Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/XXL3wr5hdZOjETgRnUnwPJxPGXg.roa
File: XXL3wr5hdZOjETgRnUnwPJxPGXg.roa (raw, json)
Hash identifier: vxOxmw7Z2WG/DItsreWwGHSIXd0dzTgJByzrE7Zbc+8=
Subject key identifier: 5D:72:F7:C2:BE:61:75:93:A3:11:38:11:9D:49:F0:3C:9C:4F:19:78
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0196E4873DC341F6837AF961418BD5D1846A
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/XXL3wr5hdZOjETgRnUnwPJxPGXg.roa
Signing time: Sun 18 May 2025 17:53:10 +0000
ROA not before: Sun 18 May 2025 17:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 144.56.24.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 20:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:87:3d:c3:41:f6:83:7a:f9:61:41:8b:d5:d1:84:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: May 18 17:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d72f7c2be617593a31138119d49f03c9c4f1978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:ec:6f:93:b7:b9:1e:57:00:db:08:2f:a9:
56:3b:45:ec:ce:0f:0c:1a:1d:67:80:3e:85:04:ca:
bd:ff:24:54:7a:58:92:0b:7c:bc:21:cd:26:e5:a6:
3d:e0:db:38:63:c7:c0:3e:5d:e5:b6:50:56:13:29:
c7:a8:43:0c:e4:6b:80:c7:b9:7b:79:56:fb:03:c9:
91:69:42:06:13:49:dc:4d:02:46:b7:23:27:12:c9:
70:af:fa:ea:be:ba:d7:35:6d:3a:4e:da:6b:c0:06:
03:bc:80:66:98:7d:1f:bf:bb:6e:15:bc:0b:20:3c:
0a:82:b3:49:12:eb:fd:38:b8:7e:fa:6c:de:f4:96:
62:94:9c:86:56:22:e3:d0:ba:67:f8:8b:1b:67:1e:
45:66:71:d1:0d:10:95:d2:cd:e4:7c:08:f8:cc:68:
2f:3a:26:29:9d:22:f3:54:30:25:ba:d6:db:d0:a4:
18:34:35:d5:82:a4:50:7c:ef:a2:c1:d4:e2:db:ea:
99:21:34:c2:3d:bc:05:12:b8:51:84:a5:11:83:fc:
b3:80:fd:9a:92:ba:5a:b5:cc:d0:03:67:13:96:9c:
84:8f:f4:c5:e6:07:53:72:91:72:aa:99:27:80:a5:
de:ee:fd:e5:c1:d7:2a:c7:1b:68:59:c5:06:12:e0:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:F7:C2:BE:61:75:93:A3:11:38:11:9D:49:F0:3C:9C:4F:19:78
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/XXL3wr5hdZOjETgRnUnwPJxPGXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.24.0/24
144.56.33.0/24
Signature Algorithm: sha256WithRSAEncryption
56:77:67:d3:ea:47:1c:0b:54:76:b6:af:2b:67:fb:82:26:63:
3b:e7:3f:f9:4d:8a:1d:28:40:59:8a:f2:9b:4e:da:e2:99:e7:
92:9f:57:0f:f3:0d:16:77:37:21:bf:ca:4d:11:40:13:ea:97:
c6:33:06:91:b8:23:c1:19:17:55:fe:d9:4f:4f:13:cc:26:d1:
06:7d:46:73:ed:e3:be:56:cb:21:17:aa:ba:b5:46:6d:88:41:
04:f5:1b:dd:6a:db:ff:61:62:69:12:07:b6:04:80:05:f0:fa:
a3:77:68:2f:6f:a7:f8:1d:39:0f:8e:6e:9e:06:f1:a7:44:5a:
a1:62:98:e0:f9:9a:05:b2:31:45:b4:16:ab:ff:44:80:ff:70:
6e:d6:bf:02:3f:8c:f4:f6:a4:62:ab:2b:23:0a:2c:aa:ee:7d:
b7:7c:9d:3f:0a:c4:02:f8:b3:1f:dd:d3:3b:86:b6:88:09:15:
1b:9d:b8:7c:3d:37:cd:e0:08:b2:14:c5:a4:11:8a:4f:92:96:
d8:a3:5f:cc:0c:15:3e:f8:be:8c:80:a8:78:c0:05:ac:55:53:
20:35:75:51:5f:23:88:f4:4e:fa:db:09:80:e3:b6:c3:3d:91:
fd:fe:71:84:d6:1f:be:a6:6c:cc:b2:76:2f:b9:a4:09:1a:58:
7b:ad:7f:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbkhz3DQfaDevlhQYvV0YRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUwNTE4MTc1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDcyZjdjMmJlNjE3NTkzYTMxMTM4MTE5ZDQ5ZjAzYzljNGYxOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUDsb5O3uR5XANsIL6lWO0Xszg8M
Gh1ngD6FBMq9/yRUeliSC3y8Ic0m5aY94Ns4Y8fAPl3ltlBWEynHqEMM5GuAx7l7
eVb7A8mRaUIGE0ncTQJGtyMnEslwr/rqvrrXNW06TtprwAYDvIBmmH0fv7tuFbwL
IDwKgrNJEuv9OLh++mze9JZilJyGViLj0Lpn+IsbZx5FZnHRDRCV0s3kfAj4zGgv
OiYpnSLzVDAlutbb0KQYNDXVgqRQfO+iwdTi2+qZITTCPbwFErhRhKURg/yzgP2a
krpatczQA2cTlpyEj/TF5gdTcpFyqpkngKXe7v3lwdcqxxtoWcUGEuCM2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF1y98K+YXWToxE4EZ1J8DycTxl4MB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvWFhMM3dyNWhkWk9qRVRnUm5VbndQSnhQR1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkDgYAwQA
kDghMA0GCSqGSIb3DQEBCwUAA4IBAQBWd2fT6kccC1R2tq8rZ/uCJmM75z/5TYod
KEBZivKbTtrimeeSn1cP8w0Wdzchv8pNEUAT6pfGMwaRuCPBGRdV/tlPTxPMJtEG
fUZz7eO+VsshF6q6tUZtiEEE9Rvdatv/YWJpEge2BIAF8Pqjd2gvb6f4HTkPjm6e
BvGnRFqhYpjg+ZoFsjFFtBar/0SA/3Bu1r8CP4z09qRiqysjCiyq7n23fJ0/CsQC
+LMf3dM7hraICRUbnbh8PTfN4AiyFMWkEYpPkpbYo1/MDBU++L6MgKh4wAWsVVMg
NXVRXyOI9E762wmA47bDPZH9/nGE1h++pmzMsnYvuaQJGlh7rX92
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:35 2025 by rpki-client