Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/gF9vCyQ7kvqcT6atogg7npTjNuc.roa
File: gF9vCyQ7kvqcT6atogg7npTjNuc.roa (raw, json)
Hash identifier: cnCN6zy/aa5bu4Xy2huHHUHMJpydbCkxLt/e2prIVuw=
Subject key identifier: 80:5F:6F:0B:24:3B:92:FA:9C:4F:A6:AD:A2:08:3B:9E:94:E3:36:E7
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0194922D665AC7E0DC481E79573F701AE0AC
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/gF9vCyQ7kvqcT6atogg7npTjNuc.roa
Signing time: Thu 23 Jan 2025 08:00:36 +0000
ROA not before: Thu 23 Jan 2025 08:00:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 203.202.232.0/24 maxlen: 24
2a0a:37c0::/29 maxlen: 29
2a0a:37c0::/32 maxlen: 32
2a0a:37c1::/32 maxlen: 32
2a0a:37c2::/32 maxlen: 32
2a0a:37c3::/32 maxlen: 32
2a0a:37c4::/32 maxlen: 32
2a0a:37c5::/32 maxlen: 32
2a0a:37c6::/32 maxlen: 32
2a0a:37c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 Jan 2025 09:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:2d:66:5a:c7:e0:dc:48:1e:79:57:3f:70:1a:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 23 08:00:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805f6f0b243b92fa9c4fa6ada2083b9e94e336e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:79:22:5d:6b:9b:2b:fb:e3:36:62:b4:20:
fe:c8:ba:4b:e5:4c:a4:9d:ec:a4:fb:79:9b:ce:c2:
50:81:8f:e3:e1:9d:f9:f8:9c:9b:c3:eb:28:6e:2f:
9c:bf:18:8b:e2:34:20:2e:82:57:58:22:96:bf:fb:
f1:95:16:d8:50:66:4f:fa:74:4d:74:62:14:40:45:
64:6d:14:fc:01:d1:77:45:9a:17:88:12:1c:19:f6:
71:ff:0f:4a:df:35:06:d3:41:a0:df:60:c7:69:29:
51:b3:0b:33:aa:e5:f8:6b:f7:ef:fa:17:5e:46:09:
5a:63:88:fe:d4:50:5e:77:12:0b:4f:48:8d:1b:a4:
4c:b7:51:3e:0d:0f:01:4d:0c:e1:05:19:35:8c:2d:
bc:e4:48:4e:58:62:17:c8:6c:d8:eb:26:82:c5:96:
a7:f2:e8:9a:49:4d:8a:1a:c5:b3:bd:3d:54:a9:94:
76:94:c2:ec:fa:20:9a:fb:09:1d:6c:83:e7:7f:5e:
c2:23:aa:63:b8:77:b1:60:a6:8f:e2:29:20:8c:b0:
9a:83:2e:48:81:f3:78:bb:ea:1b:60:11:2a:99:4c:
d9:13:eb:63:3f:f0:75:64:fc:02:a7:d9:5d:e1:d2:
6c:b7:75:a1:80:a4:f8:df:5a:4c:78:0a:91:74:ae:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:6F:0B:24:3B:92:FA:9C:4F:A6:AD:A2:08:3B:9E:94:E3:36:E7
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/gF9vCyQ7kvqcT6atogg7npTjNuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.232.0/24
IPv6:
2a0a:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:40:3c:eb:33:bd:62:2f:31:29:c7:c4:be:8e:72:0e:46:cb:
df:47:c4:f7:78:05:3d:c2:10:90:a2:6f:9d:56:75:99:bb:9d:
6d:f7:62:b7:9e:c7:a4:81:b2:37:0e:6a:60:f8:57:64:33:eb:
bc:ca:18:9a:1c:da:fc:50:b1:0f:93:06:5b:49:b8:7f:25:d3:
c8:9f:10:d1:81:46:57:21:6b:91:2b:65:36:4d:eb:58:df:c2:
0c:27:b1:2e:76:35:e3:7e:91:b5:c8:2b:9d:73:7f:c9:3f:a1:
95:4f:ae:eb:ca:1b:51:c5:1e:0a:b2:31:f7:d4:5c:ac:5d:08:
ac:3a:38:65:11:4b:fc:d9:11:1f:bc:f6:e3:48:e8:d5:e0:b8:
c1:9b:18:65:ea:b5:ea:9a:26:c6:11:55:eb:53:e3:e6:18:e3:
bb:b2:78:ad:ec:a9:df:41:d4:bd:6a:3c:c4:e3:9d:16:d6:da:
2f:ca:a8:d0:fe:f8:15:e3:d6:98:f7:1a:5d:21:0c:28:17:1e:
10:5b:de:1e:f9:b4:6e:a3:67:69:5a:0f:12:31:37:46:97:76:
66:39:ca:0c:73:4d:c5:dd:4e:0e:db:62:ab:7b:34:56:53:c2:
e4:8a:e4:83:da:c5:d8:e5:3b:27:c5:25:e7:cb:40:35:f0:ee:
e4:cd:6a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:10 2025 by rpki-client