Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/k2BKcyp21RvI708jya8LkwxYMSI.roa
File: k2BKcyp21RvI708jya8LkwxYMSI.roa (raw, json)
Hash identifier: WY1zmhkfpSIkySfXLlYUyAXo6Qo22obB29q95aNNCco=
Subject key identifier: 93:60:4A:73:2A:76:D5:1B:C8:EF:4F:23:C9:AF:0B:93:0C:58:31:22
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0194AAC8B00E6D0D65213B791C8094B88DDC
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/k2BKcyp21RvI708jya8LkwxYMSI.roa
Signing time: Tue 28 Jan 2025 02:41:06 +0000
ROA not before: Tue 28 Jan 2025 02:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 103.211.101.0/24 maxlen: 24
124.155.240.0/24 maxlen: 24
124.155.241.0/24 maxlen: 24
124.155.242.0/24 maxlen: 24
124.155.243.0/24 maxlen: 24
124.155.244.0/24 maxlen: 24
124.155.245.0/24 maxlen: 24
124.155.246.0/24 maxlen: 24
124.155.247.0/24 maxlen: 24
124.155.249.0/24 maxlen: 24
124.155.250.0/24 maxlen: 24
124.155.252.0/24 maxlen: 24
124.155.253.0/24 maxlen: 24
124.155.254.0/24 maxlen: 24
124.155.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 11:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:aa:c8:b0:0e:6d:0d:65:21:3b:79:1c:80:94:b8:8d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 28 02:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93604a732a76d51bc8ef4f23c9af0b930c583122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:99:c5:36:94:a7:65:eb:02:60:49:32:ce:
c9:49:0c:dc:d7:db:3c:74:f5:8e:84:c6:4c:4e:27:
fc:47:c5:3e:cc:ce:30:e9:5b:4f:8d:51:b7:a6:4c:
97:bf:2b:1d:2f:20:72:54:ea:82:0a:20:d3:5f:eb:
44:6f:d2:88:2d:01:75:88:5c:6f:9f:9e:cd:d0:b6:
9e:51:23:88:cd:d5:43:d3:7d:e3:fe:dc:a7:11:d3:
c8:be:12:1a:c2:6c:1a:d4:f5:52:69:fd:3f:77:53:
4e:8c:28:27:7b:41:10:d2:09:7a:4c:c9:b2:9a:73:
1c:ea:d4:79:32:e0:42:b7:89:1d:ea:7d:2a:f3:34:
65:0e:4c:df:ec:7c:4f:ac:9f:0d:97:e6:97:79:43:
58:07:0b:a9:0e:ee:d1:67:fb:34:d2:4e:27:da:8f:
b0:41:b2:da:3a:17:c3:ba:e4:7c:4a:d3:aa:d8:0f:
7f:60:23:82:a4:f8:3f:d4:b0:1a:ff:45:6e:18:42:
d9:c5:f8:8f:a4:fd:63:1e:b7:f1:d1:5a:7c:34:b9:
3b:6d:21:bb:97:39:0b:cb:b9:98:79:60:fc:03:d1:
6c:71:1a:a9:03:2a:0b:37:41:2f:5f:5e:d6:52:0f:
2b:91:d1:06:70:aa:13:ef:53:65:97:b5:ea:32:5c:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:4A:73:2A:76:D5:1B:C8:EF:4F:23:C9:AF:0B:93:0C:58:31:22
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/k2BKcyp21RvI708jya8LkwxYMSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.101.0/24
124.155.240.0/21
124.155.249.0-124.155.250.255
124.155.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:87:40:a9:ae:41:4e:90:fa:46:7d:be:12:d0:f5:bf:68:ed:
b9:db:f8:7f:a4:6c:2d:1a:30:56:5d:4c:be:8c:40:03:db:54:
cb:0d:aa:af:9c:2d:4a:94:15:be:dc:2f:8b:05:3b:1d:94:94:
60:9f:fe:4e:78:4f:2b:65:c7:b4:4e:5d:ac:5f:8b:76:17:39:
ae:f5:92:a1:d0:b2:95:4e:0c:94:47:96:72:69:3a:02:d8:fa:
d3:86:c5:cc:c2:19:6a:6a:cb:9a:82:c4:0c:d7:fd:04:b1:a9:
fc:a3:4e:6b:fa:84:aa:52:64:c2:51:8a:b2:24:e3:cc:60:04:
9c:73:e8:f7:ed:ea:2f:75:1b:3c:ca:4d:ab:e1:64:38:03:ce:
02:cc:2f:cb:cf:48:27:f0:6e:d0:71:ec:3b:1a:47:7f:3b:81:
ec:11:ee:7d:6c:11:d1:3d:77:d1:84:04:cd:a3:09:1f:90:c6:
f9:5d:8f:d4:1b:f4:48:a9:ff:6c:dc:cb:9b:03:6e:8a:9c:54:
35:59:17:c9:d1:f3:d4:bd:e3:e0:64:00:4b:89:f7:9d:59:5f:
8c:1b:02:5f:80:31:6b:47:0b:3a:e7:7a:ce:18:cf:94:36:3b:
59:38:22:d8:8a:c0:f1:52:a7:66:53:3f:71:47:b9:d1:ae:77:
a7:ee:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:33 2025 by rpki-client