Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/1-WUePAnR4DG5s5YDFNtfwK48JT0.roa
File: 1-WUePAnR4DG5s5YDFNtfwK48JT0.roa (raw, json)
Hash identifier: GGKYotx52IOFKH8VwNhd/DEaCn9nSr4m/sBEGckeMZM=
Subject key identifier: F9:65:1E:3C:09:D1:E0:31:B9:B3:96:03:14:DB:5F:C0:AE:3C:25:3D
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019523980EF105EE1AD1EDC028EFE3C3393F
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/1-WUePAnR4DG5s5YDFNtfwK48JT0.roa
Signing time: Thu 20 Feb 2025 13:42:02 +0000
ROA not before: Thu 20 Feb 2025 13:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214095
IP address blocks: 203.202.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 09:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:98:0e:f1:05:ee:1a:d1:ed:c0:28:ef:e3:c3:39:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 20 13:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9651e3c09d1e031b9b3960314db5fc0ae3c253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:7b:e2:08:9c:7e:ec:5e:65:89:d3:9d:b5:
70:f1:0f:87:95:67:62:e4:8b:05:1c:0d:65:a7:0e:
12:6d:c3:15:6d:e9:e1:07:7e:34:c4:90:5f:c6:0a:
50:bc:c8:50:b4:cb:58:b3:38:11:ce:91:d8:1e:63:
8e:26:56:04:a2:fa:65:45:3e:66:95:1a:5d:de:5e:
29:de:96:9a:92:97:1e:ad:77:00:68:a7:d4:e8:dd:
d7:60:5d:6c:71:05:2d:9f:bb:ce:22:21:23:3d:c7:
3a:8f:fe:ec:c2:53:0e:6e:85:af:26:39:9e:82:89:
35:13:65:86:0b:de:dd:76:d8:20:8c:c0:ac:7c:a6:
cf:71:ee:5f:51:12:ee:2d:98:71:18:4b:52:dc:7a:
52:12:67:39:2b:19:12:3f:58:ac:85:83:eb:5d:06:
a3:b8:71:2e:87:aa:dd:a5:e4:36:4e:25:de:01:02:
cf:44:b2:37:42:60:1a:26:60:ef:97:26:8d:70:1c:
1b:66:8f:29:74:f6:e3:db:5f:50:2b:d0:26:90:71:
0a:2b:81:7d:ba:65:5f:32:ec:5b:c1:a2:fb:88:9d:
3c:94:51:94:aa:22:56:1d:b0:90:b1:2c:00:e4:f0:
3e:ff:28:22:31:05:50:75:f7:d1:16:3a:29:c4:7d:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:65:1E:3C:09:D1:E0:31:B9:B3:96:03:14:DB:5F:C0:AE:3C:25:3D
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/1-WUePAnR4DG5s5YDFNtfwK48JT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.233.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c4:69:55:7c:c1:a0:8c:8c:75:0b:bf:ae:60:76:b3:a3:8b:
d2:3f:8c:fc:ea:63:af:dc:36:fb:b6:66:44:74:62:a4:14:ea:
66:c7:ab:b2:c7:37:99:58:99:da:77:d1:28:5b:0a:41:4b:8d:
eb:9e:31:fd:37:3c:27:f2:c3:e4:ba:36:17:a3:0c:d0:3f:6d:
51:40:42:18:1a:87:d7:98:ce:8e:60:02:f6:05:c6:27:ed:f5:
4e:b8:f6:44:d9:98:95:49:c4:dd:62:a1:b4:74:48:10:c2:e8:
2d:70:55:48:50:98:5f:43:15:cb:18:92:b4:c5:54:42:bf:30:
aa:97:38:e2:0b:4d:69:2e:ac:d5:57:d7:a6:9d:d5:23:c4:fa:
b8:37:cd:e8:3d:de:71:12:ca:20:70:36:b0:b1:29:3f:14:c0:
66:9b:71:13:9d:7d:9e:68:c6:3f:d9:18:b2:53:f0:cd:95:79:
28:4b:01:5c:06:94:8f:b3:3c:2c:ab:34:d9:b2:0c:25:f0:15:
d0:e8:b2:88:01:2c:81:c5:10:5b:3f:d8:fd:92:74:3a:e6:c8:
df:0d:6a:37:2b:05:56:a9:27:7a:58:67:e7:6f:11:7a:16:99:
0f:43:19:dc:f1:9d:60:a4:49:89:8e:65:ea:0d:e4:1a:b7:bf:
4d:cc:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:41 2025 by rpki-client