Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HUgypQ8l4FbSOsFzdu6tqKTNKGo.roa
File: HUgypQ8l4FbSOsFzdu6tqKTNKGo.roa (raw, json)
Hash identifier: WagIuLvWCTq83rxUr5yFgw8UDYdcNGO/EQipFha9dEk=
Subject key identifier: 1D:48:32:A5:0F:25:E0:56:D2:3A:C1:73:76:EE:AD:A8:A4:CD:28:6A
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01956C536669DAEE9EA4B2FA6F27BCFA7378
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HUgypQ8l4FbSOsFzdu6tqKTNKGo.roa
Signing time: Thu 06 Mar 2025 16:39:19 +0000
ROA not before: Thu 06 Mar 2025 16:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 144.56.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Mar 2025 15:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:53:66:69:da:ee:9e:a4:b2:fa:6f:27:bc:fa:73:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 6 16:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d4832a50f25e056d23ac17376eeada8a4cd286a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:08:b7:df:de:a9:6d:c1:f6:2e:06:04:7b:
94:d3:7e:8f:08:2f:8d:6b:a0:49:15:a6:82:a1:4a:
7b:54:71:28:cb:ef:75:17:c7:c0:87:b4:cc:e9:f7:
4b:35:04:59:a6:f4:a1:9f:b6:9b:7b:60:64:b3:2a:
e5:2a:43:da:7a:12:b2:e2:0d:e6:a8:5f:12:e9:7a:
f7:15:83:32:1f:a3:dc:20:5a:1f:54:19:6f:ba:d2:
35:ff:95:21:af:5f:17:72:66:e2:3f:6f:87:2e:9c:
bb:80:b3:ac:c4:af:86:39:cd:a0:5f:ee:9f:6f:f7:
ff:ea:b0:5e:22:e5:e0:0e:69:37:11:31:16:a9:e3:
5d:62:75:38:cd:6a:d7:45:a3:4e:d6:9b:db:78:a5:
f3:28:2e:2b:c5:1d:f2:11:0e:5b:7e:c2:09:49:ec:
01:15:ed:9c:61:fa:7a:05:6d:57:87:5a:59:d8:1b:
2c:01:5f:9f:42:69:6e:42:b0:6b:6a:58:ca:dc:5c:
33:91:1c:a2:10:9a:98:ef:92:28:c9:b9:97:35:45:
b4:e1:6b:71:02:7c:79:c5:b8:ae:2c:6f:cb:18:5e:
47:9b:73:d0:f1:3f:26:96:21:df:ce:f7:25:4e:78:
9f:80:ce:af:c3:95:55:35:e3:d5:8c:ad:03:e6:58:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:32:A5:0F:25:E0:56:D2:3A:C1:73:76:EE:AD:A8:A4:CD:28:6A
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HUgypQ8l4FbSOsFzdu6tqKTNKGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:95:a0:c9:f9:ed:dc:aa:0d:35:6a:86:26:26:69:0d:6a:30:
20:25:67:70:ed:9b:8c:b3:34:ef:df:56:ea:11:ad:9b:a7:c6:
48:84:d6:db:31:d7:21:85:53:97:21:c6:cc:6d:81:76:a9:6a:
10:51:b2:c4:d1:07:49:fb:a9:f2:d7:19:37:22:e2:b3:43:cf:
29:70:e1:51:af:0a:e0:50:e7:f6:ae:77:66:e6:af:e6:c8:bf:
00:67:f1:24:b6:ac:44:bf:6c:d3:25:07:c3:1a:b7:2e:ea:c3:
bf:90:4e:52:c6:b8:b2:94:d1:fd:cf:53:1c:27:81:2f:23:d1:
dc:c4:79:92:bf:53:ac:08:cb:6f:3f:0b:5f:bb:f2:a8:21:a3:
fc:7d:32:87:c4:08:91:1d:02:48:c1:c3:58:7e:bc:6d:c2:2c:
ea:a1:b4:7e:2f:b1:a8:2f:ff:9c:88:0b:7d:4b:9c:5c:69:48:
93:6a:bb:db:c2:18:a1:35:db:84:ce:e7:e8:86:8c:9b:35:c8:
ba:b1:ac:95:63:5e:ca:a6:67:09:40:d4:7b:b6:73:94:8f:2d:
03:17:c6:cd:f3:b9:23:87:e8:a7:39:02:e2:3f:d8:63:98:d9:
c8:1e:f0:f1:bd:4e:28:59:3b:86:fa:61:80:7c:5a:a2:89:f1:
0c:e9:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:19:24 2025 by rpki-client