Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/SRFL4-7jJyDBXYUOuTW8hBKGdWg.roa
File: SRFL4-7jJyDBXYUOuTW8hBKGdWg.roa (raw, json)
Hash identifier: jM7xgzR4eP6Yk+MD53jXfgLVj9apmjvzRGnZC3Z6QB8=
Subject key identifier: 49:11:4B:E3:EE:E3:27:20:C1:5D:85:0E:B9:35:BC:84:12:86:75:68
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 0196D4436B444F6A985BB4DB686968941E23
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/SRFL4-7jJyDBXYUOuTW8hBKGdWg.roa
Signing time: Thu 15 May 2025 14:05:10 +0000
ROA not before: Thu 15 May 2025 14:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 91.231.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 08:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:43:6b:44:4f:6a:98:5b:b4:db:68:69:68:94:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: May 15 14:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49114be3eee32720c15d850eb935bc8412867568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:9a:7d:a2:c1:a5:8e:c8:d3:97:7e:dc:77:
34:a6:3c:c8:d0:6d:92:f9:d0:1b:53:90:6f:ca:6b:
5b:e3:02:72:cf:27:c8:50:51:5e:d9:ce:fe:23:40:
76:ff:23:fb:c8:40:67:f0:9e:68:4c:64:e8:c3:3c:
e9:5b:99:33:90:6d:7c:3c:34:60:49:ea:b6:b8:5a:
cd:21:52:63:83:e1:7a:a1:06:63:09:ad:08:47:0b:
30:35:5a:f1:9e:07:f5:e4:b5:91:24:ad:2a:76:8b:
bc:df:f1:08:4e:20:89:6a:5a:8a:74:d6:d1:f9:fc:
d0:77:c0:9c:72:ef:4f:8b:72:58:72:a4:e3:88:4c:
3d:d9:dd:a1:2c:19:c8:b8:f4:b7:85:89:6d:6c:58:
9f:93:a4:b3:56:e3:c5:f8:5e:50:d2:3a:26:a8:31:
6c:00:7b:bc:c8:f2:51:1d:fa:46:6a:ac:81:fd:1b:
b1:97:1a:74:79:8b:6b:85:53:60:b1:79:61:92:8f:
d4:a1:83:6b:3a:be:fe:bf:a5:32:bf:d1:26:41:3c:
9d:d0:2d:42:50:15:e2:6d:2a:70:d7:f6:4c:71:96:
23:39:23:b4:f0:45:46:f4:7b:7b:35:04:2e:dc:ef:
e1:56:43:03:eb:30:33:14:ff:e0:34:0c:1f:c0:2d:
66:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:4B:E3:EE:E3:27:20:C1:5D:85:0E:B9:35:BC:84:12:86:75:68
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/SRFL4-7jJyDBXYUOuTW8hBKGdWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
82:43:75:a7:77:77:57:28:24:ef:7b:b6:5d:01:ec:4d:69:27:
0f:61:68:bb:c9:d8:13:eb:0d:c5:69:b6:80:f8:75:01:e6:89:
6e:cb:e6:b4:58:b0:b8:a4:87:a5:f0:b6:f8:66:c0:73:25:4c:
d1:63:8d:8f:44:dc:24:f0:8f:64:41:03:a4:36:45:42:33:99:
1a:22:40:0b:ee:26:3c:c0:17:94:ff:56:d4:df:34:77:f6:15:
f6:85:ed:0f:09:f6:29:58:65:9e:2a:c8:d2:9c:d3:7a:03:98:
88:76:12:27:58:c7:c3:c0:bf:c4:a2:31:00:80:02:93:ad:a6:
72:18:08:27:aa:57:9e:5a:4b:7d:5d:a7:83:df:6a:f4:0f:13:
94:fe:b1:f8:26:f3:5a:ee:ec:04:ae:f3:4a:6f:13:da:15:3d:
14:d3:83:a0:e4:ce:0e:1f:ab:4e:ce:d3:6d:96:14:47:af:3f:
1e:b0:51:07:d3:74:07:e8:16:7b:46:44:97:17:bc:94:28:31:
61:93:0f:75:96:d8:5c:2b:15:a5:d0:77:19:f7:90:46:21:91:
b8:ec:d5:4d:36:e1:15:58:f9:72:ae:a6:e3:21:0a:8c:da:58:
db:fb:c3:75:5f:87:cc:5f:08:6f:bd:62:ce:03:cb:5f:4a:ff:
10:4d:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:20 2025 by rpki-client