Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RdSnPYQL0uYwqHq2ewQyyxK1N-g.roa
File: RdSnPYQL0uYwqHq2ewQyyxK1N-g.roa (raw, json)
Hash identifier: Pw3RuljdTsOUFO3NE6KQ5M+CO3FjhV43p+jtCot1epE=
Subject key identifier: 45:D4:A7:3D:84:0B:D2:E6:30:A8:7A:B6:7B:04:32:CB:12:B5:37:E8
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018CC6B8A3CF1659BD64DB13EDC1F1D85CCB
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RdSnPYQL0uYwqHq2ewQyyxK1N-g.roa
Signing time: Mon 01 Jan 2024 20:30:38 +0000
ROA not before: Mon 01 Jan 2024 20:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a3:cf:16:59:bd:64:db:13:ed:c1:f1:d8:5c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d4a73d840bd2e630a87ab67b0432cb12b537e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:c4:4f:cd:12:29:74:d5:a0:46:1d:52:dc:
49:38:9d:d8:c3:b7:bb:2b:ce:cf:45:5c:3d:2d:45:
90:39:e1:c0:e5:3e:13:80:30:05:14:cf:72:6e:b4:
bb:ad:2e:de:6c:f7:af:75:b4:db:2d:fd:00:0d:21:
a4:b0:07:e2:83:41:6b:19:cc:27:8c:37:49:bf:c5:
a0:34:e7:29:fc:aa:4a:28:40:9a:1e:e4:99:1c:d8:
5b:de:41:60:0c:00:d8:b2:c7:c0:40:e8:bd:63:66:
06:61:fc:7c:1b:ed:ff:6b:0c:b7:53:39:bb:96:a2:
c9:07:cd:5c:74:30:69:27:d2:aa:db:3b:fc:cd:f4:
4a:c6:b2:db:19:92:ee:99:51:3d:ca:e4:58:59:2f:
70:5d:2f:1c:5d:d0:ed:88:6a:da:0d:a0:32:f0:ff:
0a:c2:d5:94:d4:c2:54:a9:4c:26:df:83:4d:3b:2b:
67:3a:a7:95:69:58:d3:24:3f:ac:74:0c:72:c9:4a:
89:e9:80:ba:40:d6:73:4f:03:8d:8e:0b:7f:45:ab:
7e:8a:ba:d8:c9:83:76:c4:26:a2:d7:54:ea:6d:c8:
91:30:6a:47:50:8c:41:d1:2e:7b:ff:b7:0a:7b:71:
f0:9b:8c:61:d1:1b:d8:9e:78:05:23:ec:36:ba:f2:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D4:A7:3D:84:0B:D2:E6:30:A8:7A:B6:7B:04:32:CB:12:B5:37:E8
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RdSnPYQL0uYwqHq2ewQyyxK1N-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5a:40:d5:42:c4:d6:95:54:ba:02:f4:41:15:46:73:04:5a:
63:40:b9:8a:17:b8:86:8e:aa:27:81:31:e5:22:a0:8d:a1:57:
57:7a:64:89:58:93:1f:ad:67:43:75:df:55:36:ad:7b:b0:99:
87:a9:ee:50:ea:8b:8f:12:77:1c:fd:20:ab:96:e0:04:17:1e:
73:74:bc:78:e4:3e:7d:e8:e3:f9:a4:c0:3f:73:25:68:b4:da:
26:8b:65:9c:a3:cb:f5:36:9a:20:14:ba:09:40:f7:61:10:69:
d3:45:98:2c:a3:3c:2e:6f:c2:e1:25:16:e6:b8:93:92:ba:08:
27:69:81:9a:4d:51:ca:b4:53:e0:4e:c3:ca:c5:c7:ad:58:36:
c0:2a:93:7d:4a:4f:90:7b:b8:54:4a:8b:d1:6a:85:aa:92:25:
36:a6:f1:db:7d:a6:42:33:db:23:83:2d:c8:0e:26:00:56:d5:
4b:22:ba:ed:c4:0e:25:c6:36:46:a7:5c:4b:8d:3f:db:9e:4e:
99:7c:15:10:68:f9:3d:4e:99:ba:67:17:a8:28:91:dc:2c:47:
c0:39:49:6f:74:a6:de:14:31:1d:71:7a:fb:67:f9:76:af:50:
b3:fd:ba:06:32:be:80:8f:c6:77:da:49:4b:b5:8d:b7:b5:b2:
4d:ca:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:59 2025 by rpki-client