Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/nrF_YyXAAY3UX2Gg7nsMlQsw0Ts.roa
File: nrF_YyXAAY3UX2Gg7nsMlQsw0Ts.roa (raw, json)
Hash identifier: aZ4KYsyLK5TRoZbtc+BR4q+YKW+oW/tU5FZl+r6qeVc=
Subject key identifier: 9E:B1:7F:63:25:C0:01:8D:D4:5F:61:A0:EE:7B:0C:95:0B:30:D1:3B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0195107E39938FB5BD8ADDC3F260EFC0115B
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/nrF_YyXAAY3UX2Gg7nsMlQsw0Ts.roa
Signing time: Sun 16 Feb 2025 20:41:02 +0000
ROA not before: Sun 16 Feb 2025 20:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 203.202.232.0/24 maxlen: 24
2a0a:37c0::/29 maxlen: 29
2a0a:37c0::/32 maxlen: 32
2a0a:37c1::/32 maxlen: 32
2a0a:37c2::/32 maxlen: 32
2a0a:37c3::/32 maxlen: 32
2a0a:37c4::/32 maxlen: 32
2a0a:37c5::/32 maxlen: 32
2a0a:37c6::/32 maxlen: 32
2a0a:37c7::/32 maxlen: 32
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 25 Feb 2025 11:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:7e:39:93:8f:b5:bd:8a:dd:c3:f2:60:ef:c0:11:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 16 20:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eb17f6325c0018dd45f61a0ee7b0c950b30d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:b7:4c:34:e6:24:6d:0b:9f:a3:f4:1d:8f:
55:68:e4:a1:2b:dc:b7:5d:08:7d:d2:ae:f6:5d:28:
dd:b7:d9:b4:3c:3d:87:bb:de:d5:86:b9:bf:45:cd:
fe:25:95:e7:cc:f4:b8:75:00:5b:66:e1:23:9a:af:
b3:47:e0:b0:90:89:18:f0:31:f9:b9:bc:c0:ee:21:
1b:23:0f:e8:73:64:70:c0:cd:5e:e1:ad:4a:36:50:
95:2d:47:13:22:66:59:83:aa:9e:50:06:bd:7b:ac:
c4:9e:55:65:c9:fe:21:0b:2e:a8:f7:1b:c9:01:db:
6a:de:d1:a6:79:d1:85:74:29:05:fe:f4:12:77:26:
b2:64:a5:72:90:fd:fd:20:b1:53:ad:90:e9:79:a4:
03:a2:26:d1:8f:ec:55:41:c4:5d:ad:d1:5d:91:1f:
28:11:e9:ee:7c:96:b0:86:95:3d:fb:57:1e:00:c8:
4c:ff:e8:09:33:92:59:84:9a:b1:e8:9b:2a:b6:3f:
a6:4a:36:d8:fa:6b:f0:53:6c:19:14:24:f4:a4:11:
f0:ea:85:59:76:b5:88:73:c1:9b:13:31:11:b2:28:
85:bc:5d:1a:9f:f3:59:a0:05:95:eb:97:22:e1:c1:
6e:9e:10:fd:c7:5e:90:a8:77:42:cc:a7:cf:97:fe:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:7F:63:25:C0:01:8D:D4:5F:61:A0:EE:7B:0C:95:0B:30:D1:3B
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/nrF_YyXAAY3UX2Gg7nsMlQsw0Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.232.0/24
IPv6:
2a0a:37c0::/29
2a0b:9800::/29
2a14:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
5d:96:3c:ac:dc:52:c4:e4:6f:5a:6d:8b:39:44:06:e2:5e:55:
ae:e0:69:66:cf:00:02:d1:22:68:50:82:80:ed:2b:7e:74:c7:
23:7f:f8:c3:61:71:e1:6d:57:d2:2e:d3:a2:23:cb:af:ff:5c:
e1:e6:4d:88:42:b1:b4:db:72:0d:64:d8:96:3e:8b:f6:09:de:
ad:93:42:e7:5b:95:9c:49:c7:98:26:26:f5:29:a0:85:0c:5b:
31:a3:07:4a:e8:1a:97:84:67:4a:8e:a5:e2:71:a7:61:ae:0d:
fc:36:da:2f:04:dd:f6:de:3f:84:95:ad:0f:e6:4c:e1:50:d3:
56:6c:28:bb:d2:f9:39:98:4d:19:0a:c7:2f:fd:fe:dd:2a:e3:
7b:09:6b:d9:50:fe:b9:cd:49:e6:50:09:8f:9b:75:45:6b:95:
8b:44:c0:cf:4f:f1:23:3e:27:3d:2d:44:48:95:6d:bb:41:e2:
93:da:24:d4:d6:ac:e5:a1:2a:bd:26:ea:01:72:14:30:73:8b:
68:87:d6:9e:57:ba:73:45:6f:56:2b:63:d6:02:b3:e8:c4:c5:
ae:c8:5c:8c:d0:6d:1b:47:fd:52:7a:c6:29:ed:87:7e:af:04:
8f:7e:60:fa:b7:a0:99:e1:29:97:cf:fc:98:d9:ab:44:d2:2d:
4e:0c:3b:f1
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZUQfjmTj7W9it3D8mDvwBFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwMjE2MjA0MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWIxN2Y2MzI1YzAwMThkZDQ1ZjYxYTBlZTdiMGM5NTBiMzBkMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAC3TDTmJG0Ln6P0HY9VaOShK9y3
XQh90q72XSjdt9m0PD2Hu97Vhrm/Rc3+JZXnzPS4dQBbZuEjmq+zR+CwkIkY8DH5
ubzA7iEbIw/oc2RwwM1e4a1KNlCVLUcTImZZg6qeUAa9e6zEnlVlyf4hCy6o9xvJ
Adtq3tGmedGFdCkF/vQSdyayZKVykP39ILFTrZDpeaQDoibRj+xVQcRdrdFdkR8o
EenufJawhpU9+1ceAMhM/+gJM5JZhJqx6Jsqtj+mSjbY+mvwU2wZFCT0pBHw6oVZ
drWIc8GbEzERsiiFvF0an/NZoAWV65ci4cFunhD9x16QqHdCzKfPl/7qvQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFJ6xf2MlwAGN1F9hoO57DJULMNE7MB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvbnJGX1l5WEFBWTNVWDJHZzduc01sUXN3MFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQAy8roMBsE
AgACMBUDBQMqCjfAAwUDKguYAAMFAyoUSoAwDQYJKoZIhvcNAQELBQADggEBAF2W
PKzcUsTkb1ptizlEBuJeVa7gaWbPAALRImhQgoDtK350xyN/+MNhceFtV9Iu06Ij
y6//XOHmTYhCsbTbcg1k2JY+i/YJ3q2TQudblZxJx5gmJvUpoIUMWzGjB0roGpeE
Z0qOpeJxp2GuDfw22i8E3fbeP4SVrQ/mTOFQ01ZsKLvS+TmYTRkKxy/9/t0q43sJ
a9lQ/rnNSeZQCY+bdUVrlYtEwM9P8SM+Jz0tREiVbbtB4pPaJNTWrOWhKr0m6gFy
FDBzi2iH1p5XunNFb1YrY9YCs+jExa7IXIzQbRtH/VJ6xinth36vBI9+YPq3oJnh
KZfP/JjZq0TSLU4MO/E=
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:13:37 2025 by rpki-client