Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/swPIo-LsN0b40LBi1RDC3Hc2xuw.roa
File: swPIo-LsN0b40LBi1RDC3Hc2xuw.roa (raw, json)
Hash identifier: bey22DF66DkyqqMjSUC1yEgL1koOZ0BnXpEBW5oCTJc=
Subject key identifier: B3:03:C8:A3:E2:EC:37:46:F8:D0:B0:62:D5:10:C2:DC:77:36:C6:EC
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0194D5F1D4A2D8EBCE189EC8E01CDF18EF4F
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/swPIo-LsN0b40LBi1RDC3Hc2xuw.roa
Signing time: Wed 05 Feb 2025 11:49:42 +0000
ROA not before: Wed 05 Feb 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.0.0/24 maxlen: 24
144.56.1.0/24 maxlen: 24
144.56.2.0/24 maxlen: 24
144.56.3.0/24 maxlen: 24
144.56.4.0/24 maxlen: 24
144.56.5.0/24 maxlen: 24
144.56.6.0/24 maxlen: 24
144.56.7.0/24 maxlen: 24
144.56.8.0/24 maxlen: 24
144.56.9.0/24 maxlen: 24
144.56.10.0/24 maxlen: 24
144.56.11.0/24 maxlen: 24
144.56.12.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.14.0/24 maxlen: 24
144.56.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 12:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:f1:d4:a2:d8:eb:ce:18:9e:c8:e0:1c:df:18:ef:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Feb 5 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b303c8a3e2ec3746f8d0b062d510c2dc7736c6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:92:bb:b1:66:cf:0a:17:2b:8a:98:31:05:
c8:da:6a:36:20:2f:04:c5:15:42:c9:05:1d:1f:c8:
89:8a:2c:be:c5:3b:2d:91:28:22:fe:22:ef:c1:25:
e1:df:2d:dd:09:ec:95:cc:b6:71:85:f6:a5:98:63:
9e:33:0b:b2:94:93:b9:ab:49:33:1a:4a:a1:16:46:
f0:a6:96:f5:8b:55:a7:32:e5:08:9a:a5:83:c1:49:
00:ad:82:9c:db:95:52:41:d5:95:12:a2:7b:14:0c:
bf:53:e9:f8:25:78:00:9e:98:e3:97:49:df:44:04:
4b:f7:91:e7:20:7a:cc:2d:a9:13:bc:c5:f7:bb:df:
23:56:98:73:f2:2c:f4:72:80:3b:24:e8:31:52:32:
6e:dd:dc:42:34:dc:2b:7b:e7:29:54:77:2d:de:98:
5b:d6:52:22:40:7f:81:83:8d:ab:a8:4b:40:9e:d3:
ef:31:24:5f:c0:dc:0c:bf:23:91:21:8d:a4:c8:b1:
9d:7c:f9:86:b8:7a:e4:65:39:48:58:ad:63:bf:1c:
d8:51:10:6c:c5:78:fd:33:5e:94:8a:47:f4:d0:69:
40:a9:8d:d0:e5:6d:aa:0a:ec:b9:6a:d8:f5:c5:b2:
6b:b5:6c:b3:67:56:d0:fc:74:57:3b:b7:1e:08:2e:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:C8:A3:E2:EC:37:46:F8:D0:B0:62:D5:10:C2:DC:77:36:C6:EC
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/swPIo-LsN0b40LBi1RDC3Hc2xuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.0.0-144.56.14.255
144.56.16.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:54:4c:1e:7e:8a:e1:9c:42:33:df:1b:d5:c0:24:2c:29:41:
36:8c:dc:49:c6:01:26:bb:58:f8:62:3a:94:94:cb:5d:7e:b0:
41:73:46:2a:a6:3f:2e:1b:0c:d4:46:8e:9e:ee:e0:d3:52:07:
0b:74:d5:96:ed:1d:2b:a2:83:d9:89:aa:b3:5b:e1:3d:c2:da:
31:5a:30:bc:4a:0b:38:80:c3:1e:53:06:b8:a5:d5:6c:f1:ca:
e9:6d:1a:b9:9e:d0:34:43:17:de:4b:e7:b2:59:c6:08:87:a6:
15:0c:22:6f:1d:58:03:4e:f9:49:26:40:1b:97:59:b4:00:f1:
4a:26:25:8c:f5:ea:56:d0:c3:6e:b0:67:4a:10:90:7e:dc:9e:
5f:d7:0e:a8:d3:03:72:00:d1:bb:55:71:e2:78:49:3c:2d:1a:
46:79:d0:00:d6:3b:20:4f:fc:0e:ed:4a:e8:4b:ec:47:f8:61:
4c:e7:69:72:bb:b9:a4:c8:74:e6:eb:48:0b:2a:00:99:f0:da:
80:b6:4f:84:4e:0b:8f:fe:b0:54:0b:15:b8:29:13:f3:ac:28:
a1:b0:0a:8a:34:5e:97:2a:03:bf:5f:ba:2c:1b:ab:60:75:6d:
78:2f:cf:ad:58:4c:a7:80:11:01:3f:b3:09:86:66:f5:af:e9:
07:3e:e6:79
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZTV8dSi2OvOGJ7I4BzfGO9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUwMjA1MTE0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzAzYzhhM2UyZWMzNzQ2ZjhkMGIwNjJkNTEwYzJkYzc3MzZjNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8aSu7FmzwoXK4qYMQXI2mo2IC8E
xRVCyQUdH8iJiiy+xTstkSgi/iLvwSXh3y3dCeyVzLZxhfalmGOeMwuylJO5q0kz
GkqhFkbwppb1i1WnMuUImqWDwUkArYKc25VSQdWVEqJ7FAy/U+n4JXgAnpjjl0nf
RARL95HnIHrMLakTvMX3u98jVphz8iz0coA7JOgxUjJu3dxCNNwre+cpVHct3phb
1lIiQH+Bg42rqEtAntPvMSRfwNwMvyORIY2kyLGdfPmGuHrkZTlIWK1jvxzYURBs
xXj9M16Uikf00GlAqY3Q5W2qCuy5atj1xbJrtWyzZ1bQ/HRXO7ceCC4hDQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLMDyKPi7DdG+NCwYtUQwtx3NsbsMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvc3dQSW8tTHNOMGI0MExCaTFSREMzSGMyeHV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwOQOAME
AJA4DgMEAJA4EDANBgkqhkiG9w0BAQsFAAOCAQEA01RMHn6K4ZxCM98b1cAkLClB
NozcScYBJrtY+GI6lJTLXX6wQXNGKqY/LhsM1EaOnu7g01IHC3TVlu0dK6KD2Ymq
s1vhPcLaMVowvEoLOIDDHlMGuKXVbPHK6W0auZ7QNEMX3kvnslnGCIemFQwibx1Y
A075SSZAG5dZtADxSiYljPXqVtDDbrBnShCQftyeX9cOqNMDcgDRu1Vx4nhJPC0a
RnnQANY7IE/8Du1K6EvsR/hhTOdpcru5pMh05utICyoAmfDagLZPhE4Lj/6wVAsV
uCkT86woobAKijRelyoDv1+6LBurYHVteC/PrVhMp4ARAT+zCYZm9a/pBz7meQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:49 2025 by rpki-client