Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/FeqZAvAml-H7gwRQL7l7y2BV6is.roa
File: FeqZAvAml-H7gwRQL7l7y2BV6is.roa (raw, json)
Hash identifier: kr+YBROKrNJ7KMzx3PqBaatbgLO088HWgeURQLZqy7w=
Subject key identifier: 15:EA:99:02:F0:26:97:E1:FB:83:04:50:2F:B9:7B:CB:60:55:EA:2B
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 0196681862B21D6F81DAA89AC929B829F6F4
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/FeqZAvAml-H7gwRQL7l7y2BV6is.roa
Signing time: Thu 24 Apr 2025 13:59:10 +0000
ROA not before: Thu 24 Apr 2025 13:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.39.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 09:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:18:62:b2:1d:6f:81:da:a8:9a:c9:29:b8:29:f6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Apr 24 13:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ea9902f02697e1fb8304502fb97bcb6055ea2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:ca:61:b6:65:6d:47:1e:2c:75:73:85:3b:
91:9a:5a:51:ba:d5:ac:82:4d:38:16:cd:fa:b6:d5:
fa:cc:be:b8:d5:43:95:8a:35:4c:3d:d7:00:b8:34:
99:91:cd:08:b5:ea:9d:13:9b:9e:8b:d1:8b:ba:40:
d9:f6:0d:c6:fd:fe:20:9d:de:9d:40:eb:81:ea:ab:
78:65:0f:10:af:3d:2e:35:4c:0f:7b:e8:8a:49:f2:
3f:1e:3b:9a:8b:ee:3a:95:a0:0b:91:58:5b:fb:51:
5e:5c:19:06:03:df:f6:fe:db:55:24:a4:fe:cf:37:
d0:6c:67:20:6a:1f:ca:bc:a2:06:2c:49:25:e9:ff:
ec:9e:8a:3e:d0:f6:52:54:d0:cf:29:f8:c3:c0:c1:
de:1f:06:4f:fd:58:99:66:13:03:b0:8d:6e:85:4e:
66:0e:12:02:8e:7a:2b:7d:47:ae:96:34:82:c0:ae:
21:12:47:3c:1e:53:91:bf:25:0f:fc:10:37:f9:24:
36:80:24:f7:4f:7e:12:1c:f3:14:80:1b:fc:7c:b1:
10:46:c9:2b:2f:d3:05:d7:00:3b:25:b7:cf:2b:8c:
dd:c5:37:9d:01:e7:56:fd:c4:4c:d6:83:32:91:1b:
6f:6f:93:5a:fe:2c:2b:76:18:cd:fb:10:f4:34:70:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:99:02:F0:26:97:E1:FB:83:04:50:2F:B9:7B:CB:60:55:EA:2B
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/FeqZAvAml-H7gwRQL7l7y2BV6is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:01:6c:7f:4c:d1:b9:84:05:50:8a:ac:14:00:79:e0:bb:fc:
6f:41:96:10:4e:b7:ec:ff:57:f1:af:c4:91:fd:e3:2f:18:3e:
19:a3:c2:ad:61:95:c9:c4:55:26:3e:e0:59:09:6f:0b:91:4f:
8b:40:a0:c6:e9:36:35:70:51:c7:1b:fc:e8:90:a6:b6:b0:90:
b3:52:13:49:05:fb:58:60:6f:6c:e3:06:6c:2a:06:fb:d0:c0:
55:00:66:a5:4c:09:0c:3e:df:c3:77:80:da:49:65:6d:ed:5e:
d9:ec:5d:87:4e:ba:98:1a:a9:b7:78:86:16:51:e9:f8:c0:1f:
8e:61:08:ac:72:f5:59:e4:3d:66:17:d4:ab:d6:11:9d:54:93:
c4:be:29:f0:24:85:bc:77:46:e9:2c:fa:55:e9:b2:b5:81:08:
64:08:ac:63:e2:dd:41:6e:14:c6:9b:4a:28:9f:57:4b:20:48:
b7:ff:4c:02:73:bf:16:2d:77:9c:79:cf:cf:c7:39:39:32:48:
d7:20:2c:66:34:58:83:ec:b4:b1:99:11:79:4c:5f:9f:b5:bd:
15:5a:c1:49:a6:d1:c3:f4:45:1a:b2:d1:57:00:bc:c6:7e:f3:
7c:86:05:89:29:fa:ee:ae:31:f7:21:39:6f:6e:f1:fd:de:c7:
44:b5:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:41:43 2025 by rpki-client