Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/k_ZqmPCnz03_dZc9N2wNiIoXlGk.roa
File: k_ZqmPCnz03_dZc9N2wNiIoXlGk.roa (raw, json)
Hash identifier: s/vWuWuZtih+hcjhlcVCGPb/WO4xU06Hn4tT7Lm6VrM=
Subject key identifier: 93:F6:6A:98:F0:A7:CF:4D:FF:75:97:3D:37:6C:0D:88:8A:17:94:69
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019427B5F789E48DF7231E5D2D302A35C6D1
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/k_ZqmPCnz03_dZc9N2wNiIoXlGk.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201949
IP address blocks: 14.102.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f7:89:e4:8d:f7:23:1e:5d:2d:30:2a:35:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93f66a98f0a7cf4dff75973d376c0d888a179469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:81:64:21:3b:b6:24:41:a3:ba:e8:88:6a:
0f:de:f9:23:a5:6c:aa:0d:2f:31:02:3e:b6:ea:9b:
6c:ae:de:84:61:08:d7:fe:42:a3:6a:80:9e:2b:26:
6b:73:3f:6f:10:36:a5:7e:74:06:71:7d:41:8a:86:
ec:98:97:24:30:e4:79:3a:a4:17:ba:db:53:43:5a:
ec:16:7f:9f:6e:24:9c:58:f6:4d:a9:29:f8:8a:37:
2a:9d:6b:65:97:d0:93:7e:77:6e:7a:cd:99:7e:01:
aa:b0:08:f1:2d:d2:21:12:9d:d3:ae:63:de:42:80:
32:e5:40:e8:35:93:c1:19:fc:6c:8b:94:85:5e:11:
55:f6:d1:19:81:e5:b2:74:e3:14:47:5b:73:4e:1d:
ed:2e:c2:7f:1e:34:9a:21:85:c5:0a:a9:7a:27:28:
6c:32:d4:bd:74:2a:5a:2f:99:7c:39:2b:ab:6a:f2:
df:95:8d:3e:cc:55:e8:64:4b:e7:19:a5:5f:1c:70:
37:fa:8b:ce:38:ad:34:03:9c:c2:d8:76:b2:94:a8:
7f:eb:08:2a:64:51:5c:3f:d2:00:ff:ce:a1:29:27:
7b:ca:15:33:6d:c0:b4:ec:21:48:5a:47:e7:ae:73:
8a:ba:6d:dd:fc:7e:c2:7c:13:bf:f2:3a:61:67:07:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F6:6A:98:F0:A7:CF:4D:FF:75:97:3D:37:6C:0D:88:8A:17:94:69
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/k_ZqmPCnz03_dZc9N2wNiIoXlGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.10.0/24
Signature Algorithm: sha256WithRSAEncryption
30:06:ef:cf:75:61:55:64:2f:47:5d:ac:9e:d1:97:e9:a6:21:
25:c1:6d:d8:21:86:55:8c:f7:49:78:e5:6c:85:8d:b6:f7:de:
45:c5:f1:f0:09:77:44:90:0e:9a:67:3c:8f:90:41:fb:7b:66:
3c:86:61:59:be:01:55:04:2b:d2:70:8c:3f:03:e8:6e:96:70:
cf:51:ae:f6:d4:42:31:ff:89:96:cd:a6:83:0c:ca:46:35:6a:
2b:c0:22:65:65:e4:27:ff:12:e2:ce:62:7e:8c:d5:a4:7c:63:
09:64:d8:89:d9:bd:2e:5e:aa:60:d2:5d:c2:01:a4:ab:7a:8a:
ed:a6:ee:52:fd:5e:d5:cc:f4:b1:5a:8a:b4:d8:8a:e0:56:b6:
9a:dc:ff:0a:05:bf:44:55:75:dc:24:d2:1d:b0:8b:8a:49:47:
9a:6d:34:11:ae:c8:65:87:37:7f:1d:60:f1:d6:a0:44:fe:60:
94:dd:4c:27:f9:4a:6c:35:25:39:a0:2a:12:b4:5c:b6:04:9a:
48:29:d9:d9:c1:f2:3c:44:6c:ab:17:89:c4:8d:42:09:b3:d2:
84:85:34:44:3e:a4:4d:66:a1:54:b3:b0:80:38:3e:39:f7:55:
6b:32:22:9b:a9:b9:04:17:f4:c3:71:91:12:13:13:e1:71:b9:
c5:db:3e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:12:52 2025 by rpki-client