Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/Goq0l6ekxhlJCpqqnOSNTpA8CAw.roa
File: Goq0l6ekxhlJCpqqnOSNTpA8CAw.roa (raw, json)
Hash identifier: ut2HMSKoGqVTEgcVFWvxKaSsyR2JcIiMkLmKTooCieM=
Subject key identifier: 1A:8A:B4:97:A7:A4:C6:19:49:0A:9A:AA:9C:E4:8D:4E:90:3C:08:0C
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0196C9A7F6F8865C7A21A70480E50FDD6792
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/Goq0l6ekxhlJCpqqnOSNTpA8CAw.roa
Signing time: Tue 13 May 2025 12:39:10 +0000
ROA not before: Tue 13 May 2025 12:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 178.17.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 10:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:a7:f6:f8:86:5c:7a:21:a7:04:80:e5:0f:dd:67:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: May 13 12:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a8ab497a7a4c619490a9aaa9ce48d4e903c080c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:40:fd:42:86:f6:a4:ff:3d:95:9f:db:89:
80:59:51:e3:82:a8:1a:22:64:1d:59:6c:f0:cf:c4:
21:8b:c5:01:c5:2f:8a:8d:c7:88:5a:29:b6:d6:87:
e2:d1:d1:b3:eb:7c:7c:8b:7c:a8:02:4e:69:02:47:
d6:24:f7:6a:8e:58:96:92:82:6a:7c:da:30:f0:66:
37:20:52:57:c4:b8:e9:02:1d:00:5c:6c:eb:bc:86:
41:d6:77:3c:e3:c1:2b:57:c2:ca:70:97:a7:da:58:
aa:54:ed:e8:ce:92:40:d9:fb:8a:21:df:22:4c:81:
40:79:50:63:c3:a8:b9:a3:17:67:45:00:36:41:9b:
32:b6:df:cb:83:07:9b:fe:76:c2:cf:54:3d:72:a5:
54:9a:a2:dc:bd:e2:85:fe:3b:3b:10:95:ea:cd:93:
79:33:88:1f:12:09:7e:74:f1:f9:c7:9c:80:69:b6:
dc:e3:8f:f6:af:44:5f:8e:73:f3:bf:64:91:9c:9b:
57:36:7e:04:92:5b:ac:1f:31:8c:33:15:c2:6c:3d:
45:92:9d:9e:53:4e:39:22:f0:e6:03:17:31:58:e4:
42:7f:67:0c:1e:e5:d3:47:81:0e:17:f4:13:36:2a:
23:97:04:74:cd:c7:46:c1:91:a1:72:29:a6:2a:30:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8A:B4:97:A7:A4:C6:19:49:0A:9A:AA:9C:E4:8D:4E:90:3C:08:0C
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/Goq0l6ekxhlJCpqqnOSNTpA8CAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:fc:24:1b:9e:9f:67:2a:07:c2:84:9c:74:61:0f:07:6e:b4:
22:74:79:43:e5:26:00:2c:4c:95:d6:5f:8b:9d:c8:18:e1:07:
0e:dc:b2:3e:99:15:22:34:9b:94:51:0a:23:2d:83:74:50:c9:
b9:a1:18:70:b1:eb:15:e5:54:6b:59:0e:f2:02:f6:36:8d:10:
54:fe:d5:5b:48:bd:c0:23:fa:09:11:2e:e0:0b:98:c3:50:45:
31:74:ba:52:f5:8c:9e:14:53:63:dc:6f:37:1c:72:27:4c:48:
f0:f5:98:a6:a9:60:40:24:0f:cf:41:28:dd:8d:c7:2d:06:c5:
9b:0e:df:c5:dc:84:b1:fc:00:97:cf:3d:8c:34:62:2b:0a:74:
84:a3:fe:49:e3:bc:31:83:df:d1:4f:bd:0e:52:da:b3:a1:ee:
b4:9e:1d:f6:18:36:eb:ee:df:84:a0:14:da:f7:d0:7a:33:66:
77:75:ac:26:a8:83:c8:68:ee:c3:6f:bd:e5:d2:b2:fa:ee:4f:
3b:87:89:4b:3e:3c:2d:6c:0f:73:e2:6d:95:b5:a7:a9:96:45:
99:33:b9:fb:77:e7:f2:f3:94:a4:78:90:cb:37:13:81:05:c0:
76:f9:c0:ca:8e:1c:04:31:84:03:18:a5:27:02:65:4d:6b:07:
5a:1c:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:38:44 2025 by rpki-client