Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/KAvITpeqw89VcctR1KcdwXhDAcw.roa
File: KAvITpeqw89VcctR1KcdwXhDAcw.roa (raw, json)
Hash identifier: n73oLCxVln/9PxsZLwaAHmA8RtJct4t8zOPt7ad6gEk=
Subject key identifier: 28:0B:C8:4E:97:AA:C3:CF:55:71:CB:51:D4:A7:1D:C1:78:43:01:CC
Certificate issuer: /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial: 0194411EB55C1D007200BE08555DFEDC528E
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/KAvITpeqw89VcctR1KcdwXhDAcw.roa
Signing time: Tue 07 Jan 2025 14:15:19 +0000
ROA not before: Tue 07 Jan 2025 14:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200434
IP address blocks: 59.153.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 08:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:1e:b5:5c:1d:00:72:00:be:08:55:5d:fe:dc:52:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
Validity
Not Before: Jan 7 14:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=280bc84e97aac3cf5571cb51d4a71dc1784301cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:64:9c:87:33:a1:a6:a0:44:53:d5:e2:ae:
1b:1f:e3:cb:23:e7:6b:b5:0a:87:08:e9:98:8a:72:
63:59:33:2d:f1:2e:fe:80:da:d8:dc:89:7b:1e:ea:
f0:80:b6:8d:14:9f:d7:93:ba:70:a9:30:65:af:50:
e1:f0:54:7f:55:1d:06:a5:1b:fe:e6:d4:cd:31:ef:
80:34:58:46:d7:09:c7:a0:f1:28:4a:42:2b:0a:8b:
c8:59:fe:1b:95:bc:54:f1:e0:8c:9e:39:e4:67:36:
7a:45:56:9f:e0:4b:b9:30:4f:a3:f7:40:83:6a:38:
ca:df:41:19:57:a3:2f:e1:18:a1:a5:b1:65:8e:bb:
64:62:fd:7b:a7:1e:bf:f5:d8:dc:5e:e0:17:8f:df:
48:33:c3:8a:7b:84:c6:23:2c:01:b7:29:fb:ae:d8:
13:43:a6:25:28:5d:fe:f9:91:3c:91:bd:d7:10:ee:
10:39:83:f0:13:f4:70:bd:9f:5c:44:a7:f3:d7:0c:
c8:bf:02:37:a5:c7:7a:3a:53:2e:63:b8:58:da:1b:
68:ba:7a:2a:a4:c6:ba:33:ce:4c:80:f5:0d:ff:c9:
39:da:fd:ea:70:55:09:5b:28:7f:c9:0c:01:46:f6:
ab:6d:3c:05:f6:08:ae:fb:18:0f:94:13:79:4a:f9:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0B:C8:4E:97:AA:C3:CF:55:71:CB:51:D4:A7:1D:C1:78:43:01:CC
X509v3 Authority Key Identifier:
keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/KAvITpeqw89VcctR1KcdwXhDAcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.36.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:20:c5:cb:3b:c3:47:df:b4:d8:96:2f:58:4e:d0:b8:96:ca:
55:9a:11:20:92:8c:2b:4f:7f:2e:ad:82:f2:d8:2d:39:c6:43:
02:50:f9:fe:d8:13:81:f2:e0:9d:28:78:d0:ea:fd:30:cd:e5:
ac:19:28:2c:b5:79:df:47:ec:7b:a1:50:e0:82:67:b0:6b:70:
76:08:17:fb:e1:84:df:80:24:5b:cd:3a:4e:7f:e0:a5:33:4a:
5a:71:4e:f6:97:ef:00:6b:1b:25:b5:20:57:58:34:e0:8e:84:
c3:de:8e:2f:02:7c:93:3d:13:ba:14:76:ac:af:42:85:68:d8:
0e:86:c4:7a:8d:90:9a:ad:47:81:00:6b:47:dc:7a:2e:51:ae:
af:8f:2f:bb:15:51:81:81:0c:48:20:86:72:18:82:b3:82:01:
48:02:c5:dd:40:6b:ee:82:9a:04:c5:a7:41:9e:b9:8e:e3:76:
16:df:b8:3f:a1:54:86:43:fc:c0:5b:9e:05:3d:87:58:6d:a0:
e1:62:90:6d:f1:a2:a0:ce:ef:56:2e:6d:b6:22:3e:c2:7b:f0:
ac:63:89:48:6c:cb:32:f9:f2:39:43:f0:ed:ed:ba:f2:dc:7b:
e9:42:21:65:88:fe:ef:73:15:42:de:e0:e6:48:dd:b2:6a:a9:
57:fe:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:36 2025 by rpki-client