Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/DRRFLGxPQzZS3W13by0RPY1yxs0.roa
File: DRRFLGxPQzZS3W13by0RPY1yxs0.roa (raw, json)
Hash identifier: qXEk/x3SoQZfu0JlvKco395HenxET5HhZKamiaP27iQ=
Subject key identifier: 0D:14:45:2C:6C:4F:43:36:52:DD:6D:77:6F:2D:11:3D:8D:72:C6:CD
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 019541A9CFB603AD44C21765B79C3943DC7A
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/DRRFLGxPQzZS3W13by0RPY1yxs0.roa
Signing time: Wed 26 Feb 2025 09:50:02 +0000
ROA not before: Wed 26 Feb 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12822
IP address blocks: 212.108.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 26 Feb 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:a9:cf:b6:03:ad:44:c2:17:65:b7:9c:39:43:dc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Feb 26 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d14452c6c4f433652dd6d776f2d113d8d72c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:a0:4b:5a:f9:eb:8a:46:4b:1b:c5:75:df:
3a:26:b4:05:b7:20:29:ae:9d:8d:da:2b:94:37:ba:
ff:85:4a:69:f3:2c:8b:60:8b:9e:19:bb:56:3c:f9:
81:1f:01:41:ce:27:cf:bb:17:51:b4:6a:5a:bd:a4:
39:d0:d3:ba:2c:4b:04:0e:02:86:58:96:24:85:7b:
55:a2:1f:3f:2e:01:4c:dc:0f:ba:d2:82:bb:9d:31:
97:97:2f:61:da:aa:a8:b4:ad:2b:3b:84:bf:80:a1:
ec:51:69:f1:2d:ef:14:84:af:1e:06:e8:05:98:a8:
be:7c:8c:fd:34:1c:e5:c7:90:cb:c7:e9:0d:0c:f9:
82:b9:f8:3d:76:79:da:d7:9a:6c:dd:87:d1:b8:0f:
af:7c:80:1a:25:31:f0:31:fe:11:5e:98:b8:d0:9e:
19:c6:2e:d3:11:79:b7:86:7f:63:14:59:8a:77:8a:
7a:a8:21:f9:29:3f:c0:87:42:79:ac:46:ef:c1:e6:
65:4b:d8:01:4c:29:32:2c:b2:7e:88:e6:76:16:9e:
86:f8:96:ab:65:17:20:4e:b3:a1:08:43:74:73:b5:
e0:3b:93:2f:c9:bd:f9:f6:3d:17:c4:74:fa:d4:31:
4c:ab:24:f5:e7:a3:f9:ec:0d:b4:9a:af:42:a0:e2:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:45:2C:6C:4F:43:36:52:DD:6D:77:6F:2D:11:3D:8D:72:C6:CD
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/DRRFLGxPQzZS3W13by0RPY1yxs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.160.0/20
Signature Algorithm: sha256WithRSAEncryption
44:2c:d1:d6:2f:5c:17:ed:3f:79:7a:ff:b2:ca:f4:32:1b:c2:
c8:c3:12:7d:7b:6c:6c:20:af:a5:c0:64:cd:ea:a8:c6:57:c6:
0d:5f:7f:20:a2:a5:32:1b:6b:40:de:b2:12:c9:f3:46:cf:68:
e3:24:80:e3:59:7d:bd:c8:b8:10:74:ae:76:3e:e3:87:ab:da:
cb:24:d9:7a:e2:17:f3:3f:4c:0f:ec:eb:b9:8a:2e:f3:b2:07:
4c:90:89:4e:1e:58:4c:c1:f2:5e:4d:77:da:fb:01:c9:b0:7d:
62:6d:04:3e:49:66:bc:86:2f:8f:8a:5a:a0:86:56:19:90:87:
ca:41:49:81:33:af:29:0a:3a:6f:10:e3:20:b9:96:75:74:74:
a4:44:95:5f:db:22:09:54:42:3e:ea:b7:1f:c3:6d:a3:eb:2b:
bc:d7:71:13:43:ea:03:31:b9:ac:10:24:5e:c5:28:af:90:92:
0f:7f:d6:88:a3:67:c7:77:ff:61:14:4b:73:ab:cd:b8:7e:4c:
76:c3:5e:76:16:cc:5b:3b:43:fd:d9:ed:ef:49:b5:04:3c:59:
0e:97:b9:b3:6f:a1:f3:62:5a:2b:7e:f1:d7:ec:38:a6:15:27:
9b:2b:e3:9a:ba:cf:32:4b:48:d1:09:14:c0:4e:15:ad:f0:3a:
b5:22:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:46 2025 by rpki-client