Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rW45wgDbQWHSOXIESr4PSiSGmYQ.roa
File: rW45wgDbQWHSOXIESr4PSiSGmYQ.roa (raw, json)
Hash identifier: Fd/LArrGlSTkyCFcbSaKztydGCaTtIPe0nn/1vbAOvY=
Subject key identifier: AD:6E:39:C2:00:DB:41:61:D2:39:72:04:4A:BE:0F:4A:24:86:99:84
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019668872CCBD938F0C48DE1F5BD7B117F4F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rW45wgDbQWHSOXIESr4PSiSGmYQ.roa
Signing time: Thu 24 Apr 2025 16:00:11 +0000
ROA not before: Thu 24 Apr 2025 16:00:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 202.71.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 13:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:87:2c:cb:d9:38:f0:c4:8d:e1:f5:bd:7b:11:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 24 16:00:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad6e39c200db4161d23972044abe0f4a24869984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:a1:ad:ed:63:a0:e0:c9:f8:62:e8:89:24:
e5:68:51:01:63:59:e9:ae:d3:d5:fb:29:f9:64:47:
bf:30:b2:1c:46:70:5b:e7:a9:22:fb:31:fa:2c:93:
0b:72:4e:a7:2c:ed:8e:9f:65:59:5c:ae:5e:36:9c:
e4:99:12:85:8e:68:9a:6d:8d:dd:b7:db:72:41:72:
3c:86:1e:b2:34:82:1c:ee:46:94:5f:17:ec:da:0a:
26:bf:20:23:c5:91:8f:66:8e:7a:dd:79:7b:e2:9d:
54:44:e5:3e:5a:94:2d:9c:bd:13:84:dd:ce:61:c4:
4a:d9:d5:ef:ee:87:4d:9e:37:7f:2e:dd:0a:0e:20:
3e:f9:49:24:75:44:71:94:85:6c:49:cf:78:73:55:
ac:81:18:75:4a:52:99:dd:16:a8:93:06:e9:f8:fe:
5d:57:43:f6:ee:61:44:71:6a:a9:02:ba:c3:fc:cd:
e6:24:1f:db:04:09:62:b7:f3:7d:fe:2d:79:eb:5f:
f5:da:05:7c:91:e1:d8:44:c7:73:ca:6b:64:ea:53:
35:40:70:f8:12:8f:a8:20:f1:65:09:01:5a:93:1a:
28:12:8a:b5:a4:75:a6:d5:23:54:6f:f4:a6:27:bc:
52:0e:dc:e4:6b:c5:2b:ee:4b:a2:53:c1:ac:16:39:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6E:39:C2:00:DB:41:61:D2:39:72:04:4A:BE:0F:4A:24:86:99:84
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rW45wgDbQWHSOXIESr4PSiSGmYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.71.15.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ee:ea:69:33:45:19:3b:7d:7f:d6:1b:f2:be:33:2e:08:09:
75:5a:aa:6c:8b:64:be:39:0f:0f:6b:db:e8:9b:95:17:fd:98:
a6:85:3a:a1:f5:a1:0c:89:65:0e:81:8c:0f:58:fc:14:1f:bc:
51:88:1f:fb:18:83:71:29:4d:df:7a:0f:31:31:1d:7b:7c:4e:
44:80:65:14:76:95:a0:43:e8:4b:00:e2:96:99:34:fe:af:1f:
09:9e:be:8e:a0:75:d2:a3:f1:79:46:e4:9b:47:c2:19:a9:7d:
86:44:cc:fa:1c:15:f7:ee:4e:8d:9a:fe:2d:94:10:06:2b:a7:
f6:23:22:65:c7:b6:be:ba:39:99:a6:30:b8:42:f7:8d:ad:dc:
b6:be:bb:3d:e8:9f:ef:bb:32:5c:6d:a7:bf:38:ab:1e:44:3c:
80:48:2b:23:fd:71:45:ff:1d:48:b3:4f:b0:1e:10:0a:4e:b5:
f6:97:3d:15:6a:56:8a:c2:01:73:2a:6b:7e:ff:53:a6:99:0b:
72:1a:c9:be:0d:1d:67:d5:37:6e:99:84:45:57:d2:cc:c3:3f:
da:45:68:d5:49:9a:5c:d7:b1:b3:bb:68:7b:86:b9:93:df:1b:
8b:97:18:08:36:93:26:52:4a:79:bb:60:96:99:4f:d3:2c:40:
8d:ac:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:22:58 2025 by rpki-client