Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/CQp3Yeh07Iken2pFvKqGTsvd-Uc.roa
File: CQp3Yeh07Iken2pFvKqGTsvd-Uc.roa (raw, json)
Hash identifier: X9rwASFPAfVB70/B4VX6ROjwwXeYuTjOCcLqC2CqMoo=
Subject key identifier: 09:0A:77:61:E8:74:EC:89:1E:9F:6A:45:BC:AA:86:4E:CB:DD:F9:47
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019566EA34FE766025A3317BAE2647CAA9AA
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/CQp3Yeh07Iken2pFvKqGTsvd-Uc.roa
Signing time: Wed 05 Mar 2025 15:26:19 +0000
ROA not before: Wed 05 Mar 2025 15:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.0.0/24 maxlen: 24
144.56.8.0/24 maxlen: 24
144.56.9.0/24 maxlen: 24
144.56.10.0/24 maxlen: 24
144.56.11.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
144.56.18.0/24 maxlen: 24
144.56.19.0/24 maxlen: 24
144.56.20.0/24 maxlen: 24
144.56.21.0/24 maxlen: 24
144.56.22.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.25.0/24 maxlen: 24
144.56.26.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.28.0/24 maxlen: 24
144.56.29.0/24 maxlen: 24
144.56.30.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 16:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:ea:34:fe:76:60:25:a3:31:7b:ae:26:47:ca:a9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 5 15:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=090a7761e874ec891e9f6a45bcaa864ecbddf947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:5c:8b:14:87:34:8d:4e:c6:b0:4b:2b:d6:
c3:b4:a4:89:af:3a:a1:df:63:37:e3:83:25:22:53:
d9:fd:d0:18:f5:19:4f:46:e4:a1:58:e4:61:08:c8:
f1:f5:53:4e:be:c9:ab:72:52:2c:b4:12:e0:d5:3d:
e3:c7:e3:ef:f7:11:0a:7c:e7:08:c5:91:5d:ff:4f:
3a:5f:ee:a7:b0:be:9a:0b:52:2f:d4:91:93:9e:89:
d1:03:1d:c7:95:ec:df:55:38:bb:e3:a3:81:00:13:
e6:ee:6e:1d:55:58:f9:04:83:18:bf:e9:05:00:e8:
65:81:56:d1:d9:6a:9c:bd:a8:d2:35:b9:de:fc:6a:
ee:f6:13:5c:d0:56:15:bf:e3:37:e0:12:fc:c9:43:
0a:8c:3d:a0:0f:00:a3:ae:49:7c:40:45:cd:96:b7:
45:fd:aa:4c:a0:3e:1f:d2:6c:e2:74:02:7c:44:aa:
3e:a1:b3:07:b6:1f:d0:31:6d:4c:b4:cd:d0:8d:26:
61:aa:6c:fe:aa:bb:38:34:45:c7:79:65:85:8f:b7:
ac:5b:57:2b:6c:67:59:af:0e:2c:3d:28:e6:f0:5a:
dc:ab:6b:fc:e7:e9:80:de:52:c0:93:4a:d2:22:ca:
cf:a4:6a:71:1b:e1:ff:2d:41:da:7d:3a:ba:46:f1:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:77:61:E8:74:EC:89:1E:9F:6A:45:BC:AA:86:4E:CB:DD:F9:47
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/CQp3Yeh07Iken2pFvKqGTsvd-Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.0.0/24
144.56.8.0/22
144.56.13.0/24
144.56.17.0-144.56.32.255
Signature Algorithm: sha256WithRSAEncryption
13:ac:93:f6:a4:15:a0:f8:a2:d6:1d:e3:55:33:e5:c9:f0:93:
5f:5d:82:eb:3f:f4:7d:99:a0:e1:d7:01:aa:06:d5:2c:1f:e6:
f1:01:00:7a:fb:10:b3:30:13:15:e1:f7:ba:dc:46:83:e7:65:
46:b3:2d:75:63:7d:55:4c:07:d6:25:13:1f:15:34:90:97:b3:
61:46:ae:19:3c:16:d8:54:c2:1d:9c:65:85:7d:6c:f2:78:98:
3b:9b:af:3f:eb:b7:8c:16:b5:c5:6d:28:42:4b:69:fa:21:f6:
34:96:da:14:f4:ad:a7:f9:68:66:a9:dc:9b:93:a5:78:71:22:
35:e3:7c:d3:6c:9d:3b:f9:95:8b:57:c5:c7:e2:2f:fb:e1:0c:
ac:65:1c:79:23:f0:2a:34:2f:76:9b:88:cc:e0:7c:0f:60:5b:
a0:cd:bb:4e:64:c5:5e:a9:78:6a:9f:6b:54:e1:66:d6:fb:15:
5e:8a:94:8c:87:d7:cf:e8:cd:c9:ab:d7:d2:74:f9:eb:59:2b:
70:c1:64:f4:26:34:20:f2:7a:68:db:77:94:4a:ca:f9:8b:97:
49:86:b6:ce:ff:8b:32:14:2e:b2:c6:5e:82:c7:50:78:cc:25:
60:5b:c8:01:bc:78:ae:b4:14:78:0b:0e:93:59:bb:28:ab:f6:
52:e9:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:36 2025 by rpki-client