Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/3d68h5UQHc5lcsJVAnlnpW5wi9U.roa
File: 3d68h5UQHc5lcsJVAnlnpW5wi9U.roa (raw, json)
Hash identifier: fqqJexHdWkV0EYdS34hUiWckICE+Fvn92/zZRIwrdIM=
Subject key identifier: DD:DE:BC:87:95:10:1D:CE:65:72:C2:55:02:79:67:A5:6E:70:8B:D5
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 019396558F78D2FD6A13543E9EA9C655C748
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/3d68h5UQHc5lcsJVAnlnpW5wi9U.roa
Signing time: Thu 05 Dec 2024 10:20:09 +0000
ROA not before: Thu 05 Dec 2024 10:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 23.19.56.0/21 maxlen: 24
23.19.56.0/24 maxlen: 24
23.19.59.0/24 maxlen: 24
23.19.62.0/24 maxlen: 24
23.106.32.0/21 maxlen: 21
23.106.56.0/21 maxlen: 21
23.106.232.0/21 maxlen: 21
81.17.56.0/21 maxlen: 24
81.17.56.0/22 maxlen: 22
81.17.60.0/24 maxlen: 24
81.17.61.0/24 maxlen: 24
81.17.62.0/24 maxlen: 24
81.17.63.0/24 maxlen: 24
95.168.176.0/20 maxlen: 24
95.168.176.0/21 maxlen: 21
95.168.184.0/24 maxlen: 24
95.168.185.0/24 maxlen: 24
95.168.186.0/23 maxlen: 23
95.168.186.0/24 maxlen: 24
95.168.187.0/24 maxlen: 24
95.168.188.0/22 maxlen: 22
173.208.48.0/21 maxlen: 21
173.234.72.0/21 maxlen: 21
173.234.136.0/21 maxlen: 21
185.222.24.0/22 maxlen: 24
185.222.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:55:8f:78:d2:fd:6a:13:54:3e:9e:a9:c6:55:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Dec 5 10:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dddebc8795101dce6572c255027967a56e708bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:0e:8c:c6:fa:9e:89:51:c5:9a:1c:f1:8b:
1a:f5:d5:0f:7a:6d:29:e6:8f:4f:b6:ca:42:77:6d:
dc:92:45:57:e4:91:f6:c5:f3:f0:2c:77:be:33:72:
25:14:90:87:3d:13:e0:6e:15:78:b0:6e:9f:42:ec:
be:93:e7:4b:d3:47:e7:a7:89:e2:94:7e:c8:50:a5:
96:57:05:b7:7c:09:fe:8f:1c:1a:81:d9:b1:73:4f:
6e:65:a5:28:2d:de:16:0f:e6:92:d6:df:50:f2:53:
5c:c5:ab:0c:86:9c:b7:52:eb:67:85:01:fc:91:9a:
68:5b:44:56:f1:97:2c:83:af:eb:69:9f:fc:6e:9a:
24:5d:0f:f8:ac:29:f9:7b:be:35:71:c0:d5:2a:32:
45:bb:b0:b5:c0:3e:1a:b2:f9:47:ce:ca:bc:4a:9b:
f1:fd:58:b2:f8:45:d8:30:92:93:b4:aa:47:54:e9:
a1:86:e3:c4:73:d5:47:b4:ba:94:51:3a:cd:b5:4b:
4f:1a:09:0f:f7:3f:8f:5a:1e:bd:ba:e6:6f:11:61:
45:9c:79:a2:b3:9d:1b:cd:0d:bb:26:bc:b4:d6:5b:
1f:76:a9:00:15:e1:50:18:fc:ee:c7:4f:8b:1d:0b:
97:49:8e:52:6e:c9:46:3b:82:45:e7:93:13:63:1b:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DE:BC:87:95:10:1D:CE:65:72:C2:55:02:79:67:A5:6E:70:8B:D5
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/3d68h5UQHc5lcsJVAnlnpW5wi9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.19.56.0/21
23.106.32.0/21
23.106.56.0/21
23.106.232.0/21
81.17.56.0/21
95.168.176.0/20
173.208.48.0/21
173.234.72.0/21
173.234.136.0/21
185.222.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:33:4e:aa:d3:f2:43:d8:9b:f3:7f:a9:45:3b:bc:46:c8:7c:
d7:2c:8a:d4:5e:83:77:88:c5:fe:77:d6:a0:f9:a9:6f:6c:d9:
27:9b:5f:bb:18:c0:d7:8a:82:0c:d8:0f:32:31:db:50:dc:fa:
2a:c3:48:5a:cb:7d:07:00:db:77:3b:39:b5:2a:0e:2e:7f:26:
f0:c7:31:dd:08:f3:db:de:27:56:11:c6:3f:81:8f:b6:c0:84:
a7:51:10:d6:7d:ab:ec:29:74:00:53:a5:a3:4c:0a:ca:a4:04:
04:82:4f:e3:70:b6:ec:0e:16:37:ba:bd:a8:cb:29:3f:fc:67:
de:0c:06:28:34:fa:b8:bb:e5:f5:f5:a2:40:6b:2d:ad:da:8f:
6a:18:4b:d2:b1:bb:aa:ef:0b:20:a2:36:1a:55:e5:cd:c0:08:
0d:58:18:da:04:d0:98:c8:9c:a2:a0:0b:09:87:74:be:b5:17:
83:46:4e:a1:9d:90:ec:de:48:aa:a6:4a:1f:8a:52:3b:ce:c1:
55:3a:2f:32:0e:d3:5f:e1:a3:9e:e9:80:5b:f4:8f:d5:78:5e:
f8:e1:85:5d:3f:31:05:ed:f4:7e:b6:e1:46:68:7f:80:4b:82:
c7:c0:e4:02:ce:76:a1:95:b8:51:bc:1c:21:d8:05:f2:0b:98:
46:1d:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:51 2025 by rpki-client