:59:
fe:f7:7b:2a:23:f7:f6:1d:8c:c9:9c:e2:e2:ec:43:7c:e6:c1:
d6:e8:9e:17:06:a3:41:0f:7e:9a:f1:ad:96:d8:d5:c6:2b:b1:
2b:1e:1c:1e:32:ba:ce:cd:15:b1:4f:cd:0e:89:58:25:4a:69:
8d:47:6a:63:3b:9c:3a:cc:66:18:6b:a6:50:d1:4b:7d:9d:bd:
83:0c:95:b6:fd:a0:94:1f:4f:42:69:94:57:08:17:f1:99:d5:
11:a7:2f:ee:13:63:3d:f7:11:61:f6:22:e7:c8:6d:9e:43:9f:
69:0d:8d:33:88:ee:76:3a:34:ae:f4:97:52:f5:4e:c3:aa:e5:
a7:83:3b:77:a4:5f:e7:cf:17:d3:7b:90:7f:54:46:ad:d6:8a:
7a:3c:3e:6c:c0:ec:e1:db:4b:96:f5:72:bf:93:b0:6e:e7:a6:
04:96:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:35:54 2025 by rpki-client