Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/91T4847Ebe1fMwOPESpUFk3ffjk.roa
File: 91T4847Ebe1fMwOPESpUFk3ffjk.roa (raw, json)
Hash identifier: y6fRZIYaZMtgrOvx9dHuoyar7//cZeA/0iCyiGVdZGo=
Subject key identifier: F7:54:F8:F3:8E:C4:6D:ED:5F:33:03:8F:11:2A:54:16:4D:DF:7E:39
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0196EA4B128B1EA9ABF2D24D5FC58E5A1193
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/91T4847Ebe1fMwOPESpUFk3ffjk.roa
Signing time: Mon 19 May 2025 20:45:10 +0000
ROA not before: Mon 19 May 2025 20:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
144.56.42.0/24 maxlen: 24
144.56.43.0/24 maxlen: 24
144.56.44.0/24 maxlen: 24
144.56.45.0/24 maxlen: 24
144.56.46.0/24 maxlen: 24
144.56.47.0/24 maxlen: 24
144.56.48.0/24 maxlen: 24
144.56.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 08:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ea:4b:12:8b:1e:a9:ab:f2:d2:4d:5f:c5:8e:5a:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: May 19 20:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f754f8f38ec46ded5f33038f112a54164ddf7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bc:a9:cf:e7:5b:d7:9d:a0:e4:04:a9:1f:6e:
d3:4a:7b:4b:d6:63:b6:3d:41:f1:a8:fc:25:95:0d:
1b:66:f0:3a:80:92:a4:27:ae:ce:17:3c:cc:91:fa:
d2:c2:63:e6:ff:8d:df:d5:f7:22:96:7c:84:d2:4e:
e8:75:51:60:5b:ba:b1:70:49:59:96:a4:a7:00:b1:
a9:ec:43:25:eb:3a:da:04:a6:fd:87:a7:13:63:29:
bc:c2:75:fc:69:cc:42:df:2a:a8:23:6d:bc:d6:16:
2e:5b:d0:b3:8c:fe:97:06:a8:89:dd:0f:4c:1f:a6:
56:24:61:ee:29:98:4d:7d:38:72:ad:ee:f8:6f:8c:
6c:b9:03:10:74:1a:d0:35:2e:ea:7b:68:81:48:1a:
f9:39:2d:42:22:ba:af:63:d8:3d:68:5a:56:a5:09:
02:32:81:34:4b:9b:bf:ef:3d:d2:69:06:8c:80:2d:
67:13:3e:2a:d4:bf:7e:20:4b:d1:18:e4:31:e6:5c:
a5:af:55:dc:cd:2d:44:49:b2:74:20:d0:f5:83:82:
37:2a:b4:2b:4c:a5:5f:62:29:5d:e3:01:9c:75:0d:
4c:f1:fc:67:fe:e3:ce:4a:06:1d:37:68:e4:3b:ce:
ce:62:50:39:1e:69:bf:c0:7c:03:46:24:b4:f8:cb:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:F8:F3:8E:C4:6D:ED:5F:33:03:8F:11:2A:54:16:4D:DF:7E:39
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/91T4847Ebe1fMwOPESpUFk3ffjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.17.0/24
144.56.33.0-144.56.34.255
144.56.42.0-144.56.49.255
Signature Algorithm: sha256WithRSAEncryption
83:b8:37:e5:03:60:49:cd:f1:0d:78:07:4b:50:8f:d2:5f:df:
63:17:fe:a3:0b:34:5e:85:c7:49:3c:cb:58:d2:4e:f8:57:30:
87:bd:dd:56:9d:56:3f:7b:be:0f:75:c5:b9:50:73:aa:51:34:
8f:2b:7e:e2:b5:bd:4d:c2:7e:7f:dd:36:c2:9a:1d:50:46:fe:
58:07:00:48:ed:ce:36:e4:20:02:66:6e:e9:93:91:da:90:d4:
b8:28:dd:f4:e0:c8:3a:76:3d:19:28:34:b1:09:e9:c8:1a:35:
1d:2f:65:04:01:80:70:02:7b:14:c0:3b:67:d3:ce:17:1b:1a:
a9:92:51:ff:7d:61:28:2c:6f:39:a2:87:25:dd:5f:e3:ad:8c:
e9:01:a5:0c:10:9f:28:49:4d:b0:ff:53:30:76:e7:d8:0d:75:
7c:18:2b:b8:d6:88:60:da:b4:28:ae:91:ec:39:19:03:64:05:
a9:e9:29:50:c6:20:0f:d7:b8:27:b3:da:6a:18:48:3c:8d:cc:
09:18:bc:4c:09:52:16:8c:9a:9d:80:3f:e3:ff:46:99:1b:8d:
c4:6c:22:b8:d0:15:d9:01:ab:ab:ce:36:89:9c:2d:24:b0:74:
2d:de:12:57:b3:4d:b4:57:ef:f6:ed:17:cf:a5:18:17:44:09:
76:eb:c1:6a
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZbqSxKLHqmr8tJNX8WOWhGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUwNTE5MjA0NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzU0ZjhmMzhlYzQ2ZGVkNWYzMzAzOGYxMTJhNTQxNjRkZGY3ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bypz+db152g5ASpH27TSntL1mO2
PUHxqPwllQ0bZvA6gJKkJ67OFzzMkfrSwmPm/43f1fcilnyE0k7odVFgW7qxcElZ
lqSnALGp7EMl6zraBKb9h6cTYym8wnX8acxC3yqoI2281hYuW9CzjP6XBqiJ3Q9M
H6ZWJGHuKZhNfThyre74b4xsuQMQdBrQNS7qe2iBSBr5OS1CIrqvY9g9aFpWpQkC
MoE0S5u/7z3SaQaMgC1nEz4q1L9+IEvRGOQx5lylr1XczS1ESbJ0IND1g4I3KrQr
TKVfYild4wGcdQ1M8fxn/uPOSgYdN2jkO87OYlA5Hmm/wHwDRiS0+MvyhQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFPdU+POOxG3tXzMDjxEqVBZN3345MB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvOTFUNDg0N0ViZTFmTXdPUEVTcFVGazNmZmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAkDgNAwQA
kDgRMAwDBACQOCEDBACQOCIwDAMEAZA4KgMEAZA4MDANBgkqhkiG9w0BAQsFAAOC
AQEAg7g35QNgSc3xDXgHS1CP0l/fYxf+ows0XoXHSTzLWNJO+Fcwh73dVp1WP3u+
D3XFuVBzqlE0jyt+4rW9TcJ+f902wpodUEb+WAcASO3ONuQgAmZu6ZOR2pDUuCjd
9ODIOnY9GSg0sQnpyBo1HS9lBAGAcAJ7FMA7Z9POFxsaqZJR/31hKCxvOaKHJd1f
462M6QGlDBCfKElNsP9TMHbn2A11fBgruNaIYNq0KK6R7DkZA2QFqekpUMYgD9e4
J7PaahhIPI3MCRi8TAlSFoyanYA/4/9GmRuNxGwiuNAV2QGrq842iZwtJLB0Ld4S
V7NNtFfv9u0Xz6UYF0QJduvBag==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:25 2025 by rpki-client