Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/pTWpCK2eaANpV75VykToZ-_UaLs.roa
File: pTWpCK2eaANpV75VykToZ-_UaLs.roa (raw, json)
Hash identifier: vD/mj6vDxcupMLXep8h3WAnNOpuCZ2mn6a+VXYUvxjM=
Subject key identifier: A5:35:A9:08:AD:9E:68:03:69:57:BE:55:CA:44:E8:67:EF:D4:68:BB
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 018CC94AE2EDC3E4FBFBB88ACCF078C6EB12
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/pTWpCK2eaANpV75VykToZ-_UaLs.roa
Signing time: Tue 02 Jan 2024 08:29:37 +0000
ROA not before: Tue 02 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29100
IP address blocks: 212.99.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:e2:ed:c3:e4:fb:fb:b8:8a:cc:f0:78:c6:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Jan 2 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a535a908ad9e68036957be55ca44e867efd468bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:a1:0a:41:ea:8b:0c:c8:07:ce:4f:9e:d8:
83:64:da:86:9d:65:c7:9f:aa:f3:e3:5b:bd:6d:97:
a3:bc:f8:df:82:b2:5e:58:1b:f3:fc:1d:f3:76:ab:
1e:d7:1b:cc:0f:cf:0f:29:9f:62:b8:fd:91:77:e8:
39:7f:34:52:91:69:9d:79:28:46:f8:a5:23:82:e1:
53:0c:62:d9:4b:ba:db:94:93:67:83:6c:d1:3b:90:
dd:d7:73:4a:4c:f3:71:96:fc:59:2b:c8:12:8b:0d:
21:d2:5a:56:04:13:77:82:99:10:55:ec:39:9c:3a:
df:a4:5b:22:2d:1d:93:ee:9f:da:7c:9c:cd:85:98:
05:5d:8f:91:2b:af:51:a9:56:4d:e8:59:d2:a7:b9:
2b:75:6c:36:58:4d:aa:99:cb:0b:c1:d4:3c:b3:4b:
1a:10:26:6f:fc:b5:fd:c7:53:87:a7:e3:26:5e:19:
0d:2d:7f:4d:a1:31:32:e9:62:99:c8:a8:f7:a3:d0:
27:94:fe:fd:fe:82:e7:5c:4a:9f:2b:b5:31:ea:d6:
86:c1:54:bc:50:36:a5:0f:b4:b0:f5:2d:1c:da:b2:
0c:16:a1:c2:41:f2:41:3c:ed:0f:3d:7a:62:d4:23:
50:31:76:7b:e4:f3:a1:eb:da:96:96:f6:17:32:87:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:A9:08:AD:9E:68:03:69:57:BE:55:CA:44:E8:67:EF:D4:68:BB
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/pTWpCK2eaANpV75VykToZ-_UaLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.99.224.0/19
Signature Algorithm: sha256WithRSAEncryption
37:f5:93:13:a8:b5:d0:5f:5d:ab:4d:ba:00:18:fb:e5:77:6c:
91:56:1b:dc:43:e0:34:f3:b7:e3:a6:35:17:73:8a:7b:bb:b8:
76:72:e6:b7:a6:4f:94:97:5a:2c:a2:b0:c5:8e:af:3c:19:0f:
88:b7:5e:b4:76:23:75:2d:5a:c4:24:a9:45:e5:27:65:44:95:
99:36:16:7c:52:29:a3:0d:e7:6f:33:b1:0d:3f:d9:83:6e:c2:
30:70:13:18:73:08:74:c2:ae:18:05:dc:0a:c9:98:50:1d:36:
f6:90:c8:22:8e:30:92:e6:9a:b4:4b:78:70:53:18:f5:81:05:
30:28:b2:39:0d:f0:74:14:36:68:d2:95:e4:7c:42:ad:43:06:
f2:8e:dd:8c:cf:e1:d9:2f:05:28:0b:9f:c0:86:a1:c3:44:31:
2a:a0:14:6f:7f:ef:5f:0c:b8:37:5e:a8:58:72:14:37:a7:3d:
6f:e6:38:f4:f7:04:aa:ed:f1:c7:92:e6:9f:37:19:9a:08:9e:
82:79:10:ac:cd:ba:0d:dc:0b:2d:41:4c:db:b8:7a:c3:bf:a5:
bb:1c:ed:33:0c:40:24:aa:b8:77:79:0c:59:12:ee:97:ad:ae:
d6:21:7e:ba:c5:44:77:e2:09:91:e6:96:63:11:65:12:d2:78:
93:18:59:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJSuLtw+T7+7iKzPB4xusSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj
NGRlNTMwHhcNMjQwMTAyMDgyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTM1YTkwOGFkOWU2ODAzNjk1N2JlNTVjYTQ0ZTg2N2VmZDQ2OGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPKhCkHqiwzIB85PntiDZNqGnWXH
n6rz41u9bZejvPjfgrJeWBvz/B3zdqse1xvMD88PKZ9iuP2Rd+g5fzRSkWmdeShG
+KUjguFTDGLZS7rblJNng2zRO5Dd13NKTPNxlvxZK8gSiw0h0lpWBBN3gpkQVew5
nDrfpFsiLR2T7p/afJzNhZgFXY+RK69RqVZN6FnSp7krdWw2WE2qmcsLwdQ8s0sa
ECZv/LX9x1OHp+MmXhkNLX9NoTEy6WKZyKj3o9AnlP79/oLnXEqfK7Ux6taGwVS8
UDalD7Sw9S0c2rIMFqHCQfJBPO0PPXpi1CNQMXZ75POh69qWlvYXMofuzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKU1qQitnmgDaVe+VcpE6Gfv1Gi7MB8GA1UdIwQY
MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt
OWYwNWYxMzVkY2Y5LzEvcFRXcENLMmVhQU5wVjc1VnlrVG9aLV9VYUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5
LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1GPgMA0G
CSqGSIb3DQEBCwUAA4IBAQA39ZMTqLXQX12rTboAGPvld2yRVhvcQ+A087fjpjUX
c4p7u7h2cua3pk+Ul1osorDFjq88GQ+It160diN1LVrEJKlF5SdlRJWZNhZ8Uimj
DedvM7ENP9mDbsIwcBMYcwh0wq4YBdwKyZhQHTb2kMgijjCS5pq0S3hwUxj1gQUw
KLI5DfB0FDZo0pXkfEKtQwbyjt2Mz+HZLwUoC5/AhqHDRDEqoBRvf+9fDLg3XqhY
chQ3pz1v5jj09wSq7fHHkuafNxmaCJ6CeRCszboN3AstQUzbuHrDv6W7HO0zDEAk
qrh3eQxZEu6Xra7WIX66xUR34gmR5pZjEWUS0niTGFnP
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:02 2025 by rpki-client