Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/z2WKi9JNKGE7XG7EvBWumO70rAU.roa
File: z2WKi9JNKGE7XG7EvBWumO70rAU.roa (raw, json)
Hash identifier: dVg/OW8iysdZR9VxlthxJ07UmrDDaq8sJBNX0KAsjKE=
Subject key identifier: CF:65:8A:8B:D2:4D:28:61:3B:5C:6E:C4:BC:15:AE:98:EE:F4:AC:05
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0195B9750A7C564861ABFF1796C19D115F7E
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/z2WKi9JNKGE7XG7EvBWumO70rAU.roa
Signing time: Fri 21 Mar 2025 16:06:50 +0000
ROA not before: Fri 21 Mar 2025 16:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25160
IP address blocks: 144.56.8.0/24 maxlen: 24
144.56.10.0/24 maxlen: 24
144.56.18.0/24 maxlen: 24
144.56.19.0/24 maxlen: 24
144.56.26.0/24 maxlen: 24
144.56.30.0/24 maxlen: 24
144.56.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:75:0a:7c:56:48:61:ab:ff:17:96:c1:9d:11:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 21 16:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf658a8bd24d28613b5c6ec4bc15ae98eef4ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:97:08:f6:32:cd:3f:68:11:6e:9a:22:96:
2e:ba:9b:36:9f:bd:f2:59:f1:e2:c9:7d:4a:30:2a:
2d:43:82:80:ea:3c:8e:d0:78:b6:98:c5:d9:1f:4e:
2a:f9:a6:8f:6d:b9:8f:32:0a:e8:ad:f1:42:f6:e6:
06:87:dc:89:6d:66:95:ae:4c:2b:b1:37:87:04:c8:
65:23:0b:fb:1a:89:8f:b4:07:d8:9b:96:6a:d3:bb:
67:a7:c4:a0:59:d4:31:9c:3e:c1:3b:3e:ec:bc:f2:
7c:ac:80:e0:53:14:38:f5:84:a0:e2:ec:1f:ca:9d:
2c:8b:0e:89:a8:fb:1c:e8:1b:a9:85:f2:f7:90:a4:
d0:17:ae:65:f9:a7:e2:6e:9e:f2:96:52:b0:13:ef:
b5:ae:72:1a:0d:02:ad:ef:80:f6:a7:d9:0a:9f:d7:
22:20:97:7a:01:94:c6:ae:a8:a0:14:1a:43:0f:0d:
6e:28:f4:d5:e2:ec:09:44:35:94:30:6c:54:65:24:
af:83:32:19:19:9a:5f:56:66:be:f6:54:69:1f:35:
c4:27:3e:7f:1b:06:69:47:e9:72:dc:97:e8:3e:90:
a5:ee:81:3b:49:40:f9:df:e1:3c:ab:61:43:2c:8e:
30:b1:e8:16:c5:b2:23:d7:01:71:e1:1d:18:ab:d1:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:65:8A:8B:D2:4D:28:61:3B:5C:6E:C4:BC:15:AE:98:EE:F4:AC:05
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/z2WKi9JNKGE7XG7EvBWumO70rAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.8.0/24
144.56.10.0/24
144.56.18.0/23
144.56.26.0/24
144.56.30.0/24
144.56.32.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9e:55:b4:a2:8f:ac:24:9c:af:df:93:29:df:9c:c7:39:6d:
ab:68:40:0e:2a:4a:7e:90:9a:59:40:24:c5:cf:3e:c1:99:85:
bc:09:15:16:56:2c:37:9f:ff:21:1f:8d:56:49:8c:43:4c:de:
7d:a2:d0:38:0e:e2:ce:fc:7e:72:4a:30:cb:9e:3a:1b:0b:5a:
b8:72:f4:82:06:bb:df:2e:e8:69:89:87:24:10:ee:0c:83:b4:
1b:8b:46:3e:a4:86:21:96:32:f9:f7:3b:92:cd:20:bd:5e:e0:
5e:b7:52:c3:42:73:07:ac:35:e4:bb:20:b0:3c:3f:42:a8:4d:
99:dc:63:7f:49:8e:9c:3f:c8:6a:37:4c:92:14:37:a4:61:b0:
fa:1c:e1:1d:1a:f7:bd:ad:e4:65:00:fd:bd:38:19:6a:99:e1:
a1:74:41:58:cb:27:22:30:6e:ec:82:fd:f0:9c:bd:eb:b7:b2:
bb:33:ed:1b:7e:8c:78:08:c4:53:f1:9a:e2:c6:5d:8e:d1:1d:
1b:50:18:c6:f7:41:67:e2:92:c7:e7:39:52:53:53:27:95:67:
8c:30:96:21:50:63:11:a9:da:f3:16:d4:70:6e:fe:16:87:77:
19:01:b8:d7:d1:89:0a:26:25:ad:3c:36:13:d4:30:9f:53:36:
29:7d:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:32:26 2025 by rpki-client