Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/xnAaLhVMMF9U-hcDWS92eruvchI.roa
File: xnAaLhVMMF9U-hcDWS92eruvchI.roa (raw, json)
Hash identifier: tKdIbAOzJaYud0/aONpi5iFvRBHjakQD45HOBCmvVms=
Subject key identifier: C6:70:1A:2E:15:4C:30:5F:54:FA:17:03:59:2F:76:7A:BB:AF:72:12
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 018CC64B003D9800BD545E578E277F94DD22
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/xnAaLhVMMF9U-hcDWS92eruvchI.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8937
IP address blocks: 212.18.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:00:3d:98:00:bd:54:5e:57:8e:27:7f:94:dd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6701a2e154c305f54fa1703592f767abbaf7212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:2e:45:82:3e:5f:ab:cf:73:00:6a:63:a6:
22:10:b4:0a:35:32:ef:b6:e9:fc:7e:d5:4c:89:c5:
8d:ab:03:47:27:3e:32:4f:c7:c6:ec:51:d1:2b:ff:
9c:00:15:ba:b1:69:61:f5:03:f7:15:58:d5:4f:1a:
5a:21:17:0f:ec:37:28:31:b1:b1:40:59:0c:ed:f3:
92:c6:3a:03:cc:88:16:43:0d:0f:9c:a8:b2:54:8e:
f1:96:a4:05:3b:28:93:81:b4:ee:8b:e3:4b:96:55:
b1:58:1a:5e:c2:4a:3b:2f:1f:41:62:9b:06:33:b0:
69:f0:05:d9:56:35:1f:e3:ec:ed:70:2c:af:e1:db:
50:9b:64:f9:c2:03:84:1e:aa:d9:2f:75:9a:98:ed:
1f:c6:f1:8b:73:81:e0:96:8c:bd:11:2f:21:41:c1:
fb:d0:02:de:65:69:72:a5:4f:36:72:b5:23:fd:ed:
fd:73:06:38:58:a3:21:94:f2:ae:2b:09:1a:8a:d5:
bd:03:2a:12:09:71:08:d3:7c:3b:c2:d9:5e:62:e4:
d3:dc:22:ad:e5:f0:2b:70:30:86:9c:32:54:8d:65:
f2:02:c5:c3:ef:c6:07:cc:a7:c4:83:a4:ea:de:8a:
bc:a8:61:2d:20:a7:b5:07:f6:3b:58:ba:e1:ab:ef:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:1A:2E:15:4C:30:5F:54:FA:17:03:59:2F:76:7A:BB:AF:72:12
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/xnAaLhVMMF9U-hcDWS92eruvchI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.192.0/19
Signature Algorithm: sha256WithRSAEncryption
43:da:37:eb:c5:56:30:bb:55:5b:f6:03:88:32:3c:66:9a:54:
14:9a:29:93:18:89:7e:47:de:cc:61:d0:e6:95:08:aa:ef:42:
74:7f:b9:c7:07:37:f1:4f:da:70:e7:cc:fa:7e:be:64:9c:c5:
5d:2f:91:87:db:89:fc:7f:32:0a:c3:53:62:e1:a7:9b:33:ba:
93:0a:83:2a:48:43:db:e0:80:31:8e:62:bb:fa:a0:5f:f9:e7:
97:64:79:c6:a7:7d:25:d7:96:c8:d2:31:33:26:9e:51:7e:11:
f2:f7:d4:cc:99:0e:0f:ea:9a:97:9a:0f:9a:5d:0d:dd:ac:39:
b5:b5:20:19:2d:83:d8:0d:df:36:43:5e:d1:aa:49:4b:08:41:
39:c1:b4:42:3f:06:7e:e6:f5:e2:b8:81:e5:5f:7e:21:37:5a:
1c:e7:53:70:eb:8b:a8:f2:3b:4c:64:e4:cd:01:70:a9:e9:8d:
f1:de:4e:bd:99:c8:00:5f:fb:97:77:f1:dd:27:ff:64:87:47:
b8:b1:16:af:64:18:64:7a:73:77:30:68:cc:af:29:0f:a5:3b:
4b:0d:a7:2a:f6:cf:e3:e9:32:83:06:bd:1c:9d:f5:70:76:86:
3a:74:ca:eb:37:fd:d9:51:fc:54:09:cf:e0:13:fa:24:f2:b8:
ed:f5:91:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:18:53 2025 by rpki-client