Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/K3FMbTitj0DBzcG7RmQLgkhqCb0.roa
File: K3FMbTitj0DBzcG7RmQLgkhqCb0.roa (raw, json)
Hash identifier: PxdBWrOxb+9ppdpq+DsjQyOMn+E1WmvecgjgEuQBWkQ=
Subject key identifier: 2B:71:4C:6D:38:AD:8F:40:C1:CD:C1:BB:46:64:0B:82:48:6A:09:BD
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019427B5F7B894F43A2868FD224FE7FCCA75
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/K3FMbTitj0DBzcG7RmQLgkhqCb0.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214174
IP address blocks: 110.172.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 14:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f7:b8:94:f4:3a:28:68:fd:22:4f:e7:fc:ca:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b714c6d38ad8f40c1cdc1bb46640b82486a09bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:96:8b:61:d8:ba:d4:5e:ee:a5:55:a2:6f:
57:de:86:a9:1c:c3:f2:f1:61:f1:76:7b:24:11:11:
98:35:14:db:b7:d4:c4:d3:b5:fa:eb:79:3a:20:28:
69:e5:55:b9:9e:d0:f2:28:64:27:48:1f:1a:7d:bb:
0c:cc:9f:7d:23:aa:e6:82:38:b5:67:39:b9:58:92:
e3:62:7d:27:d5:4c:85:9f:ba:8b:af:8c:3f:fe:91:
a9:db:af:41:f9:9f:73:36:bc:a0:79:be:21:0e:b5:
8f:74:4d:68:c6:fe:33:4e:c1:0e:9d:ba:c6:09:bb:
70:86:4e:63:6f:68:8d:f0:48:5d:99:1d:57:c4:97:
6e:3a:63:69:b8:fc:70:aa:e7:13:d6:f1:0b:39:cb:
9a:cb:ac:db:b8:6e:1c:45:65:b1:10:79:b4:bd:4e:
7c:17:16:23:fa:f3:6a:a4:9b:14:32:99:3a:0d:d0:
8a:8d:42:87:f0:67:68:5f:e9:5a:81:26:53:c4:3b:
9f:ca:8f:b3:6a:e8:b3:63:7c:0e:1e:cf:b1:a4:d1:
78:47:1c:a7:ca:4e:78:91:0d:a5:ee:ac:a4:50:93:
85:b4:f6:dd:1d:c9:71:65:24:a7:a0:c6:a2:fc:3b:
f6:c6:ee:4a:e2:03:ac:d6:6e:a5:f5:64:c3:9e:16:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:4C:6D:38:AD:8F:40:C1:CD:C1:BB:46:64:0B:82:48:6A:09:BD
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/K3FMbTitj0DBzcG7RmQLgkhqCb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.190.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2d:cc:6c:e5:4e:a6:7c:22:23:61:f4:c0:f7:79:8a:d2:e1:
9d:54:03:aa:87:32:2b:c9:df:1b:c0:28:4e:6d:92:be:4d:a4:
5b:d6:ea:d6:b3:e0:66:e6:f2:0f:a6:66:28:31:fa:50:7d:8d:
56:7c:56:2a:0c:7d:93:37:94:62:35:8a:c4:5b:f2:94:cc:40:
ea:fb:1a:67:e4:5f:4f:a8:c1:9e:25:a9:8a:1c:57:58:e4:96:
f7:a9:e7:29:69:b8:c2:90:1d:8f:40:ed:1b:17:b5:87:de:84:
e4:a3:70:41:c5:b3:dd:72:e2:e5:49:5e:d8:69:e8:99:f4:d4:
3c:06:09:e7:98:ef:7d:d3:ce:b8:74:7d:a1:89:16:c1:a7:3f:
c4:76:f4:fe:ba:d6:37:d6:d8:97:ec:39:4b:c6:58:1d:66:2f:
d0:c0:69:a2:95:2f:32:17:8b:9b:39:1a:79:52:1f:31:bc:11:
c0:94:54:5f:d5:b1:eb:e1:66:3c:1c:84:fa:5b:76:93:39:8f:
9b:22:58:1b:be:6d:c6:e9:ae:96:2f:e9:e7:ff:3e:ef:8d:f2:
13:98:28:31:01:a2:ed:a6:0d:36:d1:8d:18:c5:ce:0a:63:9e:
b1:6c:bd:25:5a:d9:dc:1b:ab:0f:61:72:f1:5d:37:db:74:5d:
3f:b0:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:32 2025 by rpki-client