Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/8Jzk7W6l4jT4SukmQ8fzs3fAGqM.roa
File: 8Jzk7W6l4jT4SukmQ8fzs3fAGqM.roa (raw, json)
Hash identifier: r0iLDJTHWfBms0vz833zIkqaK/bTGuFmeawWeex0ALE=
Subject key identifier: F0:9C:E4:ED:6E:A5:E2:34:F8:4A:E9:26:43:C7:F3:B3:77:C0:1A:A3
Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial: 01982D21AA4F3A7017070D1A9502CE9CC34C
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/8Jzk7W6l4jT4SukmQ8fzs3fAGqM.roa
Signing time: Mon 21 Jul 2025 13:17:17 +0000
ROA not before: Mon 21 Jul 2025 13:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8444
IP address blocks: 144.2.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 08:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:21:aa:4f:3a:70:17:07:0d:1a:95:02:ce:9c:c3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Validity
Not Before: Jul 21 13:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f09ce4ed6ea5e234f84ae92643c7f3b377c01aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:2d:5d:08:64:6d:9b:10:db:79:0c:0c:c5:
53:3c:aa:9f:94:4a:53:00:48:df:74:ef:03:99:4d:
2f:02:f7:2c:ab:24:9f:44:a0:5f:b3:4d:96:a9:da:
af:07:db:93:bf:08:44:a0:67:dc:03:ae:9c:ed:8f:
cb:02:cd:1d:77:07:23:5c:6e:7d:1f:66:5d:64:be:
72:47:75:36:95:9b:9a:f9:06:0d:32:fe:7f:60:9d:
f9:f4:e6:ce:f3:d9:c7:cd:7d:2b:3b:9c:3d:4b:9b:
0d:ae:05:c3:8b:89:8f:a6:06:db:8c:1a:10:dc:7d:
53:9d:ba:97:3f:11:23:9e:19:9d:14:c8:dd:14:65:
6c:65:95:58:c6:34:0d:35:43:c1:67:e7:10:aa:3b:
a3:6a:5f:9d:7b:ea:7d:a1:47:14:b1:15:b8:22:46:
49:10:b5:eb:3b:10:2f:5e:13:8b:b1:4a:fd:de:d8:
ed:85:8f:2c:de:a8:03:60:b8:0c:ff:6e:d8:87:80:
2f:15:59:0b:e9:9b:d2:07:a1:b2:5c:b7:2b:f3:8f:
2b:0e:db:af:74:c9:5d:a6:2e:c5:e1:8a:ab:82:3d:
6e:cf:02:c9:63:fa:f8:b9:65:a9:ee:1e:4f:19:cd:
ab:32:ba:7a:dd:9e:f9:e6:d8:7c:68:65:44:b4:c1:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:E4:ED:6E:A5:E2:34:F8:4A:E9:26:43:C7:F3:B3:77:C0:1A:A3
X509v3 Authority Key Identifier:
keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/8Jzk7W6l4jT4SukmQ8fzs3fAGqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:10:69:a7:74:51:84:d6:74:66:0d:91:ac:4b:c4:ba:dc:0a:
e8:4d:ed:f8:ed:e4:fa:15:97:18:44:37:e8:b8:8c:d1:48:e7:
29:b1:82:b7:5c:3b:30:96:24:9a:c8:c0:cb:cf:42:65:e3:af:
8d:d5:85:da:d2:46:82:03:f8:d8:ab:fb:25:b5:1d:6d:32:31:
4e:e0:a4:7a:c8:96:cd:ce:3e:a5:2d:47:d3:ac:69:4e:02:19:
8d:87:f7:c0:2d:a1:aa:1a:da:1d:31:0f:97:b8:75:23:f9:7e:
4e:4b:37:35:3c:c3:4e:f1:cb:59:06:49:8b:bd:5d:37:f7:75:
1e:8e:d9:e7:0f:b1:b1:76:10:08:13:a4:30:40:db:ba:12:3d:
ea:35:eb:24:da:f9:e7:86:cc:50:87:9a:5b:2f:1f:3b:c3:fd:
35:3a:b1:dc:73:1d:36:be:85:9c:e4:3d:21:0c:b2:a0:17:f4:
e4:24:2f:09:d6:74:f0:dc:4b:69:4f:da:2b:67:05:99:72:ee:
6f:2d:ac:3d:52:83:5b:d1:32:c6:e6:2e:ec:40:0d:a3:cc:83:
6b:47:1e:22:4b:59:4d:61:83:0f:c7:09:b5:c3:0c:e7:18:9e:
cf:61:33:8a:93:af:c3:88:20:79:e0:0d:69:90:5c:06:b3:61:
64:db:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:01 2025 by rpki-client