Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/3XfG2emgsAE1i3I41Pm9W4s-Cf0.roa
File: 3XfG2emgsAE1i3I41Pm9W4s-Cf0.roa (raw, json)
Hash identifier: c1l7SYRJfcAJGHF9PB+mzKSm5SFHpT2A6+4l0jqS990=
Subject key identifier: DD:77:C6:D9:E9:A0:B0:01:35:8B:72:38:D4:F9:BD:5B:8B:3E:09:FD
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019391E2A60E35A2D94DD2275423A4A8F88D
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/3XfG2emgsAE1i3I41Pm9W4s-Cf0.roa
Signing time: Wed 04 Dec 2024 13:36:10 +0000
ROA not before: Wed 04 Dec 2024 13:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216321
IP address blocks: 202.181.204.0/24 maxlen: 24
2a13:d8c0::/29 maxlen: 48
2a13:d8c0::/32 maxlen: 32
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:e2:a6:0e:35:a2:d9:4d:d2:27:54:23:a4:a8:f8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Dec 4 13:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd77c6d9e9a0b001358b7238d4f9bd5b8b3e09fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:d1:4e:07:45:a0:da:f5:99:44:06:8f:f0:
c9:dc:14:b5:c3:3d:5e:b9:34:c3:1e:57:a4:9d:fa:
b1:f2:b3:a9:52:68:8b:1f:b2:e1:5d:10:5d:de:ab:
e9:e4:a4:8c:e0:6b:bb:d8:37:2a:e6:78:7c:c9:3b:
b7:ea:b4:22:87:b0:12:23:7d:d1:72:be:89:52:09:
4a:9b:52:ff:bb:cb:c9:de:86:0d:d4:71:09:80:af:
22:09:5d:0f:e0:2d:bd:d5:98:6d:21:0d:7f:53:d3:
8a:f5:b9:4a:6d:43:57:56:0c:5d:8f:19:04:fe:94:
a7:5f:63:43:dd:df:ed:6d:41:2c:77:fa:96:b4:f4:
36:61:86:6c:63:0f:dc:21:3e:eb:5a:e5:b9:f6:ca:
9f:fc:b6:50:31:b9:ce:f6:6f:4f:5b:b7:5e:38:33:
2c:f8:2e:b0:7d:d4:bf:bf:ec:44:b6:e1:40:81:a0:
5d:ec:8d:35:85:e2:03:1a:20:fd:e4:52:70:54:38:
6f:ea:dd:8f:73:32:97:f1:92:67:8d:76:28:cf:3a:
8d:8d:98:45:8b:1a:65:b0:f2:4b:5b:c0:45:88:ee:
79:fe:14:86:a5:db:dc:61:40:9a:f1:a9:75:df:43:
a0:0e:cf:8f:bf:29:5d:f9:52:78:fb:e2:34:0e:42:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:C6:D9:E9:A0:B0:01:35:8B:72:38:D4:F9:BD:5B:8B:3E:09:FD
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/3XfG2emgsAE1i3I41Pm9W4s-Cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.181.204.0/24
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:be:35:e1:08:8e:1b:4b:9d:58:3c:22:db:eb:9f:c2:7d:fa:
3e:c3:9d:c9:b3:07:69:d3:d1:b2:cc:db:1f:9d:e2:dc:80:c0:
02:6f:73:3c:05:9c:99:09:07:7b:67:d3:48:32:4d:e0:9e:4c:
da:6e:50:3e:0d:78:fd:69:b1:ef:2c:74:32:46:97:7b:5d:12:
cd:7d:d9:36:9f:2d:70:2b:6d:a5:bc:4e:d6:e8:da:7f:fb:70:
92:9f:ed:8f:53:91:59:fa:df:2d:bb:ce:a2:53:30:e4:b8:86:
a9:15:77:7e:19:82:c2:82:d0:bc:4d:b6:d8:d4:48:13:bb:44:
25:4c:4c:9d:19:30:f2:c8:b1:42:6d:2c:b8:b2:be:a1:f2:c0:
e3:ca:b2:0b:f5:cf:0d:ae:96:1b:db:d8:2e:1b:c1:e6:17:07:
1e:9d:05:4d:79:d8:0f:e6:c5:1f:31:2f:a1:08:ab:7d:2d:d7:
66:25:8b:aa:02:4b:a5:ac:0f:de:54:7a:6c:88:73:e8:5e:6f:
a0:97:83:de:76:af:37:f0:ee:41:85:79:ad:02:df:e0:23:ef:
42:ee:6b:38:e4:23:6b:a9:c3:9a:bd:f4:c3:73:9a:a4:09:59:
80:3a:45:ef:11:23:4c:fc:71:96:5a:a0:46:c3:09:66:a5:04:
00:76:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:31:59 2025 by rpki-client