Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/MmaCzVoHfRpg7AgBYjS4PCYN7kg.roa
File: MmaCzVoHfRpg7AgBYjS4PCYN7kg.roa (raw, json)
Hash identifier: b/okzrNPubIUOfg622BIjQ9hu5JDoBzWbYOo9R/ilho=
Subject key identifier: 32:66:82:CD:5A:07:7D:1A:60:EC:08:01:62:34:B8:3C:26:0D:EE:48
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019710CF107A15ACAED49917715A44C7035B
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/MmaCzVoHfRpg7AgBYjS4PCYN7kg.roa
Signing time: Tue 27 May 2025 08:14:55 +0000
ROA not before: Tue 27 May 2025 08:14:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 05:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:cf:10:7a:15:ac:ae:d4:99:17:71:5a:44:c7:03:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: May 27 08:14:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326682cd5a077d1a60ec08016234b83c260dee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:b6:c0:ae:c4:7b:9f:7e:0d:3b:32:14:e4:
ad:69:9b:85:9c:6c:c7:17:c0:da:b9:5a:cc:34:82:
f3:4c:1d:19:08:e4:f9:82:2f:b1:01:d2:0d:1c:2d:
07:c9:d6:6c:0f:fc:6b:97:35:77:c1:d6:72:9b:56:
57:4f:fa:b4:88:36:6c:71:77:f4:58:bc:8c:5e:d3:
5f:96:1e:b8:21:d4:ad:52:29:6a:33:a6:4a:e9:e9:
88:93:b8:a0:93:5c:fd:f0:51:1d:17:3e:ff:a7:04:
52:20:4d:8a:72:ca:8f:b8:c1:25:e0:f9:f5:ce:66:
f0:45:0a:11:ea:9b:ce:ea:12:6e:d2:08:91:48:5e:
7a:61:b4:8b:e7:6b:e4:e7:7c:4f:be:fa:50:e7:8a:
d3:2b:65:75:5a:d3:ea:8c:ed:27:50:34:a7:0f:d8:
0b:b7:21:65:e7:60:82:09:64:81:4c:7e:5d:70:e6:
d9:7a:7d:ac:93:e0:4b:d8:97:0d:89:57:13:d1:4e:
96:ac:06:3e:ad:53:e7:5b:ad:cd:86:8d:60:a5:92:
04:07:64:e9:13:e4:5a:97:f4:27:6f:6b:c3:ec:ff:
a8:4a:b6:c6:b2:57:5b:ce:60:48:8f:b4:b9:75:31:
9d:71:0b:dd:4f:0e:f2:49:e0:4b:8a:4d:a0:e6:62:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:66:82:CD:5A:07:7D:1A:60:EC:08:01:62:34:B8:3C:26:0D:EE:48
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/MmaCzVoHfRpg7AgBYjS4PCYN7kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e2:a4:85:f0:2d:00:7f:c2:20:7d:05:4b:e7:6c:fb:30:ce:
c6:a4:36:2e:08:b5:21:76:76:57:80:05:d1:5d:c2:e6:24:d5:
47:1e:33:a6:63:20:ce:59:28:05:82:15:7f:72:2a:10:55:9a:
7f:77:31:1f:31:df:e8:f6:14:82:b6:31:77:29:28:b6:45:19:
ab:72:a9:52:a5:7a:ed:64:1c:6d:fb:f0:11:48:02:f4:c5:09:
2d:cc:66:1e:66:85:cf:73:b1:4b:6c:e7:09:74:b4:69:c9:f4:
dd:62:72:0d:74:b0:0f:a5:92:28:45:6c:88:e8:66:38:aa:e5:
29:18:a0:3d:4c:08:41:d4:54:15:02:04:27:c0:a4:b8:90:6e:
eb:bd:e5:81:4b:1a:fe:23:41:b0:c2:c1:0d:66:cc:26:24:85:
02:f0:0f:56:bc:e5:ea:8b:c7:38:98:86:a0:67:eb:92:26:46:
ea:11:a8:fc:b5:b8:e4:69:a5:c6:f5:47:33:5a:fb:b2:5d:78:
8d:1d:57:be:aa:d5:4f:44:70:ac:ca:0e:54:31:db:3d:6a:95:
f7:4d:ed:a1:81:bd:08:ea:af:c0:98:41:63:38:e9:3c:15:7f:
6d:d9:1d:54:40:89:6e:38:dd:72:b2:00:7e:e2:53:42:99:fa:
8e:ef:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:57 2025 by rpki-client