Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/K6UenfPfDXncelfqL7BZpgoKiSg.roa
File: K6UenfPfDXncelfqL7BZpgoKiSg.roa (raw, json)
Hash identifier: sURwTJhIcOPqh7HFZAO8jx3065rYKd+zi9JaWnomAtk=
Subject key identifier: 2B:A5:1E:9D:F3:DF:0D:79:DC:7A:57:EA:2F:B0:59:A6:0A:0A:89:28
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 0190A89AC7983797637CD89E7C31A59DFA97
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/K6UenfPfDXncelfqL7BZpgoKiSg.roa
Signing time: Fri 12 Jul 2024 20:20:34 +0000
ROA not before: Fri 12 Jul 2024 20:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 212.56.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 21:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a8:9a:c7:98:37:97:63:7c:d8:9e:7c:31:a5:9d:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Jul 12 20:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ba51e9df3df0d79dc7a57ea2fb059a60a0a8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:99:af:aa:5c:1c:12:ac:27:2f:d0:7a:b9:
23:ba:41:1c:db:68:1c:ce:8e:a6:5f:18:b4:c1:06:
f6:33:ea:79:6a:be:21:6b:d8:d1:cc:db:13:e6:84:
1a:10:44:9d:4c:dc:6f:a6:49:5a:60:95:9f:23:c1:
13:66:fb:9f:1b:c0:a3:d8:65:80:10:7e:43:ea:b6:
6f:53:db:6e:0e:3e:52:c6:dd:5f:4e:44:ca:32:93:
1e:ad:11:46:63:00:d1:98:36:4d:cc:88:48:bf:15:
a7:30:35:69:b3:58:a6:e1:49:6e:3d:b1:26:b6:92:
fb:2d:04:4d:3f:fb:87:de:6c:35:a8:00:a8:fc:33:
a1:b5:13:ab:7d:8e:31:9c:44:a0:8b:d4:c4:c8:d1:
ab:01:e8:35:a3:fd:63:8a:f1:23:39:76:89:d4:8f:
22:69:40:3e:db:9d:46:17:96:51:03:e3:d7:5c:14:
20:ef:0b:ab:5a:9f:bd:a8:49:83:55:70:9a:33:26:
be:d9:ed:41:17:f8:05:03:0f:c7:7e:38:e4:04:34:
16:c8:40:f0:e7:c8:a3:12:9c:7b:3a:bb:50:5c:51:
f4:12:1d:1f:08:53:a3:04:65:58:5d:d9:bd:2e:e8:
e2:09:21:df:ed:15:80:86:45:d0:64:3d:b5:0a:db:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:1E:9D:F3:DF:0D:79:DC:7A:57:EA:2F:B0:59:A6:0A:0A:89:28
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/K6UenfPfDXncelfqL7BZpgoKiSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.56.56.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c6:3c:fa:7e:e2:5e:bb:c0:79:a9:9e:b7:30:56:e8:10:ae:
d2:56:5b:89:46:d0:98:59:f4:df:24:c0:63:9b:ae:21:54:33:
a0:63:fa:70:d6:95:e9:07:d2:91:76:d5:45:ad:ab:f9:6c:ce:
99:ad:01:01:fc:53:8e:1b:15:24:d0:25:0f:81:b4:6f:1f:5e:
8c:7d:58:1d:8f:b6:cd:da:7a:b1:07:af:67:77:ca:95:49:34:
3f:de:25:27:64:f0:9a:ee:19:b7:d7:60:be:79:9a:e8:c4:6a:
e9:92:22:1d:07:f5:68:c7:9e:f2:fe:31:06:28:e4:58:2c:3b:
58:fe:02:e2:68:73:78:ac:af:8f:46:3e:63:b3:e5:df:5f:c7:
11:72:78:95:1e:01:89:b2:06:5c:e8:39:61:fd:71:8d:d5:a1:
2f:da:59:e3:de:45:f9:e3:84:a8:dc:68:04:24:7d:96:6f:46:
0c:f5:ad:a3:96:f8:aa:94:2d:2a:49:3f:b5:cd:8e:7d:cb:92:
0e:c4:1a:e2:b2:93:8d:97:4b:6d:ee:1a:7d:9c:bb:fe:4e:a9:
fb:d7:bc:55:f2:7f:f1:b6:8f:02:52:5e:fd:59:08:71:84:5f:
33:f6:a8:cd:a9:8a:57:86:b0:22:c4:82:4c:ba:9b:a6:45:82:
b5:da:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:33 2025 by rpki-client