Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/vDTSIo-f2Fa7TQH9KTm0KOCN-tE.roa
File: vDTSIo-f2Fa7TQH9KTm0KOCN-tE.roa (raw, json)
Hash identifier: Xq1I0Jfvt15fSqgl6ozI5RBITz34dRDFWilW2s9uOtY=
Subject key identifier: BC:34:D2:22:8F:9F:D8:56:BB:4D:01:FD:29:39:B4:28:E0:8D:FA:D1
Certificate issuer: /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial: 0195469BFC925620C929E8F6F50DA00DAD68
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/vDTSIo-f2Fa7TQH9KTm0KOCN-tE.roa
Signing time: Thu 27 Feb 2025 08:53:02 +0000
ROA not before: Thu 27 Feb 2025 08:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48815
IP address blocks: 109.233.120.0/24 maxlen: 24
109.233.121.0/24 maxlen: 24
109.233.122.0/24 maxlen: 24
109.233.123.0/24 maxlen: 24
109.233.124.0/24 maxlen: 24
109.233.125.0/24 maxlen: 24
109.233.126.0/24 maxlen: 24
109.233.127.0/24 maxlen: 24
176.221.48.0/24 maxlen: 24
176.221.49.0/24 maxlen: 24
176.221.50.0/24 maxlen: 24
176.221.51.0/24 maxlen: 24
176.221.52.0/24 maxlen: 24
176.221.53.0/24 maxlen: 24
176.221.54.0/24 maxlen: 24
176.221.55.0/24 maxlen: 24
212.112.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 09:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:9b:fc:92:56:20:c9:29:e8:f6:f5:0d:a0:0d:ad:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Validity
Not Before: Feb 27 08:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc34d2228f9fd856bb4d01fd2939b428e08dfad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:52:fc:e1:cf:a0:94:f1:96:94:66:86:6b:
76:9d:98:6f:e7:72:a2:a5:6a:18:a0:f3:0f:58:cf:
23:3d:6f:2b:ea:77:24:36:52:e1:8a:ea:34:ae:83:
0e:d4:20:bc:62:88:f8:85:cc:7a:d6:1c:a0:0c:cc:
97:43:39:97:4b:3d:a1:e8:86:5c:1e:8b:e0:3d:ed:
27:23:e0:dd:cf:68:f2:bc:f6:d5:6d:3a:dc:2b:b2:
fa:72:90:4d:56:d8:91:78:5d:d2:e1:d3:a8:57:5b:
a0:69:20:a7:c9:65:fc:19:19:b2:71:5b:6e:68:5a:
3b:b2:a8:9b:a2:86:f1:d9:d0:00:3e:89:06:e1:0e:
6c:71:d9:bb:d5:91:f3:d4:9f:cd:55:4e:d0:cd:af:
d8:7d:15:b7:86:a8:a6:e0:02:46:8d:39:21:ed:e0:
10:b3:94:2b:7c:c2:8a:ed:d1:b2:56:5f:e5:62:8b:
77:48:3a:22:16:9a:18:17:9f:4f:91:d4:75:39:4d:
4c:cd:bd:8d:15:74:18:5a:20:d7:b5:a3:79:8c:2f:
4f:2e:52:9e:4c:43:de:a2:4b:a3:e7:da:e4:ba:2a:
2a:05:09:09:0e:ca:cd:74:c4:db:24:74:e9:34:91:
48:c3:3f:3a:05:d0:63:c9:b2:ae:a9:35:c0:f8:cf:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:D2:22:8F:9F:D8:56:BB:4D:01:FD:29:39:B4:28:E0:8D:FA:D1
X509v3 Authority Key Identifier:
keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/vDTSIo-f2Fa7TQH9KTm0KOCN-tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.120.0/21
176.221.48.0/21
212.112.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f2:66:1c:50:91:af:7a:23:bf:8a:82:50:2d:20:3f:43:ce:
91:1f:3b:ac:a4:33:fb:25:a7:8e:4b:b6:22:e0:37:cd:e8:50:
5d:12:e5:e9:89:bf:0a:d9:79:67:5a:02:c7:0e:ce:6c:5a:47:
ae:d7:48:5c:cf:69:82:db:bb:63:c1:35:4d:b2:82:23:03:e8:
00:9c:d5:27:15:4c:82:0b:82:69:a0:36:99:3c:d1:c8:5a:ae:
63:35:ac:c7:1c:38:3c:87:0a:42:48:cf:53:45:ff:d1:59:02:
5e:e9:0a:7d:8f:7a:96:13:00:0e:01:fe:da:cf:09:e2:db:23:
99:4c:17:38:5c:88:c3:7b:15:6a:24:43:7a:8e:c4:cd:2b:bb:
ca:4f:69:04:32:46:a1:e2:d9:a6:46:89:1a:6e:98:71:2a:cb:
b2:a5:12:95:36:30:66:fd:39:6d:06:3e:13:c3:2d:f5:e9:af:
d8:c7:20:23:94:b3:9a:59:d2:c4:52:7b:c6:8c:16:28:a7:63:
58:e2:1a:46:59:66:0a:19:e1:a3:72:86:40:03:c8:fa:5a:7d:
92:3c:74:f3:7f:7a:f6:9f:98:36:e6:68:67:38:4b:3a:6a:c9:
38:5f:04:64:89:05:e7:aa:b0:72:d4:1b:3d:c5:fd:5d:ff:2c:
79:1b:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:50 2025 by rpki-client