Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/kfmPdwWjBshMBMEZFeRRjN7qA9Q.roa
File: kfmPdwWjBshMBMEZFeRRjN7qA9Q.roa (raw, json)
Hash identifier: EFjJIWaiUPbAlU4mHg0x/o0uPDtVekPGiOeV7pjCFlA=
Subject key identifier: 91:F9:8F:77:05:A3:06:C8:4C:04:C1:19:15:E4:51:8C:DE:EA:03:D4
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCB6FC18789E115C583F6D6BE5FE67
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/kfmPdwWjBshMBMEZFeRRjN7qA9Q.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12956
IP address blocks: 213.99.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b6:fc:18:78:9e:11:5c:58:3f:6d:6b:e5:fe:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91f98f7705a306c84c04c11915e4518cdeea03d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:24:ff:fe:fd:e4:cc:c8:01:33:af:dd:82:
4f:10:02:8e:83:6f:e4:d9:54:3c:a3:7e:c1:76:13:
41:e4:56:ac:f3:85:3f:b8:b8:91:41:b1:79:87:09:
b6:39:4f:34:76:d4:89:14:c3:6e:2e:d5:00:94:44:
7f:99:ed:29:61:5c:e1:cb:ab:11:77:6b:19:bf:40:
bf:1f:5d:75:ad:40:8c:b3:09:fd:59:e5:86:0c:d1:
43:91:b1:00:63:22:ce:a4:6d:45:0c:69:23:00:1e:
6a:9e:21:d3:f3:61:1b:8c:4c:fb:0f:0f:a2:f8:b1:
37:01:44:3f:19:d9:b0:d7:e9:c9:99:20:03:b8:ac:
fb:84:a8:6d:24:dd:06:14:64:d1:d5:a8:a4:e7:55:
9e:55:11:1e:fb:3d:f7:56:38:2d:8a:57:c0:b8:d5:
9a:86:54:09:ad:f7:b4:fe:9c:5d:24:e0:74:ad:48:
ec:77:b0:07:34:a9:e8:1c:1f:47:ed:db:e7:7c:52:
7b:13:13:63:c7:9f:42:e1:23:62:7e:0a:22:65:5e:
94:f8:f3:62:cc:22:f2:81:22:c4:07:3d:e2:c6:69:
d0:ba:25:a4:dd:53:40:ca:d5:b7:26:4b:eb:6b:36:
8c:5d:97:55:c3:66:12:c0:e1:9c:1f:0e:87:a1:18:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F9:8F:77:05:A3:06:C8:4C:04:C1:19:15:E4:51:8C:DE:EA:03:D4
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/kfmPdwWjBshMBMEZFeRRjN7qA9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.99.16.0/22
Signature Algorithm: sha256WithRSAEncryption
14:64:11:bf:8f:fa:0e:47:1b:df:4e:b2:6f:eb:77:cd:22:0b:
d4:11:7b:a4:eb:80:4a:e9:d5:50:b4:07:3a:0c:e3:c9:33:d5:
f2:86:1e:b1:34:f6:a1:79:68:ea:97:26:19:41:3d:cb:b2:87:
48:9b:f9:d0:ef:42:62:62:a9:7b:5b:64:89:a1:44:fc:94:8e:
4e:0a:b8:16:ad:5c:f4:b5:fe:0f:b5:f2:d0:fc:c9:89:64:73:
1c:e5:36:74:05:0a:56:34:77:ab:80:68:06:6e:bd:f6:9d:7a:
ff:df:ce:69:a8:cf:21:a7:41:78:ee:54:eb:88:53:a2:f9:42:
ba:8f:be:df:f2:03:8c:f5:4b:b0:44:a6:e4:e6:87:8b:37:b9:
55:d4:89:8c:e8:44:95:d8:75:1f:f5:ac:86:80:59:6a:4a:9e:
10:dc:75:aa:02:02:78:8c:50:02:a8:67:64:54:c2:b0:6d:1f:
f1:4c:f5:f5:31:fe:5b:98:a3:24:8a:d5:de:e0:b2:2c:0f:87:
ef:da:09:8a:8a:30:b0:1d:ad:be:a3:8d:46:1d:9b:5b:5d:1a:
e0:22:6e:f4:e2:8f:d1:09:98:39:cf:86:3d:17:9d:f5:b7:d8:
e5:9c:02:4d:71:17:01:9f:2c:a9:93:0d:9e:ee:4c:be:cc:b5:
85:c5:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:37 2025 by rpki-client