Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fzgvAzBES9DhwTo6u6SN4owqYx8.roa
File: fzgvAzBES9DhwTo6u6SN4owqYx8.roa (raw, json)
Hash identifier: ebeVXRf9dvIAPgx9J1qvCv4edHYcpsRkpP0sc9lWn2M=
Subject key identifier: 7F:38:2F:03:30:44:4B:D0:E1:C1:3A:3A:BB:A4:8D:E2:8C:2A:63:1F
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0196857A5A1D0DBEA85B9D2A6B088E317EC8
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fzgvAzBES9DhwTo6u6SN4owqYx8.roa
Signing time: Wed 30 Apr 2025 06:55:10 +0000
ROA not before: Wed 30 Apr 2025 06:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 141.226.245.0/24 maxlen: 24
213.137.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 08:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7a:5a:1d:0d:be:a8:5b:9d:2a:6b:08:8e:31:7e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Apr 30 06:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f382f0330444bd0e1c13a3abba48de28c2a631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:06:c5:d6:91:44:38:1d:e9:4f:0a:4c:97:
78:3c:95:55:e2:94:72:e4:de:a2:ca:55:c6:6e:9f:
cc:40:fc:bc:a9:54:a4:5a:03:dd:dd:93:13:74:c0:
3f:5d:4a:f4:90:71:90:10:02:0a:73:15:42:a6:26:
6c:5c:c6:94:50:a2:f8:8d:50:4c:dd:72:17:c6:31:
7f:86:06:c5:f4:6c:ca:18:4f:b1:dc:4a:2e:9d:53:
f3:68:83:f1:a0:c2:ff:79:da:be:18:1e:d8:61:26:
49:b5:34:e8:22:f0:c9:5c:8b:48:2a:62:f6:83:22:
81:ce:4a:54:cd:1d:be:b2:77:5b:47:67:d4:b0:42:
00:3c:34:9a:79:ba:5c:8e:d4:12:f5:79:33:67:b7:
73:41:0b:d7:03:aa:ff:cf:81:2c:50:aa:7f:a3:da:
24:44:fb:e2:a4:61:1c:44:cf:17:0a:c6:f0:07:5e:
45:7e:22:91:cd:7d:db:4e:2a:6d:23:5d:e4:bd:2f:
0c:48:c8:bb:21:2f:6d:4f:97:a4:1a:54:99:0b:d3:
5d:e7:82:18:5d:89:92:2e:1f:20:8e:47:f4:13:41:
11:05:fc:8e:de:f2:25:36:db:be:75:09:c3:3f:8b:
5d:30:3d:8e:9a:80:04:16:a7:a0:2e:aa:c0:69:03:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:2F:03:30:44:4B:D0:E1:C1:3A:3A:BB:A4:8D:E2:8C:2A:63:1F
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fzgvAzBES9DhwTo6u6SN4owqYx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.245.0/24
213.137.95.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ce:71:18:7e:65:06:da:08:8e:9a:43:9f:d9:d3:3f:9a:02:
5f:c0:f0:1f:7c:20:08:26:a2:b6:12:6f:bc:13:cc:9d:13:ef:
2a:ba:82:47:a1:9d:ed:0b:4e:04:52:0f:b3:ee:5d:dc:f4:40:
76:8d:f2:43:d7:a9:ea:e0:c6:98:84:4a:e7:df:6b:3d:a5:75:
7a:bb:80:4d:32:a1:81:ac:7a:c5:50:00:d8:45:7c:53:4a:47:
72:bc:f1:66:b2:ba:51:41:2d:6e:53:c9:47:e9:79:62:73:1e:
ef:34:b4:30:c5:bf:b8:ca:04:a6:a6:51:c8:b8:61:ff:bb:d4:
88:49:8f:44:0b:fc:44:ef:eb:d4:14:a0:47:21:38:cc:6f:31:
e3:2e:bc:f0:b6:74:67:80:61:83:be:bb:45:6d:e4:a5:74:be:
05:9b:17:24:56:19:68:3d:1b:b8:74:df:39:8e:ca:48:9b:5b:
9c:f6:49:7a:fe:af:0d:31:8d:0b:b7:7d:31:72:ab:61:b5:be:
b2:1e:d1:1f:9c:c8:f0:99:44:25:b2:30:3a:34:72:3e:bb:95:
5c:70:b5:d8:68:ed:30:c2:56:8b:64:35:28:cb:d9:b6:24:ff:
91:22:64:77:42:97:d5:37:7f:ba:16:f2:29:06:dd:ad:60:8c:
de:24:7d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:38 2025 by rpki-client