Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/A9BDrskujGgFY6TMxeV7cYBWdN0.roa
File: A9BDrskujGgFY6TMxeV7cYBWdN0.roa (raw, json)
Hash identifier: kJ2Uxw5ZDUniGV9MD2Oz65TIOEM9i72b9jg9X7O7kTo=
Subject key identifier: 03:D0:43:AE:C9:2E:8C:68:05:63:A4:CC:C5:E5:7B:71:80:56:74:DD
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01943C168FA2506805EC037182727ABC6BF0
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/A9BDrskujGgFY6TMxeV7cYBWdN0.roa
Signing time: Mon 06 Jan 2025 14:48:18 +0000
ROA not before: Mon 06 Jan 2025 14:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 110.172.190.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 15:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:16:8f:a2:50:68:05:ec:03:71:82:72:7a:bc:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 6 14:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03d043aec92e8c680563a4ccc5e57b71805674dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:e1:d4:85:da:0d:a7:c2:57:db:ff:74:8e:
1a:7e:de:eb:eb:35:d2:1a:8d:a7:22:11:b6:61:7b:
b0:5d:e3:fd:34:5f:2f:f5:ea:35:f6:44:ca:4a:99:
10:7b:3b:d7:47:9f:d8:54:c3:5a:56:73:78:5b:f9:
41:9b:54:c9:14:d8:f4:43:e2:ae:c7:69:e1:e4:23:
2f:f6:98:8d:63:8d:8c:b1:77:02:87:35:cf:20:92:
32:d5:c4:92:77:51:18:3e:aa:8d:7d:f2:91:f8:97:
b3:25:d5:63:e7:5e:a2:85:ba:a0:64:72:f0:81:35:
ea:f6:08:3b:53:7b:1a:e0:7f:36:5b:56:71:b1:38:
41:d3:09:3c:c8:15:7d:d0:d1:37:84:6d:16:e2:80:
36:c4:00:ca:c7:8d:69:a8:71:60:0a:33:a7:6f:b3:
a0:18:91:ea:ad:16:7e:b0:42:a5:6e:33:09:ce:06:
bd:4e:57:88:98:35:18:09:ce:b0:ff:bf:a1:9b:5f:
af:5c:e4:7d:23:31:da:d7:79:ef:8d:82:a5:15:64:
cb:24:b5:52:37:c4:83:04:d8:c1:ea:d3:a3:93:24:
65:13:93:db:e0:fb:9f:d9:00:55:97:2c:19:bc:b0:
ff:30:bb:91:fb:2b:6c:21:ae:2b:a8:ae:4f:df:d9:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:43:AE:C9:2E:8C:68:05:63:A4:CC:C5:E5:7B:71:80:56:74:DD
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/A9BDrskujGgFY6TMxeV7cYBWdN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.190.0/24
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:68:66:dc:49:ec:f4:b6:c8:a8:b5:b2:01:36:af:b4:85:e1:
f5:8f:0e:ba:df:22:94:4f:d9:a6:ab:cd:a6:1e:40:a8:b6:26:
c9:cf:ac:1c:13:06:75:82:74:bc:50:24:05:db:52:cc:01:74:
82:5d:48:9e:12:bd:f8:8b:3e:3a:79:c2:d6:39:1c:57:03:79:
ea:91:21:09:59:f8:a3:e9:d1:9c:c1:20:7a:dc:41:85:d0:de:
38:72:7b:31:16:08:d5:93:7a:92:0e:75:5a:4f:10:f7:42:cb:
d8:b3:8b:fa:70:03:f2:d1:19:d4:76:d1:ec:de:c9:07:99:bd:
18:70:46:d5:a9:a5:46:a6:61:62:c0:04:9b:f7:d1:1f:14:d2:
32:0e:0d:d2:f3:25:cb:ae:67:60:a1:69:18:f0:a8:af:da:b4:
68:45:c6:b4:1c:a6:55:c0:16:0b:a1:cc:1b:83:6b:9a:e8:34:
af:65:28:23:eb:bf:fb:13:49:b9:50:8b:d8:53:dd:91:1b:eb:
21:0f:dc:8f:01:fc:5a:a0:72:03:3b:84:e3:48:03:1e:17:4e:
fe:07:ce:44:99:14:20:64:5c:5d:a0:8c:c7:ec:fe:f9:eb:6c:
63:da:dd:77:b9:04:e8:16:d3:72:83:84:76:33:32:fb:e9:83:
a0:d5:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:10 2025 by rpki-client