Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/1-mUYjvpDHMEK-YLqTI7UiI7FXqA.roa
File: 1-mUYjvpDHMEK-YLqTI7UiI7FXqA.roa (raw, json)
Hash identifier: 9QXJSirRNJRjfLdq67uqPLfaNFeqU++c/sGnO9pAqWo=
Subject key identifier: FA:65:18:8E:FA:43:1C:C1:0A:F9:82:EA:4C:8E:D4:88:8E:C5:5E:A0
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018CC3B72401155121DA8A057F1847BB1FC7
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/1-mUYjvpDHMEK-YLqTI7UiI7FXqA.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 213.210.216.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:24:01:15:51:21:da:8a:05:7f:18:47:bb:1f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa65188efa431cc10af982ea4c8ed4888ec55ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:ce:88:bc:47:92:13:8b:78:76:79:79:7e:
da:e3:01:cc:11:1a:22:1d:fe:f9:cb:e2:1e:e4:4a:
d9:de:10:73:cb:7e:0f:a6:72:a8:e1:31:52:c1:b5:
93:f9:fa:0a:27:b2:c6:7e:bb:c1:89:73:e1:05:52:
9d:ae:da:87:f4:73:aa:93:c0:45:86:f8:f7:2a:c9:
e9:4e:6a:ca:ca:7d:8f:bf:6c:ba:00:a7:4a:be:7c:
af:56:f3:b9:95:73:a0:62:99:08:af:32:60:06:68:
c7:7a:67:88:47:9f:d0:95:78:a1:a8:ce:cf:b7:2f:
93:76:10:bb:a7:f1:c5:bb:2d:90:da:69:dc:ec:25:
11:63:cd:57:87:2f:43:c1:95:08:e7:bb:63:88:06:
6e:55:5a:24:22:cb:e7:1c:2d:49:c9:eb:28:2e:ed:
4a:b6:82:c1:24:a2:32:c2:81:f8:5f:62:5c:b0:21:
4f:33:47:12:f2:0c:17:74:e3:62:91:8a:a1:58:85:
fa:95:7d:a2:a3:0a:aa:ff:ba:1c:22:9d:83:fa:0a:
bc:a7:9e:07:e6:ef:22:a6:81:12:c8:87:a9:85:82:
98:40:34:5a:a9:ca:20:45:e8:1d:02:78:f9:95:f6:
1a:2f:61:d1:b7:0d:1d:b8:7f:a1:20:42:40:d6:37:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:18:8E:FA:43:1C:C1:0A:F9:82:EA:4C:8E:D4:88:8E:C5:5E:A0
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/1-mUYjvpDHMEK-YLqTI7UiI7FXqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.74.0/24
213.210.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1e:6c:d6:69:3c:f2:cf:8a:74:f0:bd:f9:0a:03:80:ef:09:
6f:a2:07:25:15:17:49:3c:13:44:58:91:59:26:72:18:5f:a3:
a8:f9:37:31:82:ce:ad:a0:90:76:2b:29:51:7d:f3:a7:9d:cd:
10:e1:a3:8c:b3:eb:1a:66:42:ef:5b:d9:dd:15:a0:fd:91:cb:
f5:de:a0:09:30:ad:15:f2:61:e6:ab:3a:f7:41:89:1f:51:ea:
c1:db:5b:d4:0c:6f:95:68:99:1e:5e:15:c7:ba:c7:86:71:d9:
56:94:d6:1a:ea:52:f6:d9:96:3b:cf:0f:68:be:1c:63:8d:29:
fa:a7:10:88:9a:7a:16:74:15:da:84:cb:40:be:b9:62:d1:41:
ab:6c:e1:55:32:9f:26:9c:55:e8:93:50:81:78:d9:a8:0e:58:
f5:65:14:76:4a:58:49:53:ce:61:d0:c1:e0:c8:63:20:3c:52:
05:5a:98:a3:4f:b0:dc:ec:cb:8e:42:05:6a:03:12:f3:54:c0:
39:b9:1b:ae:d5:9e:9c:c0:d1:e1:41:7a:8e:38:89:d8:9c:9d:
f1:ac:c2:67:df:38:c8:84:53:fb:3f:47:a4:f6:94:61:4c:36:
f0:ae:fc:ab:a6:82:27:48:98:cc:b8:f4:a9:f8:ae:c6:99:3c:
eb:9e:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:02 2025 by rpki-client