Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/1-ZGRYalGkboxQx-WR5gDR448ZB4.roa
File: 1-ZGRYalGkboxQx-WR5gDR448ZB4.roa (raw, json)
Hash identifier: zACfr2nxP/EPN2aJz28UloOvqZ+AR9jHNvsunOAEoYQ=
Subject key identifier: F9:91:91:61:A9:46:91:BA:31:43:1F:96:47:98:03:47:8E:3C:64:1E
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 0193961A0D4B71753E90B77C76ED5AC25A41
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/1-ZGRYalGkboxQx-WR5gDR448ZB4.roa
Signing time: Thu 05 Dec 2024 09:15:09 +0000
ROA not before: Thu 05 Dec 2024 09:15:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 23.19.56.0/21 maxlen: 24
23.19.56.0/24 maxlen: 24
23.19.59.0/24 maxlen: 24
23.19.62.0/24 maxlen: 24
23.106.32.0/21 maxlen: 21
23.106.56.0/21 maxlen: 21
23.106.232.0/21 maxlen: 21
81.17.56.0/21 maxlen: 24
81.17.56.0/22 maxlen: 22
81.17.60.0/24 maxlen: 24
81.17.61.0/24 maxlen: 24
81.17.62.0/24 maxlen: 24
81.17.63.0/24 maxlen: 24
173.208.48.0/21 maxlen: 21
173.234.72.0/21 maxlen: 21
173.234.136.0/21 maxlen: 21
185.222.24.0/22 maxlen: 24
185.222.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 10:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:1a:0d:4b:71:75:3e:90:b7:7c:76:ed:5a:c2:5a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Dec 5 09:15:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9919161a94691ba31431f96479803478e3c641e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:26:22:cc:4d:0b:32:90:58:d7:d4:ac:cc:
1e:35:b1:54:34:a6:36:0d:03:51:5d:53:19:1d:e9:
3b:8a:0a:7a:6a:44:0c:ee:e9:42:4b:4f:71:22:82:
61:0f:f6:fc:9b:72:6c:f2:4d:3f:30:cd:a2:71:c9:
7f:e8:e8:0d:66:31:8a:2a:17:c2:cd:a5:1b:ad:ff:
bc:37:c6:5c:37:e7:b7:55:6d:62:62:e5:00:b6:d0:
48:4c:06:58:a5:59:93:e8:3d:6d:f3:1e:a5:50:cc:
eb:a8:16:47:56:43:75:2a:f4:a0:bb:0c:f7:33:f1:
03:c4:88:ba:6f:62:c9:f4:cb:1d:6f:e2:1b:15:1a:
0d:b3:65:c3:a9:7e:31:f2:8f:98:ca:1f:4e:a0:8a:
0c:23:df:84:c9:99:74:64:83:98:c8:79:d1:06:f8:
b4:08:f5:4e:69:7e:20:32:f6:ad:88:00:22:9a:d9:
97:18:89:d8:10:65:4a:cb:06:7f:8e:43:e7:65:94:
d8:b0:12:e4:90:8c:f0:c8:8a:ac:a7:d1:77:f9:d3:
b0:5c:ee:29:6e:5c:2a:23:70:70:a6:17:cf:e7:68:
b7:6e:39:87:4e:87:34:71:e1:5a:15:f7:d5:9c:21:
a9:1f:26:98:f1:cd:09:c7:b7:19:a1:b7:b9:10:04:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:91:91:61:A9:46:91:BA:31:43:1F:96:47:98:03:47:8E:3C:64:1E
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/1-ZGRYalGkboxQx-WR5gDR448ZB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.19.56.0/21
23.106.32.0/21
23.106.56.0/21
23.106.232.0/21
81.17.56.0/21
173.208.48.0/21
173.234.72.0/21
173.234.136.0/21
185.222.24.0/22
Signature Algorithm: sha256WithRSAEncryption
66:24:16:42:e8:92:89:8e:8e:3b:a2:30:35:a8:02:bc:61:59:
17:73:1c:42:f6:71:f4:51:28:cc:99:6f:8b:e8:55:a6:29:2d:
10:33:d4:8d:e4:ed:87:84:60:32:7a:29:da:27:dc:ef:bf:e5:
3a:e4:e0:3a:b0:c3:80:93:19:d8:56:ea:a1:ad:a3:dc:c9:e1:
01:d8:a9:56:da:1d:4c:95:0e:52:63:90:1e:0e:21:f5:2c:8c:
c9:75:a9:2b:62:65:df:2b:d8:d4:79:7a:93:a6:93:99:52:b5:
b3:b0:32:13:6f:4f:ea:14:8c:f3:02:e6:64:32:b2:25:d4:f4:
57:d0:7f:04:d8:88:3c:5f:59:34:b2:c9:89:b6:85:6f:23:e4:
22:2e:25:99:0e:20:29:58:95:31:1e:eb:88:64:f6:54:42:c7:
2c:5e:4b:9b:45:31:13:6e:bf:86:7d:53:0a:15:6b:0e:d3:0f:
1e:5a:a6:17:58:16:89:5d:a5:e7:3d:48:59:f1:ce:f6:2e:da:
6b:cb:5e:42:29:d1:a7:03:80:e9:0a:51:37:a6:12:28:40:ce:
53:01:33:11:91:46:cf:0b:94:d2:53:3c:df:67:d9:f4:65:80:
8b:c7:05:55:49:55:f0:4b:25:ec:e1:14:09:33:0e:c4:75:e0:
21:86:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:48:42 2025 by rpki-client