Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/G3amk770tyG7RcT4yiKdBQFMw10.roa
File: G3amk770tyG7RcT4yiKdBQFMw10.roa (raw, json)
Hash identifier: Hog862Ul1UKwK99JHUpXWE3S6cpRod/obTFxzVC/U9A=
Subject key identifier: 1B:76:A6:93:BE:F4:B7:21:BB:45:C4:F8:CA:22:9D:05:01:4C:C3:5D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EC7C09CA32F02D73EE6FFA80FC9534C60
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/G3amk770tyG7RcT4yiKdBQFMw10.roa
Signing time: Wed 10 Apr 2024 11:24:32 +0000
ROA not before: Wed 10 Apr 2024 11:24:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15759
IP address blocks: 213.210.64.0/19 maxlen: 19
213.210.112.0/20 maxlen: 20
217.18.128.0/20 maxlen: 20
217.18.144.0/20 maxlen: 20
217.18.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 13:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:c0:9c:a3:2f:02:d7:3e:e6:ff:a8:0f:c9:53:4c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 10 11:24:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b76a693bef4b721bb45c4f8ca229d05014cc35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:a3:b2:52:60:bb:86:a7:a7:1b:49:a3:f8:
3b:07:0f:4b:8c:43:2c:9e:1a:33:45:9a:86:31:db:
01:c2:56:aa:81:95:a2:ef:2a:4b:41:58:12:23:16:
a3:73:bc:64:c1:e3:65:a0:a6:a9:69:16:02:f7:72:
9f:8d:64:bc:99:64:e3:2c:77:17:55:1c:04:64:6f:
e7:0e:c1:f0:38:99:0a:31:fb:1b:f8:79:12:3a:19:
c4:83:8d:da:40:a4:e0:52:8e:d6:b7:2a:a9:f5:0d:
79:5e:f7:0f:c3:af:a4:00:0c:84:3f:d4:7c:e8:1e:
06:b6:8d:66:e0:8c:7a:b9:fc:bd:12:28:01:4b:f8:
e2:74:2e:78:fe:cc:c0:34:fd:f3:01:b9:97:d5:82:
f9:06:ef:c7:4d:48:cd:45:e3:01:b1:27:d0:af:66:
60:15:ea:58:b9:f9:c7:46:9d:3a:a2:71:37:fe:c8:
e0:eb:ec:9a:ba:bf:46:92:90:35:68:44:e7:64:45:
71:a2:ce:9d:81:ec:be:ce:34:ba:0f:7d:14:f5:0f:
c1:5a:fb:18:c2:fc:13:56:a3:54:e4:53:0d:15:a9:
00:c2:c6:82:1c:81:16:e3:0f:c9:93:f8:3a:96:c4:
d4:6a:4f:2b:ce:ff:9e:77:fa:6f:f3:dd:c0:f7:44:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:76:A6:93:BE:F4:B7:21:BB:45:C4:F8:CA:22:9D:05:01:4C:C3:5D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/G3amk770tyG7RcT4yiKdBQFMw10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.64.0/19
213.210.112.0/20
217.18.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:94:74:8a:5f:97:18:79:2b:e0:e1:a4:98:0b:84:ba:aa:75:
a2:f5:da:e6:38:05:1b:ab:7f:87:37:3f:6a:5a:e5:8e:93:90:
76:90:a7:b0:c1:df:cd:94:58:b4:b8:c5:a4:d1:11:2c:8d:3a:
20:12:83:1f:2d:c5:ac:9d:e8:e9:0c:7f:44:73:35:e2:bf:96:
a9:d4:78:c0:df:20:d8:12:8f:7f:ff:40:8d:7d:d0:34:9f:13:
0f:fa:5c:37:7c:86:ae:dc:20:6d:a2:a8:14:12:74:a6:64:aa:
ae:80:91:b2:72:1b:63:63:23:ae:ee:8e:d5:6c:2d:f4:f8:ab:
5d:b2:15:86:fb:92:a7:88:5d:00:66:13:62:b2:8c:ea:70:d8:
ae:89:1b:17:3f:31:35:e6:89:b9:10:03:7c:90:1c:7f:41:6f:
61:bc:d6:99:39:e0:af:39:d5:95:ea:5d:4d:2c:13:9a:bd:15:
9e:09:ae:13:4f:d2:2c:dc:fd:14:8b:f3:fa:07:a2:72:d1:e2:
1a:a3:bc:87:25:41:e0:32:2c:24:ca:b1:b5:54:81:27:2a:b5:
be:b7:81:3d:ce:b4:89:1c:13:fe:d8:b9:09:9a:87:d9:e3:97:
c7:1a:8a:2e:6f:46:bc:04:19:6c:41:19:5e:7d:9a:97:2a:78:
0f:77:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:54:35 2025 by rpki-client