Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/AgI8wAOiOjjFrEB36Ooyv8ngXeg.roa
File: AgI8wAOiOjjFrEB36Ooyv8ngXeg.roa (raw, json)
Hash identifier: Q4uNOkKX1cp9xsxpHHo06rPhLGUNeHQwboqm7GJ9TUA=
Subject key identifier: 02:02:3C:C0:03:A2:3A:38:C5:AC:40:77:E8:EA:32:BF:C9:E0:5D:E8
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019730A39C0807B3338000D7F44AC882004B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/AgI8wAOiOjjFrEB36Ooyv8ngXeg.roa
Signing time: Mon 02 Jun 2025 12:35:17 +0000
ROA not before: Mon 02 Jun 2025 12:35:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210558
IP address blocks: 124.198.131.0/24 maxlen: 24
124.198.132.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 00:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:a3:9c:08:07:b3:33:80:00:d7:f4:4a:c8:82:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 2 12:35:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02023cc003a23a38c5ac4077e8ea32bfc9e05de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:41:ea:ce:cc:49:3a:25:4b:c2:81:9e:6b:
7d:58:2b:f5:71:aa:e6:d7:e6:37:79:ad:58:9f:56:
56:b8:2a:2c:62:0d:9c:69:c7:89:6b:e7:33:fc:3a:
6d:f5:95:02:b7:bb:cb:69:85:ca:9b:9c:10:df:8d:
12:cf:9c:39:7c:80:c3:ad:70:83:eb:d1:ec:e9:23:
3b:0d:97:32:10:55:02:ca:7e:d6:4a:f0:2f:28:ca:
1f:02:14:31:8d:1f:a0:3c:04:e9:50:e6:f7:41:73:
7b:3d:9a:b3:57:45:ad:0d:ea:9f:02:26:3b:9b:58:
f7:30:88:be:20:60:c6:81:47:d6:71:44:fb:16:65:
dc:d4:e0:7b:47:fa:ae:76:ac:e1:8b:c6:04:1a:8f:
7f:cf:8c:aa:75:be:72:84:e6:6f:41:eb:4e:0f:ce:
88:35:32:02:75:52:2c:19:3f:5a:f7:d3:d5:0b:95:
02:1c:92:b5:30:9e:8b:b6:1a:bd:8d:87:a0:a9:d4:
06:cc:4d:d0:7d:e2:c0:e4:e0:ed:c2:3e:68:7c:5e:
19:94:20:99:74:4f:1f:fe:04:77:b7:89:b6:f6:c0:
5f:05:a1:67:f3:f3:ee:31:32:6d:52:1f:c4:8f:c7:
31:b1:71:75:8d:64:ea:f8:54:73:03:27:fb:8f:83:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:3C:C0:03:A2:3A:38:C5:AC:40:77:E8:EA:32:BF:C9:E0:5D:E8
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/AgI8wAOiOjjFrEB36Ooyv8ngXeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.131.0-124.198.132.255
203.188.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:07:4a:4b:81:87:b1:87:53:53:e6:e6:58:91:e2:04:1e:9e:
bd:fd:bf:91:89:f9:d4:70:b2:36:e0:f3:d1:c1:51:36:c9:00:
f6:d8:a6:70:db:8f:4a:d1:f9:82:32:3a:41:d3:78:be:8c:a9:
23:e2:6b:4c:7e:c6:06:a8:62:3f:f4:f4:39:28:0b:5d:d4:67:
f0:2d:e1:ab:33:2f:9b:de:f0:81:a5:2a:45:f9:a7:e5:e0:6f:
3c:73:28:69:9f:e8:02:ce:b5:fe:1f:45:2f:c5:ab:62:33:2a:
7b:3e:b8:f2:46:b0:75:b3:fe:db:dc:66:62:7a:89:37:61:18:
c2:49:a5:09:10:38:22:e9:d1:3e:fd:e5:c5:3b:14:cf:b8:4d:
56:c3:5e:e0:4e:53:49:62:15:2f:be:c6:8c:ba:2a:f4:6b:98:
d1:4d:fd:97:55:13:2a:00:dd:00:9b:4d:3b:38:f6:8b:91:a0:
34:f0:89:9b:ab:46:37:76:d5:01:3f:90:70:24:e8:d3:33:8f:
9b:1b:da:fd:56:f1:1e:ff:1f:84:6a:be:f0:d8:d7:60:88:ac:
c0:9d:94:2b:85:de:51:f3:74:a5:57:e1:e9:49:fa:f0:e5:02:
4c:39:f9:c9:d9:22:f6:63:a6:8a:52:0a:ce:84:0a:fc:87:6a:
83:1a:e5:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:15:18 2025 by rpki-client