Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/FY6AiSDXfsAZUvfahYyQXEdARhU.roa
File: FY6AiSDXfsAZUvfahYyQXEdARhU.roa (raw, json)
Hash identifier: aOK4lpP9BDsdN01dInSo4eTHYXPeSOaERnBuJ+0vEBs=
Subject key identifier: 15:8E:80:89:20:D7:7E:C0:19:52:F7:DA:85:8C:90:5C:47:40:46:15
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0196A40586953B610A4A2D32EF7C17D74D46
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/FY6AiSDXfsAZUvfahYyQXEdARhU.roa
Signing time: Tue 06 May 2025 05:15:47 +0000
ROA not before: Tue 06 May 2025 05:15:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 213.145.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 14:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:05:86:95:3b:61:0a:4a:2d:32:ef:7c:17:d7:4d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 6 05:15:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=158e808920d77ec01952f7da858c905c47404615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:d1:46:b3:4e:50:6d:b4:73:fa:7f:e3:e6:
f8:5b:0c:ca:d8:b5:d5:81:63:06:4f:de:d4:bd:6f:
52:c5:a8:17:80:72:7a:19:58:7c:9b:61:a5:02:8b:
c0:32:79:83:45:80:30:3a:db:51:05:54:48:e5:ac:
33:36:93:29:dd:49:64:c3:d4:97:49:f9:c0:42:6a:
cb:2f:55:02:f6:9c:f2:5d:85:be:6f:fc:3d:5c:54:
d3:34:58:b0:65:ae:b9:84:47:f3:33:da:f9:bd:b9:
3a:2d:d0:9a:d0:99:fb:f8:eb:18:55:f4:13:06:16:
ec:6f:86:47:b5:f1:38:0e:d1:62:52:57:db:e6:df:
f2:62:c4:01:be:79:e0:14:87:d0:8f:3d:04:7b:89:
1d:d9:56:c8:78:1b:fe:bb:de:84:cf:3e:6e:c3:18:
1f:c5:a2:28:42:c0:93:2c:75:9d:ff:4a:fe:74:95:
b0:5f:6c:f7:51:f8:6e:cf:e8:52:77:1c:fc:97:21:
3a:d3:9d:b9:95:8a:e5:3a:df:2d:46:9e:ef:e8:7b:
e8:22:2b:c7:f0:10:26:45:9f:29:52:c2:4c:3c:a8:
7e:7e:a5:43:66:eb:dc:4f:24:79:51:6b:f1:d0:0f:
86:97:d5:87:c8:1f:39:ae:2c:08:04:9e:06:1b:08:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:80:89:20:D7:7E:C0:19:52:F7:DA:85:8C:90:5C:47:40:46:15
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/FY6AiSDXfsAZUvfahYyQXEdARhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d4:57:94:22:d1:8f:90:a7:50:93:90:17:72:1e:8c:7c:82:
c5:17:1f:f3:20:16:df:f9:b3:2a:1d:30:69:7e:1c:6e:04:f1:
78:b7:33:2a:4e:40:d1:2f:0c:30:e0:e9:af:46:fd:82:aa:17:
86:7f:4e:39:19:f4:91:dc:61:c9:06:c3:11:cb:97:1a:7d:79:
ab:0a:c3:ca:6d:62:5f:e6:5d:4e:96:8c:00:ae:64:e3:3d:f3:
c2:97:10:7f:35:b4:fd:14:43:d7:90:84:7b:b7:d7:17:db:66:
7f:2f:ee:9e:31:e9:2e:f1:f6:40:e1:9e:27:c0:6d:09:33:cd:
d7:1b:9c:b8:82:70:27:8c:7d:17:b6:37:5b:46:35:ae:62:f8:
a1:57:33:60:ab:fb:fe:37:35:7b:c5:50:b9:92:b9:9f:65:35:
ec:e0:f7:19:f3:3b:e2:a4:bf:e6:3c:8f:a5:9f:a1:94:01:5c:
12:8f:81:83:56:88:47:07:88:27:2d:20:f8:c9:97:fe:f1:d8:
38:3c:e8:c1:e4:8b:a2:b6:6e:d2:5e:69:ef:3b:f1:5f:c4:ec:
ad:e7:17:1b:27:cb:fb:5f:15:8c:8e:e3:c8:46:0e:59:72:42:
e2:a0:ed:f2:42:95:b4:be:53:be:ba:e1:22:10:a1:1f:84:19:
58:a7:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:44 2025 by rpki-client