Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CBjVYkPf3nspbGVj3yro1AYMFmo.roa
File: CBjVYkPf3nspbGVj3yro1AYMFmo.roa (raw, json)
Hash identifier: hF+WdwagY01SD4FNUCSsEP7vznM41HWolgpkS+SQ8VU=
Subject key identifier: 08:18:D5:62:43:DF:DE:7B:29:6C:65:63:DF:2A:E8:D4:06:0C:16:6A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0191045CEE527B48E9AEB41C5BACB6980881
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CBjVYkPf3nspbGVj3yro1AYMFmo.roa
Signing time: Tue 30 Jul 2024 15:58:04 +0000
ROA not before: Tue 30 Jul 2024 15:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 16:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:5c:ee:52:7b:48:e9:ae:b4:1c:5b:ac:b6:98:08:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 30 15:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0818d56243dfde7b296c6563df2ae8d4060c166a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:b8:d2:eb:2e:bc:ed:76:a6:4f:a9:08:c2:
33:ad:fd:1d:6e:03:15:29:48:5d:05:82:16:f6:24:
7b:05:73:81:97:c0:7a:1e:0f:45:bc:42:39:04:3d:
69:5e:46:91:11:f1:aa:b8:ce:b2:cc:99:b0:7e:71:
dc:46:ed:9b:27:7a:31:c6:f6:99:07:30:97:b2:46:
de:16:f0:1c:bd:4f:d4:14:f1:d7:26:7f:6d:49:ba:
35:b8:76:40:80:e4:92:55:b1:b3:e4:63:f6:b7:fe:
3d:66:b6:83:78:47:92:1e:94:ce:e6:9d:df:f8:95:
1b:86:d9:2a:c5:76:49:10:a3:96:94:59:b9:11:f9:
31:fb:58:c7:32:38:d4:18:4d:df:f5:c0:42:e2:16:
fc:2b:e6:4b:27:ea:ff:4e:e9:41:a7:1f:d6:e3:be:
10:55:fc:a5:12:9e:97:ba:fc:4f:ed:9b:f7:f9:4b:
bf:1f:28:2b:63:ac:3c:42:bd:ec:d5:ea:f2:04:3e:
09:11:81:3e:5c:26:d2:8a:e2:55:2c:5f:f4:c3:b3:
0e:ba:e7:83:40:b9:f0:d5:e8:be:43:3f:f8:02:d0:
29:e3:e2:d4:ed:f9:11:26:8f:72:34:d1:cb:04:80:
54:58:60:5e:01:52:ef:ef:63:84:a6:8b:10:35:7a:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:D5:62:43:DF:DE:7B:29:6C:65:63:DF:2A:E8:D4:06:0C:16:6A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CBjVYkPf3nspbGVj3yro1AYMFmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e1:f2:e2:0c:60:e3:4f:6d:d4:dd:52:62:48:cb:bf:ad:c8:
2d:2b:7a:6a:94:b1:25:91:70:3f:84:56:e0:48:2b:94:44:a2:
4e:6f:53:44:23:88:0b:fc:38:29:65:5b:75:f2:5f:0a:0f:1d:
a0:8f:95:1d:34:fb:59:47:52:9b:68:fe:81:bf:03:03:69:d8:
c1:a0:34:26:63:59:3d:23:fe:6b:af:ff:f9:ac:58:0a:e1:cc:
f3:43:36:12:b9:ad:8a:0a:0d:e0:bf:9d:dd:0d:18:a8:f9:af:
5f:0d:a4:72:7c:15:5d:83:10:af:36:b3:ae:e4:b9:8c:9c:58:
9e:21:7b:0d:1b:6a:67:17:6f:85:7f:75:ea:10:6b:8d:41:ac:
11:17:e3:0b:38:af:28:0c:e1:19:7e:44:28:93:3d:56:42:af:
97:b6:9b:16:21:5a:ac:5d:a0:ef:9a:d8:70:37:95:b5:b4:c4:
d2:ce:b8:b6:3b:56:91:c0:46:28:61:83:e9:61:ec:82:10:27:
9d:ec:18:d6:51:c3:63:7d:f9:74:dc:9f:99:f4:f2:94:55:45:
91:36:8c:96:ec:fd:f4:c7:11:67:93:e0:da:47:2c:64:1d:9f:
eb:0a:e6:1f:ec:c3:10:99:e1:e9:5e:50:2f:ec:4a:c3:84:94:
62:f3:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:24:54 2025 by rpki-client