Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ZGLYTJFNoI3lVNxS7cGBTU7dxZ4.roa
File: ZGLYTJFNoI3lVNxS7cGBTU7dxZ4.roa (raw, json)
Hash identifier: fPJw4YxsgZIANrbCSbfZgle31+jvXGoAxfyUVGLU6vw=
Subject key identifier: 64:62:D8:4C:91:4D:A0:8D:E5:54:DC:52:ED:C1:81:4D:4E:DD:C5:9E
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01943EF03CD4AB155B167A6FE760BDBBDB2A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ZGLYTJFNoI3lVNxS7cGBTU7dxZ4.roa
Signing time: Tue 07 Jan 2025 04:05:19 +0000
ROA not before: Tue 07 Jan 2025 04:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213766
IP address blocks: 124.155.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 02:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3e:f0:3c:d4:ab:15:5b:16:7a:6f:e7:60:bd:bb:db:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 7 04:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6462d84c914da08de554dc52edc1814d4eddc59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:d4:ed:c4:3f:0b:31:d2:e0:8b:59:23:23:
5b:81:13:f1:90:c8:f1:24:7d:ba:18:1b:1f:e3:36:
83:78:a2:92:eb:33:a4:e0:c7:fe:03:90:b4:71:a4:
76:d4:39:25:32:7d:f2:6b:b7:50:7b:81:0a:82:93:
e2:0e:23:98:ff:4a:30:b1:44:ef:fb:70:bb:04:bb:
c2:a3:55:03:f7:29:55:d1:14:10:a6:ae:06:b3:d4:
bc:9f:22:57:e6:9a:6a:b5:57:cb:9c:96:ea:2b:75:
91:52:87:42:3c:60:4f:fe:0b:e4:00:5b:5a:e0:47:
fb:73:86:de:f1:a7:64:c1:cc:c8:de:6f:86:3a:8a:
d7:88:fc:61:41:18:a2:43:74:5f:49:c0:f5:16:4e:
c3:ce:7d:fb:b8:b8:d6:22:91:64:4f:19:77:04:2a:
9f:f9:8a:d4:b2:68:03:af:01:31:f3:ba:65:a6:8c:
0c:5d:8b:ce:d6:69:9a:c5:4b:64:bd:74:73:1e:4d:
28:0c:a7:ff:fc:b1:03:cf:53:87:b1:08:57:a4:3b:
bd:cc:75:5a:63:88:71:f8:9b:b6:fe:22:34:1b:b2:
e6:9c:cf:65:a7:f1:5a:97:8e:0f:f4:ca:21:3b:b1:
36:a7:b2:aa:3b:2f:37:e2:40:be:bb:7e:68:75:13:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:D8:4C:91:4D:A0:8D:E5:54:DC:52:ED:C1:81:4D:4E:DD:C5:9E
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ZGLYTJFNoI3lVNxS7cGBTU7dxZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:de:8f:5f:94:bb:bf:b1:c9:92:4f:fa:42:91:95:83:72:52:
18:d8:40:2b:38:38:6a:ff:b5:e5:a4:91:23:5f:be:b2:ba:00:
c2:cb:87:db:ca:70:3c:06:f4:de:9d:4c:2f:b4:f7:2d:65:d3:
20:41:6a:37:c7:bd:8c:5d:0b:4b:91:af:25:98:0c:d0:58:26:
15:45:04:e1:98:6d:f9:13:73:8b:dd:5b:16:b0:98:aa:e9:35:
bc:44:71:f8:5c:e7:1d:4c:87:12:ed:3c:15:89:89:f6:8f:70:
35:1d:00:49:ab:f6:63:10:d0:7e:0e:ab:cd:f8:88:3d:f6:a7:
05:0c:c3:bd:f3:d7:fc:cc:57:61:fd:73:c9:51:9f:a1:34:c0:
aa:26:48:48:38:0a:14:32:5c:1f:7e:f8:92:94:1d:1a:06:b6:
df:4a:ad:90:20:04:09:c0:d9:d3:93:75:a5:c9:5f:76:21:61:
f2:a6:b5:81:cc:ea:e3:8c:5e:c8:ce:2f:24:a0:51:fa:c8:b3:
a8:0a:41:d0:af:71:07:2b:11:d8:8d:a3:ce:e0:c6:eb:b7:eb:
8a:7d:38:c6:b0:c2:40:e3:53:91:81:a5:96:e6:76:ed:68:06:
5a:08:7e:3a:60:df:64:4f:c5:30:94:19:d6:30:f0:cd:d1:2c:
f0:74:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:04:02 2025 by rpki-client