Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Kf3ndobodh6oQHputCW6jaE-POk.roa
File: Kf3ndobodh6oQHputCW6jaE-POk.roa (raw, json)
Hash identifier: JOi3Ti0wl0bT6hmTV2lsIKT/FAelnsfascZbOD8KxPc=
Subject key identifier: 29:FD:E7:76:86:E8:76:1E:A8:40:7A:6E:B4:25:BA:8D:A1:3E:3C:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193C0B4B3EA0FF72D351FFF49C19EB8095C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Kf3ndobodh6oQHputCW6jaE-POk.roa
Signing time: Fri 13 Dec 2024 15:48:08 +0000
ROA not before: Fri 13 Dec 2024 15:48:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210974
IP address blocks: 212.193.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:b4:b3:ea:0f:f7:2d:35:1f:ff:49:c1:9e:b8:09:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 15:48:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29fde77686e8761ea8407a6eb425ba8da13e3ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:6d:52:d9:11:43:f2:78:6c:39:e9:14:35:
c0:cd:45:5b:7b:20:31:84:97:83:aa:bb:bc:8a:f1:
f4:6f:b4:da:82:f7:56:0d:9f:0d:7e:77:88:99:f6:
62:4c:0c:b3:12:c3:c0:48:ef:78:82:b5:81:4f:9f:
46:ce:3b:4d:ab:72:c3:a1:dd:1c:fd:19:9f:7b:a6:
44:4b:47:4f:d1:37:7d:0f:38:fb:f1:e7:61:79:b5:
e9:5d:f5:2b:b2:0f:91:d0:02:fa:14:58:5f:ba:23:
8d:90:be:5e:de:c1:2d:71:f8:6d:d7:6b:0e:fa:0e:
fb:c4:34:ce:75:73:00:ab:0c:5c:47:f6:9f:6c:26:
d6:3b:7c:e5:9d:8c:61:4e:18:c9:13:d3:8b:12:b4:
96:83:73:1e:cb:be:bc:c8:9a:89:4d:32:86:f3:94:
a0:7d:fd:5f:b0:11:c4:90:5f:aa:4e:55:69:c7:81:
5f:14:2e:61:ac:7a:23:f5:5c:04:8c:5f:d2:21:28:
9e:50:c4:d9:36:c8:08:61:0d:6b:a5:09:46:fe:59:
f1:e5:af:99:16:7e:7c:87:36:95:f4:5b:8d:a2:a7:
f4:43:98:c4:f9:f4:8f:3d:e3:66:9b:a4:4e:1c:32:
18:f8:f7:38:72:c9:b4:63:d4:63:29:84:e9:30:55:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FD:E7:76:86:E8:76:1E:A8:40:7A:6E:B4:25:BA:8D:A1:3E:3C:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Kf3ndobodh6oQHputCW6jaE-POk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f1:8a:5e:5d:26:67:a4:20:3a:51:55:e7:54:56:4d:0c:63:
cb:54:af:71:db:54:07:03:e6:6b:29:82:48:ff:48:07:38:ad:
33:c6:d0:30:bb:26:1f:c7:e9:b6:1e:6b:a6:07:01:6f:80:9d:
03:23:fb:75:ab:15:b4:8a:e1:3e:78:03:05:4e:3b:62:b8:3a:
b5:8a:7c:8c:27:e3:9f:fd:88:5f:c6:e7:cf:5c:7d:87:11:81:
2e:e4:bc:50:60:42:1e:69:86:1f:5f:ca:cc:ee:57:72:08:20:
b8:d1:4b:11:f8:78:8f:f6:89:62:d3:16:6c:98:f9:eb:ff:65:
54:b1:55:8a:25:e9:d9:4b:c5:82:98:87:e6:e0:c1:62:d0:7d:
02:c4:99:c3:20:c7:87:94:8f:dd:7f:46:2e:36:4f:2c:b5:52:
ab:38:b0:c4:1b:06:97:c2:e7:f9:b5:45:ae:34:63:27:0c:30:
61:91:8e:23:95:6b:1c:bc:4d:df:a7:b4:be:6c:14:ba:df:09:
02:9c:ca:0e:07:aa:9d:2c:51:0b:b1:95:a1:a8:88:fa:c8:ff:
11:32:83:49:ee:d5:f4:54:99:94:09:3f:d6:84:49:5f:e2:a9:
23:57:cd:dc:da:fe:10:88:11:5c:4b:65:76:1b:29:0c:a1:42:
ac:c2:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:52 2025 by rpki-client