Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/p_wAYcqJqsrHT7JB7mgpEyNJlhY.roa
File: p_wAYcqJqsrHT7JB7mgpEyNJlhY.roa (raw, json)
Hash identifier: KYfz8Uc3wfu2aOsWTess6jrRkJlGKzbwdALmkxD/8AQ=
Subject key identifier: A7:FC:00:61:CA:89:AA:CA:C7:4F:B2:41:EE:68:29:13:23:49:96:16
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018D585A0645758624BD46EE766847CAADE6
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/p_wAYcqJqsrHT7JB7mgpEyNJlhY.roa
Signing time: Tue 30 Jan 2024 03:11:51 +0000
ROA not before: Tue 30 Jan 2024 03:11:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206248
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.107.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 11:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:5a:06:45:75:86:24:bd:46:ee:76:68:47:ca:ad:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 30 03:11:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7fc0061ca89aacac74fb241ee68291323499616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:54:51:4b:8e:ea:c6:6d:87:94:29:71:65:
4f:bb:02:7b:96:64:c3:ab:1d:64:9b:56:1d:0f:9b:
e5:5f:16:11:fb:50:13:48:f1:77:16:a2:c9:d8:27:
e4:28:bd:21:16:d4:47:fb:e1:59:0d:96:1a:3e:a0:
41:be:4e:73:b0:ca:1b:70:03:03:fb:26:a5:f9:09:
88:bf:65:5d:41:92:eb:20:16:4c:fc:4a:73:ee:af:
9a:b8:57:b4:a6:0a:5f:fd:13:4a:61:5f:b7:f5:04:
84:bc:22:11:c2:1c:09:c8:43:be:a7:59:43:97:59:
31:41:2c:26:c1:38:d5:0e:b8:42:6a:fe:71:a0:d8:
d3:78:9a:88:b4:f0:9c:f9:0c:e4:61:20:2a:6c:e3:
0e:a7:db:25:5c:c5:76:6b:56:a0:02:ca:eb:7d:01:
0a:1f:76:8b:67:e6:35:b6:a8:94:2f:06:a9:da:c8:
30:67:e3:d4:c0:fb:14:22:19:d9:e8:41:52:d9:08:
ad:0b:49:ea:81:16:ea:e0:c2:10:97:5b:d2:18:51:
41:21:15:e0:e6:9c:c6:e8:d3:08:7c:84:6e:e1:d1:
90:20:62:ea:8b:b2:e7:3b:28:6a:2a:1c:e2:e3:0d:
11:e6:85:94:02:03:f0:d1:21:61:34:09:e5:5a:e0:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:00:61:CA:89:AA:CA:C7:4F:B2:41:EE:68:29:13:23:49:96:16
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/p_wAYcqJqsrHT7JB7mgpEyNJlhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.107.0/24
212.113.109.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
33:65:c7:9a:a0:9b:eb:7e:20:48:a9:79:a3:7e:b8:6c:5d:21:
1c:f6:da:f0:af:21:56:8e:54:98:54:75:8c:3f:e5:c4:da:5a:
c5:63:d1:75:75:3e:5e:e3:0a:04:fa:3f:40:51:19:b7:c2:bb:
d4:5d:ca:36:04:a7:41:51:4d:17:24:c1:9d:86:12:6f:c9:04:
1e:2b:fa:0b:11:5c:ca:ea:39:ea:a3:e4:25:e4:57:37:10:fb:
3a:53:ed:02:c0:b8:93:2f:08:42:31:5d:7a:19:73:a8:26:be:
e3:e6:42:13:ab:d7:41:6f:b0:74:62:64:73:37:b8:c9:de:0d:
9f:18:d2:26:50:64:34:b8:2e:56:9a:e8:16:4f:af:1b:bf:06:
70:16:ca:02:80:49:95:d3:73:25:47:10:fc:dc:de:3c:91:a7:
f9:26:a8:07:ea:c7:97:77:34:8c:9c:a6:02:e3:99:2f:ed:10:
38:eb:38:6e:21:5d:b9:49:0b:b8:86:04:fe:b6:fe:03:57:e2:
94:c3:cf:0c:8f:ca:bc:5a:0d:2e:fa:18:6c:8f:5b:94:c0:1f:
66:31:f0:da:de:50:08:c5:f2:53:b4:84:f5:79:09:c7:5e:e2:
2c:30:81:8e:41:e4:12:b6:d3:f9:b9:a3:d8:b2:8d:7b:72:5d:
08:c1:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:31 2025 by rpki-client