Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/7lkrK7b4NdBZzrJKdKXdYys2p4k.roa
File: 7lkrK7b4NdBZzrJKdKXdYys2p4k.roa (raw, json)
Hash identifier: PhpvfsKdjkhF0GlSDdPdCqZhWt/ma20chqL9g861PiY=
Subject key identifier: EE:59:2B:2B:B6:F8:35:D0:59:CE:B2:4A:74:A5:DD:63:2B:36:A7:89
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0192AE8E576B36AA05E38ACF00096D1899D2
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/7lkrK7b4NdBZzrJKdKXdYys2p4k.roa
Signing time: Mon 21 Oct 2024 10:10:16 +0000
ROA not before: Mon 21 Oct 2024 10:10:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215597
IP address blocks: 212.95.142.0/24 maxlen: 24
212.95.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 14:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:8e:57:6b:36:aa:05:e3:8a:cf:00:09:6d:18:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Oct 21 10:10:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee592b2bb6f835d059ceb24a74a5dd632b36a789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:2b:4e:5c:98:fd:f5:13:2f:cc:75:fc:65:
d8:1a:d1:c2:09:32:29:59:9f:26:13:93:2f:7f:a8:
0f:47:07:c7:bb:7a:87:ef:70:56:3b:9e:27:77:0f:
f0:67:bd:8f:a8:5f:3b:8a:f0:ac:bd:10:64:54:1b:
f9:f6:6d:09:a5:ae:c2:5e:ed:7b:92:af:08:cb:ab:
19:6c:35:60:91:81:e9:bc:05:5e:1d:0a:be:cd:cf:
c1:cf:ad:83:f8:1f:c2:97:26:0a:16:45:ea:93:40:
2a:ad:3f:51:9b:11:8e:b7:00:2a:62:bf:09:d1:7e:
59:19:30:62:ad:2f:ea:07:78:9d:42:e2:a3:e1:71:
7c:89:f2:ce:49:50:cd:9e:61:6e:88:f6:78:05:15:
23:d4:57:7c:00:0f:de:86:17:06:df:33:e8:0c:3c:
a3:54:b7:05:34:4b:7d:cf:6d:c7:c7:3a:8c:5f:a7:
63:d1:e2:7f:27:47:4c:6b:37:ed:80:23:84:b5:18:
a7:92:fa:c2:4c:88:d0:5a:42:bf:7c:0f:bb:1b:b4:
e8:a1:b9:1f:ac:ba:13:0c:07:1e:f1:c8:51:f9:de:
e8:ea:85:80:cf:49:99:2e:c2:61:fd:88:3f:95:05:
d0:37:5c:18:93:60:71:c3:19:e1:11:f1:78:8e:63:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:2B:2B:B6:F8:35:D0:59:CE:B2:4A:74:A5:DD:63:2B:36:A7:89
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/7lkrK7b4NdBZzrJKdKXdYys2p4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.95.142.0/24
212.95.148.0/24
Signature Algorithm: sha256WithRSAEncryption
89:09:83:f4:fa:7f:9c:9a:43:aa:a8:64:f7:4e:e4:27:69:1b:
ed:37:b9:59:26:a5:39:82:4c:ea:2c:89:56:4e:e5:51:1f:1a:
7a:2c:b8:83:ee:9d:27:50:3d:57:f4:1d:f0:42:21:42:44:d9:
fe:f2:f3:d6:ca:5f:65:5e:f8:fa:b5:bc:7e:5a:8e:79:0a:af:
c2:bf:42:43:bd:6b:3f:da:99:74:9d:dc:c6:0a:f7:d2:08:1f:
c3:35:f4:88:b2:74:1a:13:64:94:e5:a4:54:da:eb:f7:76:61:
d4:17:ba:f0:f3:b9:31:94:06:e1:25:81:a1:a3:28:75:3f:9c:
fe:9a:fa:e3:f6:34:76:7f:f2:c2:1b:c0:d0:ac:2b:5a:37:5e:
43:01:32:cf:fa:b0:03:78:11:ca:d9:c2:39:52:0c:b6:67:8a:
77:54:59:75:cb:78:6e:d6:f9:5f:51:0d:8e:08:33:66:f2:18:
8e:8f:79:61:20:5e:23:05:db:ab:f6:ef:30:4e:f8:58:b6:0f:
63:48:7f:c4:c1:a9:72:d0:dd:47:e8:6a:3b:08:e8:53:cd:ac:
d7:82:7f:ac:a1:a2:7e:81:c8:25:cd:08:24:6b:d0:13:1b:81:
f7:5f:eb:b5:5a:c1:4b:1c:8c:5c:c2:18:51:51:80:b3:f0:3b:
9e:d4:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:37 2025 by rpki-client