Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XF7n9RQz55-WRubl5dRwUfKwOvw.roa
File: XF7n9RQz55-WRubl5dRwUfKwOvw.roa (raw, json)
Hash identifier: wbkptoyT1Mc3ZUPsMglorbNuOt8oTQrLidLzKWcWlZw=
Subject key identifier: 5C:5E:E7:F5:14:33:E7:9F:96:46:E6:E5:E5:D4:70:51:F2:B0:3A:FC
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019635D0FB9711DDD209516C3C3085CF95CB
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XF7n9RQz55-WRubl5dRwUfKwOvw.roa
Signing time: Mon 14 Apr 2025 19:40:10 +0000
ROA not before: Mon 14 Apr 2025 19:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2536
IP address blocks: 46.231.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 16:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:d0:fb:97:11:dd:d2:09:51:6c:3c:30:85:cf:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Apr 14 19:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c5ee7f51433e79f9646e6e5e5d47051f2b03afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:72:c9:f6:18:b5:11:6c:51:c4:36:fe:8b:
31:f5:4c:17:3a:d4:4b:a4:29:2b:83:2b:e9:e7:68:
88:fe:e2:5c:09:03:62:2c:fe:9a:76:9c:62:87:f6:
01:e7:51:97:2d:81:57:68:b9:3b:e9:3d:97:4d:4d:
c1:4b:6e:66:63:a6:41:f9:a1:44:fd:f5:ee:dc:bf:
b8:0f:6f:c5:91:9b:d5:3f:61:e5:63:91:85:4e:82:
31:45:49:22:e6:f0:d9:1e:2c:a4:a4:72:21:71:79:
5e:d7:d5:1e:3e:36:41:1c:e1:56:44:f7:66:b3:96:
c9:c2:e7:d6:81:4e:16:98:dd:46:3b:b9:7c:4c:35:
d8:8e:c9:a2:00:99:10:3a:f9:8f:68:87:50:bb:3c:
5a:e7:b3:04:a9:f5:e9:4a:40:ac:18:3f:4b:3e:70:
47:e6:14:ef:cb:07:bb:0f:a6:1d:b6:4f:bd:d4:7e:
63:b0:7b:45:b7:d6:99:53:a5:ba:4f:1e:a7:88:ab:
47:ba:b9:8c:cf:9e:51:c2:21:55:c2:3b:f9:51:c2:
f4:66:c6:a8:07:53:4b:3d:76:a1:35:c0:ce:ba:10:
e0:76:82:5e:ff:04:31:39:ad:c5:17:2b:2d:40:6e:
ec:17:09:12:df:c6:0c:fa:05:8a:67:90:3b:52:82:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:E7:F5:14:33:E7:9F:96:46:E6:E5:E5:D4:70:51:F2:B0:3A:FC
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XF7n9RQz55-WRubl5dRwUfKwOvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.160.0/21
Signature Algorithm: sha256WithRSAEncryption
06:a9:5f:7b:25:82:7e:54:6b:83:2e:ed:76:6f:54:0d:8d:74:
64:7e:8c:21:90:bf:71:96:9e:b0:58:08:8a:ea:fd:47:5c:3c:
70:74:7d:0a:a7:89:91:90:f7:9f:52:0f:f1:30:fb:2f:7c:26:
88:ed:91:97:a4:d7:e5:8d:1a:c3:d0:38:36:34:9b:9f:8d:22:
de:35:c1:29:61:6d:4b:6e:b7:e4:5d:e5:c4:94:ed:e8:54:55:
23:a6:81:dc:0d:cf:ad:eb:e3:39:01:b3:dd:10:6b:40:40:27:
fc:74:29:c6:c5:f4:7e:62:49:5f:b1:ea:b0:a2:04:4f:d0:90:
59:8d:32:56:27:2f:32:19:f8:a4:84:1e:44:23:c5:5b:50:58:
f5:b9:94:01:47:f6:82:db:f6:c7:88:76:83:9e:0c:0a:b6:a4:
a8:47:c1:b2:f9:bb:b0:f7:28:ec:c2:95:a2:ea:18:9a:2e:3c:
29:17:2c:4a:27:8c:89:52:a4:e8:bb:78:29:d8:ef:c9:4c:7e:
de:d4:97:bb:84:fb:25:1d:32:38:f2:ed:57:95:09:5f:1e:5d:
2e:0d:4d:ed:d6:45:45:8c:e2:ef:47:ed:34:c4:25:44:49:0d:
93:cc:ea:73:8e:5a:2c:6d:ef:27:d3:60:b2:65:28:c6:e6:94:
c9:84:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:56 2025 by rpki-client