Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z3vHmGItd-uMvOZlh9phrHuxkS0.roa
File: z3vHmGItd-uMvOZlh9phrHuxkS0.roa (raw, json)
Hash identifier: OjervjEYecVV5e/yHBrpasQLfB6QpVH9hn65noI5M94=
Subject key identifier: CF:7B:C7:98:62:2D:77:EB:8C:BC:E6:65:87:DA:61:AC:7B:B1:91:2D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942825179ABA8D79F948F6DBCD64E810CE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z3vHmGItd-uMvOZlh9phrHuxkS0.roa
Signing time: Thu 02 Jan 2025 17:51:46 +0000
ROA not before: Thu 02 Jan 2025 17:51:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 212.193.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 10:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:17:9a:ba:8d:79:f9:48:f6:db:cd:64:e8:10:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf7bc798622d77eb8cbce66587da61ac7bb1912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:0a:49:60:06:09:38:47:e4:d9:85:d1:a1:
9f:da:fd:29:b9:47:75:c8:3d:35:25:c0:c3:9c:5b:
13:d8:f0:54:14:90:19:85:53:69:2d:3e:18:5b:7b:
23:f4:fe:24:7a:d4:6e:74:95:83:8c:3a:11:3b:8b:
44:62:d6:21:89:f1:97:a9:97:f5:a8:61:5c:8a:65:
16:fc:1b:09:10:21:c7:70:1e:e5:7d:28:20:d2:95:
1d:77:35:38:ac:80:95:83:5c:05:1c:69:d8:e8:65:
ae:c1:4f:67:7c:50:b7:6e:bd:66:86:b7:53:58:97:
4c:11:9b:25:74:0f:e9:02:19:b7:5e:1c:f6:b3:48:
6e:30:e9:53:5a:9c:a4:bb:b1:21:c3:ca:66:4e:e8:
27:17:bf:5f:a4:5a:da:74:e6:26:7f:29:05:3b:6f:
67:c0:4c:89:34:32:c4:6a:57:51:9b:9f:ee:65:45:
50:9e:38:97:3e:61:36:48:bc:d8:75:8b:27:3c:ef:
0f:2d:35:09:37:19:d4:c9:45:ba:07:7d:98:54:09:
53:0e:f7:79:33:4d:2e:b8:5b:f4:ef:a2:fd:23:73:
64:d8:bd:a3:89:04:21:99:06:f2:8a:6a:f2:11:08:
a6:58:4c:da:71:a1:6d:74:a7:a0:4a:12:2c:cd:5d:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7B:C7:98:62:2D:77:EB:8C:BC:E6:65:87:DA:61:AC:7B:B1:91:2D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z3vHmGItd-uMvOZlh9phrHuxkS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2f:83:12:04:ab:6a:2b:92:90:de:de:b4:38:b7:7a:7c:85:
5b:3c:4c:be:a6:2b:c4:c9:52:e6:33:37:46:f1:bb:02:b2:f1:
f9:80:20:83:da:a0:0c:c7:bd:af:fd:4e:e5:d3:b6:6c:e8:ac:
86:67:12:af:e8:77:4e:3f:b8:e8:a1:7f:25:f7:13:31:83:4a:
12:0d:2b:07:32:5a:2d:7c:87:21:62:f5:07:02:b1:b8:0f:55:
cb:ab:35:98:6e:7b:a2:fa:1e:cb:84:34:a1:c7:94:da:31:16:
7c:39:2c:61:79:ae:49:3f:94:50:75:62:bf:3e:c4:2b:90:30:
4c:75:8e:86:bf:77:8b:6f:c8:e0:0d:b3:85:5f:c9:b8:c1:d0:
3a:2e:d2:42:ca:2e:33:3f:49:bb:0f:8b:6c:3d:d0:53:44:76:
ac:5f:7b:b3:71:f4:3f:21:f8:e2:d4:d0:f3:26:62:e3:97:94:
db:fa:08:ad:06:5c:a8:41:2b:a8:9e:13:c0:c4:b4:30:e7:54:
ef:c2:ec:96:c4:ba:db:f5:ec:e6:07:19:95:df:2a:4f:67:a3:
0e:e5:a1:fd:d5:42:3b:b7:6b:4a:44:84:66:2a:d7:3b:bd:d7:
10:b3:1b:3d:ad:53:11:27:7b:bc:bc:d5:78:e7:3b:10:ea:27:
ae:ad:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:40 2025 by rpki-client