Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/L3BLdf4v-O-0GT2nqCtN7tcpSF4.roa
File: L3BLdf4v-O-0GT2nqCtN7tcpSF4.roa (raw, json)
Hash identifier: Jl5gdmQIReU+nQcODeaV2BhZLgwOUwPQWSzb3wodJt8=
Subject key identifier: 2F:70:4B:75:FE:2F:F8:EF:B4:19:3D:A7:A8:2B:4D:EE:D7:29:48:5E
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019503743687F0E653F7799E34B7F2A74E97
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/L3BLdf4v-O-0GT2nqCtN7tcpSF4.roa
Signing time: Fri 14 Feb 2025 07:55:02 +0000
ROA not before: Fri 14 Feb 2025 07:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214196
IP address blocks: 212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:74:36:87:f0:e6:53:f7:79:9e:34:b7:f2:a7:4e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 14 07:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f704b75fe2ff8efb4193da7a82b4deed729485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:c5:82:81:72:0b:81:61:6e:f5:c1:05:bb:
16:01:a8:55:18:77:33:7f:f7:d9:72:67:7e:94:33:
88:75:ee:01:80:04:cc:c5:81:2f:65:a5:f5:fb:7b:
e1:85:3e:8d:55:eb:91:ab:91:cd:a3:cf:8a:ca:cb:
7e:50:98:4c:49:fa:1a:43:01:79:9b:5e:f0:d9:68:
1b:95:1c:7c:e0:46:2c:79:02:1a:dc:66:9f:3f:62:
2b:8a:76:07:76:72:f7:65:f8:5a:24:47:5b:ba:66:
d2:dd:06:2c:62:51:c9:14:ad:78:ca:df:a2:54:6d:
63:2f:72:ff:bf:ff:57:3a:ec:d2:f4:af:bc:2b:63:
70:36:78:48:0a:61:b4:d2:1f:56:6d:58:b3:6c:88:
2a:bd:66:39:4b:22:20:84:d6:d2:f1:66:80:5d:f2:
fa:5c:5e:39:2f:d7:d9:2a:52:00:0a:f1:63:17:af:
22:9d:9d:00:1c:41:8b:9f:aa:23:0b:2f:e9:7d:03:
ef:fc:85:b7:a6:43:b5:10:ec:f2:cd:06:50:11:f3:
01:24:07:2e:a7:2c:d6:5a:a4:fd:2a:20:c6:2a:91:
ac:f5:55:b4:c0:31:ce:a3:87:fb:db:ca:67:62:6b:
36:d6:81:fb:24:76:27:76:09:a7:fd:ed:25:4a:10:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:4B:75:FE:2F:F8:EF:B4:19:3D:A7:A8:2B:4D:EE:D7:29:48:5E
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/L3BLdf4v-O-0GT2nqCtN7tcpSF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9e:60:79:e8:1a:db:d7:03:61:ec:04:e6:3e:d0:6d:9b:10:
83:1b:1d:4a:de:50:d1:6d:0b:7d:0b:57:8a:ec:02:cb:15:c9:
db:97:d5:30:08:71:94:59:a6:3e:88:83:22:ed:9a:8c:42:2b:
79:ef:4a:6a:5d:16:5b:e9:d4:66:22:43:01:c4:48:c3:33:b6:
d7:37:74:04:f7:80:39:15:4f:b4:5a:58:10:6e:05:1d:3d:0a:
f8:00:f3:b9:59:9c:e3:6d:3c:8e:af:30:82:6c:51:f9:69:40:
3b:3d:16:b8:e6:3f:ee:ba:7d:14:d5:61:55:4a:bc:95:15:f5:
e5:7e:20:bb:1e:07:6f:8c:21:84:8b:3b:dd:5a:aa:e0:72:d8:
05:81:58:c9:27:7c:9e:bc:70:06:3f:bc:84:cc:9e:a5:5f:b7:
71:7d:db:2b:73:a7:9e:b7:51:9e:fc:62:db:ba:bd:bf:36:12:
67:e1:1e:06:bc:b2:b3:33:83:29:2f:7a:38:66:e4:ed:f0:ad:
b1:7a:1f:48:68:fb:6f:89:9b:df:dc:98:19:ba:62:34:18:42:
6d:5c:71:46:eb:f8:5e:bb:49:e4:00:24:b1:67:93:af:9a:29:
a1:09:84:77:1c:19:15:3a:a6:eb:4b:07:e3:79:a5:c0:c7:6c:
0c:16:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:48 2025 by rpki-client