Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/pjkcKAcFF3L5Mukn9u9E-FZ6i7k.roa
File: pjkcKAcFF3L5Mukn9u9E-FZ6i7k.roa (raw, json)
Hash identifier: fMOLdDUJ3re7D7fcjoBFAuIrYn8KlrWl/f0ls+W8fZ4=
Subject key identifier: A6:39:1C:28:07:05:17:72:F9:32:E9:27:F6:EF:44:F8:56:7A:8B:B9
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01971058F6AFC53AD45B9004BB29B82EDF6C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/pjkcKAcFF3L5Mukn9u9E-FZ6i7k.roa
Signing time: Tue 27 May 2025 06:05:55 +0000
ROA not before: Tue 27 May 2025 06:05:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39508
IP address blocks: 78.143.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 27 May 2025 19:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:58:f6:af:c5:3a:d4:5b:90:04:bb:29:b8:2e:df:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 27 06:05:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6391c2807051772f932e927f6ef44f8567a8bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:5c:04:a6:d9:1f:42:52:b1:5f:61:9b:63:
49:8f:1c:f0:fd:f3:4e:cb:3b:90:0c:b3:ee:46:95:
fa:fa:ef:a0:86:8c:20:ef:b7:61:64:55:5b:2e:32:
7a:ea:5e:23:83:ef:25:f1:f1:9f:aa:75:cb:06:44:
db:20:1e:f7:71:89:e0:04:e8:c3:82:b4:17:8b:ad:
4c:58:8c:17:eb:f1:44:cf:3e:59:5b:d6:34:4d:ce:
b1:c1:65:77:60:71:b4:6d:39:7f:36:68:d4:d3:e2:
58:4d:ac:a5:27:a0:ad:24:f5:a2:59:db:33:7c:76:
4c:9a:7b:ca:4c:77:82:02:6d:18:cc:0b:ba:91:22:
b6:ef:50:ee:2d:a3:ce:f0:3b:cb:81:17:ab:b4:f1:
f8:1b:85:96:44:1d:88:86:73:ce:06:4f:42:95:ae:
19:3f:18:29:d3:6f:0a:67:c6:4f:02:29:5f:38:35:
ac:23:d0:9f:e6:83:f9:02:c5:de:9c:ea:4e:fa:86:
23:cc:95:01:43:2e:5b:39:d7:3c:5e:8c:f4:d1:0d:
11:ec:6c:fd:b9:5f:f7:55:8e:1d:01:73:49:29:2e:
40:82:74:21:1b:e0:10:07:bf:0d:d3:4a:88:8f:86:
1e:84:99:77:23:e7:8e:5b:df:61:29:72:1f:dd:68:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:1C:28:07:05:17:72:F9:32:E9:27:F6:EF:44:F8:56:7A:8B:B9
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/pjkcKAcFF3L5Mukn9u9E-FZ6i7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:f3:01:f5:f0:10:b1:13:09:95:17:18:74:d7:62:58:74:67:
87:e4:2c:f7:a5:3b:f4:fd:44:63:8b:79:6c:39:e9:68:ba:1e:
4f:ff:a1:d8:cc:d7:53:ac:a0:75:83:ab:a5:04:a8:e2:4d:5c:
09:6b:95:ab:6e:f4:0d:8a:84:ea:41:8d:5d:a6:f9:a2:de:0c:
b4:b3:6f:3c:47:f3:86:14:10:bf:00:31:ae:d5:63:5b:4e:eb:
8d:01:52:cb:51:dd:c8:13:e4:96:1d:34:20:0d:0e:17:e7:3a:
14:e3:31:c2:87:ec:e6:d5:23:9e:f9:88:09:cd:64:ff:48:36:
87:f1:53:fb:f4:b9:21:6f:a8:67:c3:ac:72:cc:98:20:7b:3b:
60:6f:fa:ea:cf:63:7b:21:08:d7:4a:e3:78:fe:56:47:8b:e9:
a8:5f:f4:ef:a4:35:62:48:9b:45:e6:5b:5c:33:c3:39:57:d1:
68:c4:7b:81:0b:8f:24:33:f7:d2:3b:d4:b0:50:e0:67:18:f9:
87:7b:a3:38:f1:37:a0:29:2e:75:81:20:9b:fe:18:38:a5:33:
ee:84:f1:6c:4a:07:93:04:12:a9:85:7d:78:d1:da:9d:4c:b8:
95:89:2e:fe:05:b5:fe:fe:fa:1b:4e:96:f2:3d:e1:f2:fe:c0:
65:a8:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:49:46 2025 by rpki-client