Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/V9MZHra9gODCHl8k8qhbVy6wkxM.roa
File: V9MZHra9gODCHl8k8qhbVy6wkxM.roa (raw, json)
Hash identifier: k0WzE/jIV7G3GVrMYcBisnW98J+/dlIAXeOWa8+7Bt8=
Subject key identifier: 57:D3:19:1E:B6:BD:80:E0:C2:1E:5F:24:F2:A8:5B:57:2E:B0:93:13
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 019425FC0F4DEE9E40DFE4DD68A348DDBDD9
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/V9MZHra9gODCHl8k8qhbVy6wkxM.roa
Signing time: Thu 02 Jan 2025 07:47:43 +0000
ROA not before: Thu 02 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215621
IP address blocks: 116.199.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 28 Jan 2025 11:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0f:4d:ee:9e:40:df:e4:dd:68:a3:48:dd:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d3191eb6bd80e0c21e5f24f2a85b572eb09313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:78:a4:a3:fd:07:8d:0c:18:16:21:a9:dc:
27:5a:79:13:68:0d:2d:85:8b:9b:48:46:a9:42:8b:
a3:32:cf:e4:65:27:a7:8a:6d:43:43:d0:ce:65:75:
ea:9f:35:70:39:db:ce:32:ba:00:a1:af:ab:4e:b1:
43:62:87:36:a0:0a:21:c8:55:e7:2f:10:2e:1f:d6:
f5:ae:24:f9:5a:05:c2:4b:9a:57:6c:12:6b:55:a0:
b4:62:75:99:68:25:69:06:39:ea:d5:2a:7b:8b:6a:
65:2c:6c:aa:86:df:5f:09:58:cd:a2:c3:89:18:9e:
5d:a7:56:02:8f:c9:32:97:4c:6b:da:53:ac:bc:2e:
75:c7:0f:a9:28:2a:e6:49:ad:13:1d:a0:91:a1:8f:
7c:cc:68:52:e5:fd:c5:72:7f:21:40:c6:b6:79:5c:
ce:35:71:d4:74:ca:58:b5:c9:99:84:05:3e:e5:63:
bb:e2:ca:c5:19:54:a1:b8:1e:64:35:8b:7d:ed:ba:
2e:a7:15:0a:42:74:b4:65:ef:44:0d:bb:3c:b6:68:
5d:3a:45:7d:c3:9a:08:e2:28:6f:ba:d4:10:a1:56:
2e:3c:90:23:52:5d:7d:78:f9:f2:7e:65:5f:a4:98:
5d:78:57:2f:c9:95:8e:69:0b:c5:78:62:8d:17:fc:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D3:19:1E:B6:BD:80:E0:C2:1E:5F:24:F2:A8:5B:57:2E:B0:93:13
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/V9MZHra9gODCHl8k8qhbVy6wkxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:d8:a0:01:44:b9:c8:4b:ab:af:70:25:49:1c:47:5d:13:23:
65:6e:6b:86:eb:6f:b1:cb:da:09:e7:59:8f:05:83:ed:6c:29:
c3:98:38:1d:d0:4b:ec:e6:a7:98:b0:8a:f8:c2:79:1c:7e:e2:
36:c7:3e:1c:11:de:db:2b:b7:87:50:b7:0a:9a:c3:6f:15:0e:
22:c2:1a:fd:e9:9b:95:91:72:8f:11:5e:a1:26:44:da:d2:1a:
b6:da:4b:6f:dd:62:58:96:28:45:4f:26:ee:90:f2:1d:8d:f3:
a4:be:9e:18:0c:49:2f:a8:fb:ab:f6:6a:f7:07:61:eb:91:97:
ce:48:ae:79:9d:4b:08:1d:7e:5b:df:4f:09:c3:ab:33:e1:12:
38:88:e6:ad:03:5e:d6:f0:f1:39:4b:29:b6:54:03:85:90:b6:
30:57:53:66:21:91:64:64:c3:3d:70:5f:20:68:10:51:f1:b1:
d6:f1:58:77:33:6a:dd:3f:7a:e5:74:4f:d9:d2:d4:cb:75:55:
36:98:fc:67:9f:8b:dc:d8:06:83:dd:61:eb:f1:d8:5e:48:3c:
da:4d:19:a2:33:f3:4f:1e:22:c9:e4:e9:b2:d9:4f:16:a8:77:
94:47:9e:82:2e:3a:7b:5b:37:f8:62:54:2e:21:d4:e2:57:76:
8d:82:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:18:24 2025 by rpki-client