Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/fSWa-E56rPsvXpxm4lV1vYh0Zzo.roa
File: fSWa-E56rPsvXpxm4lV1vYh0Zzo.roa (raw, json)
Hash identifier: AF0SIbunEv6qwTCIoooyXnm3T+bSgX8bxBEnorAvol4=
Subject key identifier: 7D:25:9A:F8:4E:7A:AC:FB:2F:5E:9C:66:E2:55:75:BD:88:74:67:3A
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01969179F316E2C539577216DB503B553CB9
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/fSWa-E56rPsvXpxm4lV1vYh0Zzo.roa
Signing time: Fri 02 May 2025 14:50:10 +0000
ROA not before: Fri 02 May 2025 14:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25862
IP address blocks: 144.56.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 05:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:79:f3:16:e2:c5:39:57:72:16:db:50:3b:55:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: May 2 14:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d259af84e7aacfb2f5e9c66e25575bd8874673a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:3d:1e:29:e3:5c:3b:25:b5:2d:b3:e2:af:
92:2d:3f:51:20:46:f3:89:33:11:8e:dc:8e:5b:79:
35:e6:7b:be:1a:e6:57:b5:e4:3f:17:a3:0d:71:93:
2a:8b:4d:41:3f:4b:72:a9:2d:a7:0f:be:1e:e5:c4:
b2:f1:08:4d:df:df:e8:a2:4a:5f:11:e0:8b:e2:18:
e4:da:05:fa:33:37:35:ca:d7:40:cc:90:b5:1c:60:
da:43:31:22:9f:ff:e6:72:fa:03:2f:26:19:31:0c:
1c:b5:17:75:67:80:c6:04:3e:c4:a3:cd:d5:36:1e:
0b:49:07:60:8c:9b:b3:04:f3:92:9b:77:b6:cf:8f:
1d:fa:14:57:50:a8:bf:13:0e:bd:7c:37:af:c8:07:
90:b0:36:42:ee:f8:ca:ba:56:ef:40:f2:98:e9:cb:
ff:4e:84:85:d1:61:af:f4:e0:10:be:b3:46:29:0d:
6e:06:a7:36:36:84:90:94:6d:32:c8:da:54:12:bc:
a1:ad:2a:05:2a:49:77:6c:60:b5:ac:fa:2d:80:2b:
ca:51:74:62:40:ca:8a:61:01:4a:1c:8a:72:a0:0b:
43:b2:0f:c4:a2:5b:cb:cf:41:4c:25:38:20:59:30:
2a:2e:f8:f2:73:59:22:67:7b:a6:3b:7b:77:e3:2b:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:9A:F8:4E:7A:AC:FB:2F:5E:9C:66:E2:55:75:BD:88:74:67:3A
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/fSWa-E56rPsvXpxm4lV1vYh0Zzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f9:47:27:17:6c:c8:2a:40:58:4b:09:9f:0d:50:7f:a9:97:
6f:63:19:34:05:7f:70:61:c9:0a:d7:a3:05:5a:e5:46:55:cc:
1d:9d:91:c0:95:34:5e:53:09:d6:19:49:d5:49:67:76:bf:a6:
ff:f4:ec:30:94:26:e3:a2:ab:91:76:3e:b1:4a:c2:07:ef:9a:
a3:4a:45:6e:fd:29:08:d0:48:73:71:eb:a3:54:44:78:38:5b:
c6:ec:86:4f:42:90:d3:db:44:03:52:d2:12:76:29:2f:5b:89:
ff:c4:a4:90:30:22:82:10:53:f1:7c:d6:19:56:ad:41:fc:d7:
80:73:ac:1b:14:78:28:19:44:b6:6c:68:2a:e5:9d:10:1d:6b:
0b:32:fc:86:a9:15:72:30:83:8f:62:de:d7:6a:7a:84:7a:eb:
44:ea:f6:8d:21:e6:6c:e8:e9:d3:28:82:16:c4:56:00:3c:2a:
5e:2f:ff:6b:25:01:b1:b1:ef:f3:d1:2a:85:77:48:20:34:17:
56:92:e5:1c:78:54:73:45:8e:3b:29:32:db:84:8f:6d:ef:d3:
75:e4:a2:c6:89:57:cb:02:58:8c:49:4b:09:36:68:d3:9a:23:
c3:30:5f:d2:1e:47:1b:80:20:60:b2:ee:f1:25:43:82:19:4a:
87:ef:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:22 2025 by rpki-client