Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/Fw3nyiBUIl4faYURFBNE_zuFgfw.roa
File: Fw3nyiBUIl4faYURFBNE_zuFgfw.roa (raw, json)
Hash identifier: xbSMAPHn1glZtsBPkBPf+oQeImyOKqkfsG7B/vT9sso=
Subject key identifier: 17:0D:E7:CA:20:54:22:5E:1F:69:85:11:14:13:44:FF:3B:85:81:FC
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0191DA86202F68EE191B3A1C8B7F15128650
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/Fw3nyiBUIl4faYURFBNE_zuFgfw.roa
Signing time: Tue 10 Sep 2024 06:01:48 +0000
ROA not before: Tue 10 Sep 2024 06:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40991
IP address blocks: 110.172.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 08:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:86:20:2f:68:ee:19:1b:3a:1c:8b:7f:15:12:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Sep 10 06:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=170de7ca2054225e1f698511141344ff3b8581fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:57:b5:a1:16:8b:cd:53:4d:c8:4f:30:91:
e6:c2:d5:d9:60:51:f6:56:ec:e1:dd:7d:14:97:f1:
a1:5d:fd:c1:02:6b:2c:50:b9:02:2f:d1:1b:66:d8:
26:d3:41:42:f3:16:85:ca:f0:df:d4:57:ca:96:56:
f2:ba:7a:9b:e6:65:69:d2:4e:2a:fc:3a:8f:e3:b1:
f4:7f:56:ca:1d:93:5a:68:21:67:9f:f3:b9:56:0e:
0e:c0:7a:f5:53:2e:38:55:a1:25:d2:ff:ee:73:10:
e7:ba:f1:98:fe:2b:e9:9a:2c:b6:f7:5a:cc:e1:d4:
a9:79:26:b5:f4:73:e0:8b:44:dd:fa:dd:4b:ea:e9:
a1:36:51:83:8f:f0:cf:52:76:6b:72:54:c4:d6:5c:
69:75:66:fd:09:5b:55:22:fa:1e:82:7f:73:9b:9a:
27:9c:05:26:ca:15:7e:92:d2:09:be:85:f0:94:8f:
69:dc:34:24:d7:ed:76:c1:a3:7c:8e:d0:cc:2d:c7:
91:c5:7f:ea:79:03:be:ec:33:8f:99:ee:b3:fa:d6:
01:01:b1:57:e2:4f:a4:d2:11:68:ad:03:25:c3:59:
2a:c4:47:1a:73:9b:8b:53:58:b1:6e:52:b6:49:21:
69:c3:e7:79:ff:83:f9:67:79:d6:5d:8f:df:8c:aa:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0D:E7:CA:20:54:22:5E:1F:69:85:11:14:13:44:FF:3B:85:81:FC
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/Fw3nyiBUIl4faYURFBNE_zuFgfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.148.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5b:fb:6a:39:0c:7d:31:10:02:2b:9a:e1:a4:81:fe:29:58:
2b:cb:cf:2a:b8:77:72:9a:15:ba:e8:0b:48:c8:44:ec:f9:12:
4b:e3:71:c8:39:ea:e6:89:1e:1c:90:10:e9:8e:91:d7:a6:11:
82:d6:ff:d0:47:27:59:cb:45:27:22:d9:7a:34:9d:3a:06:de:
28:f5:dc:de:ca:63:5c:1d:06:7c:9d:ec:d9:b8:cd:e4:bc:8b:
4c:a2:50:b7:dd:85:34:fa:c0:f9:71:6b:02:92:b8:f5:45:ee:
a7:a5:99:8b:fa:77:45:46:fb:be:fc:2b:f0:18:71:d3:ee:4f:
ee:32:57:a6:a5:e5:86:db:8b:38:ae:93:01:bd:39:73:68:2d:
18:b6:c6:ea:7b:64:7b:01:5d:8a:f1:5d:56:38:47:34:4f:9b:
e9:5e:8f:cb:7e:40:ea:7b:7b:b7:ab:9f:d5:ad:99:a9:75:38:
5f:2b:be:99:ff:c8:e2:09:1d:6d:bd:ec:40:71:bf:a4:c0:d0:
3e:6d:1b:12:57:6f:25:8d:0c:19:99:07:bc:bd:f5:a3:55:de:
7a:c4:4a:80:4a:54:44:b1:95:df:4f:55:56:35:7b:1a:aa:db:
3f:85:d4:ac:94:95:1e:e4:b9:73:96:6a:af:3a:02:77:1d:7e:
b0:a0:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:05 2025 by rpki-client