Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/lEauZh86ti9d2H61TNFR6XbJC1Q.roa
File: lEauZh86ti9d2H61TNFR6XbJC1Q.roa (raw, json)
Hash identifier: oqaeC8qW2rPWqlEcXp3jN5EvCeVE5sbpes4nKJ0jwq0=
Subject key identifier: 94:46:AE:66:1F:3A:B6:2F:5D:D8:7E:B5:4C:D1:51:E9:76:C9:0B:54
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 01948489204AC920C145840E4C21FA5B4CBD
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/lEauZh86ti9d2H61TNFR6XbJC1Q.roa
Signing time: Mon 20 Jan 2025 16:26:06 +0000
ROA not before: Mon 20 Jan 2025 16:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 212.104.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 21:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:89:20:4a:c9:20:c1:45:84:0e:4c:21:fa:5b:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Jan 20 16:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9446ae661f3ab62f5dd87eb54cd151e976c90b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:d2:f2:ee:34:4d:5a:63:46:c5:09:63:a4:
f8:e6:f5:a6:d8:b6:36:35:76:8c:03:42:2b:e7:71:
1d:63:e7:cf:13:11:fc:65:16:de:fd:d1:a8:f5:71:
69:fa:9e:9c:46:7c:6e:25:1c:06:42:14:d0:a6:c1:
c1:3d:38:89:ec:d0:b4:a7:d3:ad:48:cc:d5:84:cc:
7c:28:a4:04:2f:bc:ea:08:d3:c6:e4:b2:a9:85:1a:
91:cb:f5:ca:15:c2:40:b5:7e:08:f1:b0:5a:1b:b8:
53:ba:b3:24:38:a7:09:f1:54:7b:10:35:52:1c:3d:
95:99:c6:68:35:8e:5d:49:7f:8c:dd:0d:17:61:88:
03:0f:cd:1e:cb:6f:30:c4:31:7b:ea:4e:62:62:02:
56:58:7c:e1:0e:d4:49:fe:40:54:df:be:d8:33:e1:
8c:d2:80:75:73:5a:03:01:90:b9:2e:cd:3a:78:44:
03:76:e4:f7:8b:56:0f:e9:95:64:41:e3:da:31:32:
d5:f2:ad:b3:2d:b2:f4:5c:d6:17:89:14:23:a4:fb:
94:3c:2e:dd:63:a2:99:4a:87:87:34:66:f7:ab:1e:
0c:08:57:9a:61:99:68:d6:b0:b7:8d:28:72:d5:4a:
a1:15:6b:05:1b:99:0a:98:03:8e:93:3a:fa:eb:c2:
6e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:AE:66:1F:3A:B6:2F:5D:D8:7E:B5:4C:D1:51:E9:76:C9:0B:54
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/lEauZh86ti9d2H61TNFR6XbJC1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:af:10:b6:57:b2:27:e3:65:37:a5:0f:a9:8a:aa:97:c2:78:
e5:d2:f0:48:d2:d7:e0:7f:13:14:ba:a9:36:fa:58:92:13:88:
20:05:98:a0:03:ed:fe:da:af:4c:5c:03:47:f5:cc:9e:0f:d4:
17:7c:d4:84:58:42:9d:c5:65:a5:39:e3:a6:9e:db:b9:56:70:
5d:12:a0:5f:20:53:4e:b8:ed:a8:60:70:02:b2:ed:64:d5:d3:
96:2e:c0:08:f2:b7:77:8f:b7:5d:44:e1:69:a8:d4:79:29:2e:
64:d9:77:99:71:10:84:77:b4:67:fa:1b:fb:55:bd:9f:09:c9:
2e:44:62:0f:f4:6b:10:09:aa:36:3f:e4:90:79:46:0f:4d:44:
b5:6f:d1:c8:22:62:f6:96:cb:f0:62:a1:46:1b:41:8b:79:5c:
e5:89:ca:3d:a6:d7:e2:9d:26:4b:cc:b9:19:79:41:fa:c9:20:
31:0d:29:66:c0:98:2c:b2:b3:5b:2a:b1:ec:8f:05:4f:c2:60:
96:b8:b5:d1:a7:49:2f:c4:65:91:e7:e9:13:14:c9:99:3b:00:
51:3a:00:cd:28:c5:24:c5:b2:f5:51:0c:33:b1:a2:e8:2d:01:
9d:2c:61:29:a8:58:4d:2c:ad:0f:4e:60:32:ea:2e:8f:c4:22:
1c:93:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:43 2025 by rpki-client