Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/fk0tjHJtgi-ecURDd52kVgQcA8k.roa
File: fk0tjHJtgi-ecURDd52kVgQcA8k.roa (raw, json)
Hash identifier: fGBf9MLjE2lEUcI7PG8gtopan09tJ60WONnnFnd37ug=
Subject key identifier: 7E:4D:2D:8C:72:6D:82:2F:9E:71:44:43:77:9D:A4:56:04:1C:03:C9
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 0195FB00D2E249803DC3BA1646E8EBD4248F
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/fk0tjHJtgi-ecURDd52kVgQcA8k.roa
Signing time: Thu 03 Apr 2025 09:34:49 +0000
ROA not before: Thu 03 Apr 2025 09:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43994
IP address blocks: 46.19.40.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 09:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:00:d2:e2:49:80:3d:c3:ba:16:46:e8:eb:d4:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Apr 3 09:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e4d2d8c726d822f9e714443779da456041c03c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:4f:f6:b8:c3:25:26:88:d7:7e:72:d0:53:
c9:54:82:0e:8e:f8:f9:5a:dd:50:b3:86:50:6a:88:
c7:7d:31:e4:c0:2d:12:ef:7e:8c:78:7a:82:20:1b:
1e:7d:c6:88:b1:86:58:f4:9c:9f:b0:db:3b:fa:d2:
ad:3d:3f:17:79:8f:5e:8c:2d:02:e4:cc:b5:77:41:
60:2d:44:6d:78:14:af:94:df:a9:7e:bf:5b:31:99:
9a:c2:59:a4:a7:3e:32:fe:45:e0:35:5d:d9:22:85:
82:ad:47:ab:b7:40:7d:62:71:dc:f3:c8:c5:4a:ec:
bd:87:84:cf:a0:0c:c1:d3:3f:1f:5b:21:d8:ce:12:
df:e3:26:0b:23:06:ff:b5:be:0e:43:4b:01:71:9a:
42:19:0a:11:e3:d8:cb:ae:9a:89:c4:80:e0:21:34:
7e:4f:79:f4:86:83:77:1f:d7:99:df:e1:be:fe:82:
63:a6:12:76:1a:5d:80:f6:3d:62:49:1e:6d:c8:e7:
24:0d:3c:ab:c1:21:53:84:a6:fa:8b:c0:b8:b8:33:
fe:04:63:8f:7c:24:1f:8b:5f:e0:f1:13:6a:bf:04:
20:99:d8:9b:83:c7:fa:39:61:b6:74:2b:9f:4c:dd:
00:3f:b2:c7:e0:e9:6b:d3:36:a6:fa:80:1a:36:9a:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:2D:8C:72:6D:82:2F:9E:71:44:43:77:9D:A4:56:04:1C:03:C9
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/fk0tjHJtgi-ecURDd52kVgQcA8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.40.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:38:60:16:3e:d4:66:d3:a7:34:24:d5:ad:cf:f7:b7:3b:23:
85:c3:84:3d:90:c8:e4:42:99:15:53:02:61:4e:76:4f:02:0b:
37:30:79:ed:41:c1:6e:a2:1a:f5:ce:a2:eb:78:83:ab:d9:63:
d8:8b:1c:66:e6:60:a8:5e:cb:0d:bd:3d:27:97:c2:18:67:c7:
3d:ae:a7:34:b2:7a:e1:a3:fe:04:48:50:dc:68:30:f9:6b:b6:
88:a8:d5:df:14:6b:08:4b:3b:71:39:39:b6:b5:4e:45:85:3f:
69:b4:0e:17:f2:53:79:b4:42:ac:ef:8e:84:5f:1d:89:3d:03:
15:7f:ff:ca:31:64:29:20:5c:7e:3a:2a:89:79:bb:6c:b9:a2:
ae:44:17:a6:c3:d9:61:48:56:72:27:3c:b8:f0:2a:f1:0e:50:
b9:f1:1e:be:e1:7c:bb:ed:40:9c:ed:39:d8:53:a4:d2:92:8f:
35:13:e5:97:67:e5:08:7d:16:e4:35:6c:b8:2f:b9:43:5f:a7:
28:fd:b9:a0:f5:04:e9:ff:c5:89:1d:0a:11:ab:37:88:82:bc:
fe:97:1d:bf:e5:11:33:34:6f:c6:3d:8f:f0:e1:c6:21:12:42:
a6:e0:d4:70:6b:f9:3a:4f:87:54:5c:77:62:8c:7e:c3:f6:8f:
43:2b:69:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:46 2025 by rpki-client