Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ske3mcYpK0yMsGee95ZKBNn8QK4.roa
File: ske3mcYpK0yMsGee95ZKBNn8QK4.roa (raw, json)
Hash identifier: oXbjhXMCSUoC37nwLxb0VPSea8QH606R7rtCozJQh4I=
Subject key identifier: B2:47:B7:99:C6:29:2B:4C:8C:B0:67:9E:F7:96:4A:04:D9:FC:40:AE
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 0192C908E89CD2F8C7A999CD79894DBAB602
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ske3mcYpK0yMsGee95ZKBNn8QK4.roa
Signing time: Sat 26 Oct 2024 13:34:17 +0000
ROA not before: Sat 26 Oct 2024 13:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216167
IP address blocks: 45.112.194.0/24 maxlen: 24
103.102.230.0/24 maxlen: 24
203.55.81.0/24 maxlen: 24
2a13:c7c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Oct 2024 17:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:08:e8:9c:d2:f8:c7:a9:99:cd:79:89:4d:ba:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 26 13:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b247b799c6292b4c8cb0679ef7964a04d9fc40ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:07:98:8e:f8:df:1d:34:d5:ce:5a:5f:08:
1b:51:b4:72:c0:6f:2b:0d:c9:9b:03:72:45:6a:6b:
64:d1:cc:e4:73:bb:8f:b0:64:7b:90:07:fb:7a:d9:
66:42:ae:7c:af:94:80:81:6a:0a:7b:62:d0:c1:8e:
37:5f:ed:f3:df:2d:b6:49:e2:16:e3:04:ce:a7:d8:
a0:28:0b:10:cb:3c:8d:72:b2:8e:2b:93:30:9e:16:
6b:91:6e:4a:78:09:e0:d8:80:d3:bc:06:17:e6:6d:
68:4c:cb:51:c3:a9:5b:d6:32:dc:2c:5b:1d:ee:80:
08:0a:54:f2:3a:13:4e:83:a6:aa:e3:a1:be:97:16:
5b:11:ab:9e:f6:80:68:20:80:73:c8:ff:c5:6c:c7:
45:ee:86:89:cc:2e:c0:5c:ee:07:1e:98:54:69:fb:
ad:6a:09:37:42:b6:c9:cf:42:fc:87:31:ca:ce:8f:
97:59:f6:34:10:38:05:b9:02:22:38:38:a5:a8:99:
ed:9e:c3:c5:23:e0:b1:56:f6:ca:b1:f8:f4:2c:f9:
c8:cd:68:3f:11:54:e1:95:2f:2c:79:5a:b8:e4:07:
9a:12:f5:8d:ed:5a:0a:bf:d2:70:f1:10:c2:5b:fb:
13:bb:62:2d:f5:f5:ee:ba:a4:10:5a:ba:80:8d:a0:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:B7:99:C6:29:2B:4C:8C:B0:67:9E:F7:96:4A:04:D9:FC:40:AE
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ske3mcYpK0yMsGee95ZKBNn8QK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.194.0/24
103.102.230.0/24
203.55.81.0/24
IPv6:
2a13:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:ad:c0:d6:84:08:45:a7:a0:2e:90:bd:6f:d4:84:31:25:44:
fc:c7:e1:20:09:b1:5e:ff:f3:68:ba:92:e1:3c:2d:45:54:0e:
71:8b:66:19:23:64:1b:c6:b4:66:3e:68:e1:aa:2b:af:be:ac:
80:b9:a6:0d:77:37:69:71:26:63:2d:65:a7:cb:31:6d:02:1b:
c9:9e:c2:8f:ee:e9:81:9c:0a:c9:9f:09:15:a9:ca:cc:7f:0c:
40:03:71:34:32:ae:f3:58:89:0c:a0:f9:f7:81:93:c6:f2:a5:
e9:20:d9:cf:85:fc:c3:d4:88:d9:ef:0b:42:9a:ec:70:7d:7b:
63:1b:07:7e:e9:2a:e6:fe:2c:e8:e1:bd:07:72:20:b8:95:46:
b0:e6:3c:54:a4:e2:26:ec:7d:a5:11:12:85:1b:d7:1f:26:86:
16:99:3f:34:fd:fe:2c:97:67:59:bd:f1:30:5c:0e:39:96:93:
a8:d6:ac:de:8d:2d:2c:b6:2d:ae:af:b6:c9:ac:53:66:53:9c:
7f:12:f5:e6:fd:8c:b5:93:ef:a8:5c:f2:07:77:82:ce:0d:05:
2f:38:32:e2:13:e0:6d:f5:4e:ea:76:2e:bb:21:50:16:f5:05:
b1:0c:5c:d7:34:80:f6:ca:50:b6:4d:b2:97:6b:df:6f:25:bd:
90:7a:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:20:45 2025 by rpki-client