Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/qQ58WkQFJuYH1uKp9CE86VJ4WWM.roa
File: qQ58WkQFJuYH1uKp9CE86VJ4WWM.roa (raw, json)
Hash identifier: aHNino6Oy3y3KP113C2CUzrjCa947CAwrXDcpLE3/RU=
Subject key identifier: A9:0E:7C:5A:44:05:26:E6:07:D6:E2:A9:F4:21:3C:E9:52:78:59:63
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0196EA4B13056EA0D83B6712AE20EB52CDE2
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/qQ58WkQFJuYH1uKp9CE86VJ4WWM.roa
Signing time: Mon 19 May 2025 20:45:10 +0000
ROA not before: Mon 19 May 2025 20:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 144.56.24.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 19:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ea:4b:13:05:6e:a0:d8:3b:67:12:ae:20:eb:52:cd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: May 19 20:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90e7c5a440526e607d6e2a9f4213ce952785963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:84:71:50:5e:66:c6:ab:55:17:c4:1d:95:
ad:d1:79:05:c2:10:48:89:ee:f3:b6:c1:8b:2b:11:
1a:ac:99:e8:cc:66:29:9d:6f:f2:39:f8:a1:b3:72:
5f:94:4f:73:cd:67:c4:ca:d9:6b:3c:0c:5c:8e:d0:
9a:4e:73:4f:c5:d6:51:aa:f0:ad:c3:28:fa:9f:23:
6c:51:ab:08:37:38:a8:18:02:60:6d:75:33:34:75:
6c:36:79:2d:ba:2e:42:8a:57:8b:c8:fc:08:ad:e9:
60:e0:b0:b7:3b:c7:dc:4d:06:b2:49:a8:c5:b4:03:
a3:97:f5:d8:05:38:8e:7d:70:ca:2c:8c:a6:d4:d0:
e5:94:5e:9c:cb:1a:1b:a2:55:24:23:d6:14:e5:9b:
d7:3e:cc:4f:f5:04:6b:d7:79:3e:98:08:1a:59:e6:
0e:6e:c6:3a:6e:2d:4d:71:35:38:2c:89:19:28:45:
1b:68:67:77:af:4d:48:f4:7b:8e:b7:a6:b4:8b:30:
5d:3b:de:5a:b4:23:28:93:72:ef:fe:99:3c:ec:e8:
ea:c8:30:6b:39:47:aa:d2:bf:0f:9c:19:0d:b9:be:
38:01:77:88:b6:6f:ed:54:01:95:74:73:91:c9:63:
08:35:52:58:95:a2:8a:01:b8:7f:d9:e2:9a:20:ec:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:7C:5A:44:05:26:E6:07:D6:E2:A9:F4:21:3C:E9:52:78:59:63
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/qQ58WkQFJuYH1uKp9CE86VJ4WWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.24.0/24
144.56.31.0/24
144.56.33.0/24
Signature Algorithm: sha256WithRSAEncryption
be:51:e7:9b:74:11:62:4d:dd:80:9a:02:34:98:91:c7:bb:9c:
5d:dc:f0:21:35:4a:de:70:86:98:92:46:eb:05:36:d0:1c:23:
64:51:a5:54:c5:13:1a:e2:f6:3f:dd:e5:b2:88:8e:b0:37:7a:
4b:89:03:79:e0:17:e3:0d:63:5c:92:48:e4:7c:d7:d5:92:fd:
2f:86:2f:1a:c4:03:6f:85:17:6f:7e:23:40:c4:60:43:12:6c:
e0:08:73:ac:aa:7a:05:1d:d6:19:94:57:17:ed:f2:4d:a3:70:
88:61:e3:1f:ee:74:e4:d3:f2:8c:4f:77:74:6d:38:31:b2:ba:
fb:f1:0d:78:cb:10:03:8e:fb:c9:24:4a:1f:28:77:e2:92:dd:
e0:32:8a:65:49:5d:43:f6:68:55:c0:aa:6f:f2:63:e2:c4:4f:
e9:8e:86:a4:76:9d:7d:85:af:8c:7a:c5:9d:57:ff:47:7c:61:
c7:c0:27:83:79:cf:35:8b:7f:f1:d9:15:a0:d4:8d:94:cb:a2:
92:9f:f3:46:09:1e:ab:fd:58:72:b5:75:41:c7:fe:c4:ed:63:
7f:80:2c:f5:d0:ae:8e:28:02:0d:ba:b1:1a:ae:fa:22:a1:6b:
dd:6e:17:d1:3f:41:fb:10:df:43:36:17:cd:ca:4c:78:0f:52:
89:15:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:55:24 2025 by rpki-client