Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/qKpM9MB8zJPXlCCWAH_r25O0-ko.roa
File: qKpM9MB8zJPXlCCWAH_r25O0-ko.roa (raw, json)
Hash identifier: Fgq2H49BwRz99FxRPavwZkW4GLac/KXaHo4ffV6SBa4=
Subject key identifier: A8:AA:4C:F4:C0:7C:CC:93:D7:94:20:96:00:7F:EB:DB:93:B4:FA:4A
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 018CC94BEC2E526261AC23F8534DF19E4F8C
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/qKpM9MB8zJPXlCCWAH_r25O0-ko.roa
Signing time: Tue 02 Jan 2024 08:30:45 +0000
ROA not before: Tue 02 Jan 2024 08:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199633
IP address blocks: 37.32.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:ec:2e:52:62:61:ac:23:f8:53:4d:f1:9e:4f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Jan 2 08:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8aa4cf4c07ccc93d7942096007febdb93b4fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:0f:c7:52:1b:8f:b1:43:2e:83:ff:fd:43:
2d:8a:62:0b:03:a8:65:13:05:f2:28:94:d2:3c:9c:
6f:de:cf:39:60:23:0a:25:ad:bd:9d:81:c7:52:8b:
80:14:c7:a6:d0:06:8a:b6:77:13:d3:d6:7c:d2:10:
83:c1:4c:f9:10:c4:af:de:b7:51:2e:a9:ad:8a:b2:
c9:93:08:32:48:c2:f4:77:a2:ea:87:c6:f8:f1:86:
bb:e5:8d:60:39:a9:f1:af:e6:55:a4:1b:95:c3:f7:
93:cc:07:1a:9d:2d:d2:aa:fe:a9:7e:2e:d7:10:49:
5c:c9:f7:bb:26:1a:15:ee:92:e7:a0:bc:65:65:fa:
76:a7:d2:a0:4e:d3:47:5d:ac:98:ed:55:d0:88:91:
08:28:94:5c:79:a5:fc:0f:22:37:84:e4:c6:ea:81:
6f:f0:e5:07:c3:0b:41:f8:fd:a8:46:c7:f2:b2:c8:
cc:f4:8b:96:f8:78:17:4a:f1:58:8e:05:b1:27:5d:
aa:fd:4b:42:3f:94:19:fe:d2:fa:2f:6e:8b:2f:fc:
94:cf:68:bd:1b:fe:f3:20:25:e6:cd:61:a2:f1:ea:
d3:1c:44:08:53:bf:43:7a:95:3a:c2:89:a2:78:27:
50:17:f1:e2:09:4e:9a:eb:47:8b:76:75:d1:aa:aa:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:4C:F4:C0:7C:CC:93:D7:94:20:96:00:7F:EB:DB:93:B4:FA:4A
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/qKpM9MB8zJPXlCCWAH_r25O0-ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.117.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2a:3e:62:fc:f7:cb:70:fa:7c:29:a4:1f:f7:54:01:e2:6c:
6e:90:16:98:8f:1a:da:79:5d:a4:b6:c2:a0:8a:6b:d2:7f:47:
6c:31:f8:9b:a6:8f:42:2e:8c:02:a6:00:b1:01:32:38:6b:a2:
90:85:29:04:8d:f2:b0:f2:6f:4a:7e:a1:68:0d:68:f3:d4:41:
45:a3:63:4e:39:54:df:e9:e6:62:fa:27:e1:26:4b:d6:3d:8b:
6f:72:e8:58:a5:97:d6:dc:0d:2d:5a:ed:8c:fa:20:84:e1:f9:
82:fe:75:cf:41:c1:89:d6:be:38:6d:65:07:da:51:b8:0d:c2:
d5:cb:df:86:14:7e:bd:24:71:c0:b9:f2:5b:a0:ee:9b:67:dd:
5f:ca:10:33:70:fe:e8:e7:ce:7e:fe:3c:bf:42:30:36:d9:b8:
c0:fe:33:7e:26:62:1a:55:cb:d2:f8:e0:e6:ec:39:8d:25:56:
cb:9f:d8:b5:a7:46:79:a8:48:7f:92:05:f3:f7:f5:fe:a7:26:
53:4b:99:82:71:c9:02:64:de:9b:1c:00:c8:90:6a:3f:18:e7:
e1:37:44:00:93:21:94:6f:98:3e:07:4e:90:19:01:37:a5:20:
ab:2b:91:e4:4c:5f:34:75:2a:16:89:66:48:00:f0:6c:1a:d7:
8b:ca:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:29 2025 by rpki-client