Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/AcCfdmtX0s1ox98wtpCni42C-jU.roa
File: AcCfdmtX0s1ox98wtpCni42C-jU.roa (raw, json)
Hash identifier: zhio1U91WzDZHSldqyuxdeAmgzgmXEOi8WI5fO7z0Z4=
Subject key identifier: 01:C0:9F:76:6B:57:D2:CD:68:C7:DF:30:B6:90:A7:8B:8D:82:FA:35
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019427B5F674A22F436344632AD3676669EA
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/AcCfdmtX0s1ox98wtpCni42C-jU.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 110.172.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 14:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f6:74:a2:2f:43:63:44:63:2a:d3:67:66:69:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c09f766b57d2cd68c7df30b690a78b8d82fa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:83:68:16:b8:8e:31:73:db:2a:00:ca:78:
16:49:5c:9c:43:64:89:61:88:bb:80:70:8f:55:8b:
05:3a:9c:96:e6:05:70:7f:84:58:09:df:5d:de:71:
86:31:ab:ca:db:44:6d:a0:b6:95:9b:74:8b:ca:59:
2c:4f:15:8a:69:f1:c9:c1:57:0a:45:8c:2c:48:c9:
e3:f7:21:ca:19:4a:03:de:de:a8:37:e1:6b:65:5f:
9b:87:b2:c0:4b:b5:0d:54:0f:67:d9:b2:7b:d8:8d:
0c:c9:c0:f2:7d:9e:40:66:ce:5c:6d:18:97:89:09:
61:98:03:d1:01:bf:35:5c:5b:ff:1b:67:d5:24:c0:
97:33:8f:90:65:75:d0:23:e1:9c:7e:34:00:97:33:
16:65:c9:0e:10:75:f9:c9:56:ba:fa:71:9c:d0:be:
9a:1e:53:f9:01:15:ae:c4:e0:37:c6:21:b3:5c:4d:
83:10:e4:62:f7:ca:1c:9a:55:1b:50:79:8a:d9:d4:
c2:d9:eb:53:7e:b6:49:e1:14:3d:34:fd:d0:3b:fe:
fd:44:96:d9:d2:94:97:87:3d:c9:08:eb:40:2b:95:
95:19:b9:45:21:3e:f8:9d:ca:94:0e:4c:41:bc:91:
35:12:b8:3b:a6:60:52:3b:b8:fb:ec:35:a9:9d:1e:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C0:9F:76:6B:57:D2:CD:68:C7:DF:30:B6:90:A7:8B:8D:82:FA:35
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/AcCfdmtX0s1ox98wtpCni42C-jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:13:c3:3a:d8:63:da:12:8d:6d:72:be:ce:11:96:d7:20:dc:
ac:a7:2f:ac:db:a2:f4:b6:de:a2:cc:da:6d:86:e4:f2:2c:a6:
4c:af:f9:8a:f7:68:94:fa:ac:3b:6b:bf:74:7d:65:b0:2a:96:
6d:79:8d:d5:82:be:98:a6:d1:4e:13:b4:43:de:5d:c6:5a:a1:
4f:09:54:33:b1:43:d0:f9:12:fa:98:36:c4:52:ca:cb:97:6f:
35:df:61:dd:61:b7:5c:98:b0:29:94:c8:9d:a7:6c:b0:49:9f:
e3:e7:5e:da:44:a5:64:c3:3f:40:74:67:b3:ae:f5:fe:0b:2f:
99:75:c7:ed:bf:f2:48:a5:e2:55:88:76:d6:16:73:74:0d:7b:
fc:29:de:78:33:3f:d9:2e:f2:5f:96:9c:9a:f7:93:f4:05:f7:
dc:43:9e:a6:2e:cb:9e:6b:d9:b5:71:c0:7e:06:37:80:a9:96:
d5:96:3a:dd:79:43:e0:3b:0f:56:0c:ff:de:a7:0e:43:37:63:
ea:f0:e5:19:28:53:72:d8:79:f3:7c:f5:87:e9:ce:6c:bc:69:
dc:39:4c:ec:75:a5:29:b6:2d:e5:03:ab:19:b8:83:17:8d:cc:
37:28:b2:57:fe:67:ec:f5:31:56:57:92:e8:be:f2:98:4e:7a:
75:c4:0f:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntfZ0oi9DY0RjKtNnZmnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx
ZWUyZDMwHhcNMjUwMTAyMTU1MDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWMwOWY3NjZiNTdkMmNkNjhjN2RmMzBiNjkwYTc4YjhkODJmYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGDaBa4jjFz2yoAyngWSVycQ2SJ
YYi7gHCPVYsFOpyW5gVwf4RYCd9d3nGGMavK20RtoLaVm3SLylksTxWKafHJwVcK
RYwsSMnj9yHKGUoD3t6oN+FrZV+bh7LAS7UNVA9n2bJ72I0MycDyfZ5AZs5cbRiX
iQlhmAPRAb81XFv/G2fVJMCXM4+QZXXQI+GcfjQAlzMWZckOEHX5yVa6+nGc0L6a
HlP5ARWuxOA3xiGzXE2DEORi98ocmlUbUHmK2dTC2etTfrZJ4RQ9NP3QO/79RJbZ
0pSXhz3JCOtAK5WVGblFIT74ncqUDkxBvJE1Erg7pmBSO7j77DWpnR7KRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHAn3ZrV9LNaMffMLaQp4uNgvo1MB8GA1UdIwQY
MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt
NTFmNWZmODFjMTE3LzEvQWNDZmRtdFgwczFveDk4d3RwQ25pNDJDLWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3
LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbqy+MA0G
CSqGSIb3DQEBCwUAA4IBAQBOE8M62GPaEo1tcr7OEZbXINyspy+s26L0tt6izNpt
huTyLKZMr/mK92iU+qw7a790fWWwKpZteY3Vgr6YptFOE7RD3l3GWqFPCVQzsUPQ
+RL6mDbEUsrLl28132HdYbdcmLAplMidp2ywSZ/j517aRKVkwz9AdGezrvX+Cy+Z
dcftv/JIpeJViHbWFnN0DXv8Kd54Mz/ZLvJflpya95P0BffcQ56mLsuea9m1ccB+
BjeAqZbVljrdeUPgOw9WDP/epw5DN2Pq8OUZKFNy2HnzfPWH6c5svGncOUzsdaUp
ti3lA6sZuIMXjcw3KLJX/mfs9TFWV5LovvKYTnp1xA+K
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:34:38 2025 by rpki-client