Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/SI_sa_c4_WEXfbIsWrD7XKSy4qY.roa
File: SI_sa_c4_WEXfbIsWrD7XKSy4qY.roa (raw, json)
Hash identifier: EelUs1BQ6fdCYZutt+lfCV6x6ymAgNCMd9T4rM+t8F8=
Subject key identifier: 48:8F:EC:6B:F7:38:FD:61:17:7D:B2:2C:5A:B0:FB:5C:A4:B2:E2:A6
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 018CF832FEBA9665935EA4610EBE3AE064AC
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/SI_sa_c4_WEXfbIsWrD7XKSy4qY.roa
Signing time: Thu 11 Jan 2024 11:05:40 +0000
ROA not before: Thu 11 Jan 2024 11:05:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 212.56.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 12:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:32:fe:ba:96:65:93:5e:a4:61:0e:be:3a:e0:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Jan 11 11:05:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=488fec6bf738fd61177db22c5ab0fb5ca4b2e2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:a2:24:f3:94:93:65:34:59:2e:9f:2f:7b:
9d:17:51:d9:6b:b6:26:76:bb:2e:03:22:ce:da:fc:
ae:c7:c6:d0:e7:74:1e:16:30:3c:16:17:39:e3:c4:
8d:24:c5:36:2c:e9:62:19:84:de:77:71:a9:fb:3c:
fd:9d:fa:f3:7b:a6:8b:5f:83:ab:e2:68:51:4f:44:
49:ac:97:8a:08:aa:75:fb:39:97:a1:60:de:38:52:
37:29:f7:5d:bc:94:03:b8:6a:ed:d0:7c:34:36:c3:
c5:97:bc:42:33:8a:f9:df:e2:d4:42:94:d5:33:ec:
ed:52:4c:08:3a:8b:9d:de:30:12:b0:68:b6:22:ef:
2b:6b:c5:50:29:e4:b2:2c:27:02:97:b4:83:55:92:
22:c8:22:cd:5a:83:dc:d4:12:78:22:53:64:ba:03:
58:42:dd:a8:9a:c0:e5:a8:60:70:d9:d5:4d:fa:d4:
f6:68:91:11:2b:62:52:b6:3f:97:11:e9:e0:35:65:
91:74:cc:88:32:06:e2:02:ce:37:14:96:d7:1f:29:
9d:62:d4:c3:ac:11:d9:a9:09:4f:ca:ac:cc:a1:61:
ed:c7:85:e8:66:d7:1a:99:11:e7:e0:97:d8:1e:f4:
34:f3:d3:d5:ec:2a:ac:af:f8:50:0c:05:19:68:5e:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:EC:6B:F7:38:FD:61:17:7D:B2:2C:5A:B0:FB:5C:A4:B2:E2:A6
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/SI_sa_c4_WEXfbIsWrD7XKSy4qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.56.56.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c9:a2:93:c9:b0:b8:ca:c0:b2:4c:b6:ed:71:6d:be:56:4a:
fa:d3:39:34:d9:94:41:dd:10:e3:f3:89:c1:c0:9a:43:b7:2e:
9a:b6:46:86:8c:86:17:85:3f:f0:6e:5c:a1:14:a7:79:2e:d7:
5f:a4:c9:0b:81:ac:b9:f6:ae:d9:06:96:2b:fa:21:b7:81:bc:
1b:89:59:4e:64:56:b8:bb:c7:34:e0:4a:34:ac:18:b5:6e:7f:
c5:e0:bc:c4:ac:e3:4e:01:d1:d4:4c:e7:0e:4c:01:74:20:8b:
82:7c:f9:96:bc:c9:8f:86:fd:6b:19:9a:d5:42:b5:d3:4a:91:
49:3c:e1:c2:7d:c1:8d:81:8c:3d:a8:68:31:79:fc:30:9b:1a:
21:52:aa:48:b8:bf:71:36:20:42:2d:46:9d:1f:75:e6:09:e6:
e5:d2:c3:d7:c0:f5:ff:8f:8d:cc:92:5a:50:e3:3b:52:26:b7:
df:95:5f:95:ed:99:e3:00:dc:57:d8:dc:6b:25:a7:00:8b:0d:
fe:58:5b:93:31:db:e1:f5:e0:b7:4e:74:94:5f:84:83:4b:dd:
e6:b1:71:a4:a1:53:3d:9d:5c:7e:c5:a1:a3:d9:77:27:e6:b3:
98:40:22:b0:77:d6:34:a1:9b:10:20:5e:48:d7:1f:9f:74:21:
fe:74:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:48 2025 by rpki-client