Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/7rA7lJy1gaugLUl7gDtr4oHqPq4.roa
File: 7rA7lJy1gaugLUl7gDtr4oHqPq4.roa (raw, json)
Hash identifier: b2nFgjyAjK2Hq6hRQMS8pdg8xL55yFS8WdYrN31kTmI=
Subject key identifier: EE:B0:3B:94:9C:B5:81:AB:A0:2D:49:7B:80:3B:6B:E2:81:EA:3E:AE
Certificate issuer: /CN=8819956ddceae022cfe123da373c6b111640368d
Certificate serial: 0193255CF752CDFAE65343132765079695F6
Authority key identifier: 88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/7rA7lJy1gaugLUl7gDtr4oHqPq4.roa
Signing time: Wed 13 Nov 2024 11:51:09 +0000
ROA not before: Wed 13 Nov 2024 11:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2600
IP address blocks: 212.109.224.0/24 maxlen: 24
212.109.225.0/24 maxlen: 24
212.109.226.0/24 maxlen: 24
212.109.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:5c:f7:52:cd:fa:e6:53:43:13:27:65:07:96:95:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8819956ddceae022cfe123da373c6b111640368d
Validity
Not Before: Nov 13 11:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeb03b949cb581aba02d497b803b6be281ea3eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:b3:fd:9f:61:06:67:fe:c2:db:1b:e3:ca:
ad:83:ce:bc:7a:4c:a3:4a:09:2c:f6:46:a6:6f:c3:
5a:ac:41:35:70:cc:a1:3b:49:02:7c:82:82:64:c0:
b3:b6:0b:df:6a:81:a6:8f:28:cc:f5:90:8b:57:58:
0e:ac:d9:10:b9:91:1c:f1:ec:ab:0e:b3:42:94:6c:
e2:74:be:68:24:dc:05:4b:8f:35:ba:87:7e:6a:ac:
10:5d:c1:f9:5e:da:13:0c:97:5d:68:32:01:64:a0:
50:a5:61:0a:11:75:65:38:95:85:5a:86:ee:48:34:
f2:35:34:54:55:06:70:f1:a6:f8:70:13:97:2b:0b:
92:e3:86:f1:65:ba:af:5a:00:9e:e1:f6:cb:3b:fb:
79:6f:34:d4:1b:50:38:dd:6e:cc:57:18:b8:3a:f7:
1a:91:22:d4:dc:42:24:da:ba:87:06:08:50:6a:3e:
ba:47:5d:be:7b:07:81:b7:fa:66:ed:ec:49:42:f0:
c7:10:c7:b5:79:cb:26:eb:4d:f1:52:57:a9:2d:99:
b2:3c:43:19:f5:1d:ee:3e:b8:2d:dc:e7:17:17:a5:
83:37:c0:fd:4d:b4:b6:f5:e3:6f:e2:c8:76:c3:8b:
69:27:16:b2:87:c3:31:10:e1:5b:b5:1b:a1:13:46:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:3B:94:9C:B5:81:AB:A0:2D:49:7B:80:3B:6B:E2:81:EA:3E:AE
X509v3 Authority Key Identifier:
keyid:88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/7rA7lJy1gaugLUl7gDtr4oHqPq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:29:73:fb:27:39:17:c0:5c:76:01:0c:9f:26:7b:a8:f7:2d:
d0:c1:d1:e4:0b:60:47:f9:04:9b:32:16:a8:88:f0:2f:f9:cf:
19:23:96:26:82:d4:b3:28:3a:ae:ff:f8:52:8a:cd:cb:21:82:
e4:df:6a:8b:38:25:5f:0c:cd:45:89:7b:6e:ea:77:4b:52:d0:
fe:0c:69:94:d3:77:98:4c:8f:e7:53:f0:be:73:23:be:b4:e5:
2f:62:0a:d5:a4:86:ab:5a:ad:ab:10:6f:bd:2c:c7:17:ff:d8:
5a:a7:3e:3f:73:9a:4a:3e:aa:3d:c2:5a:91:ac:05:f5:e2:61:
a3:c2:03:9d:48:62:6e:d8:43:f8:7c:0f:84:52:e3:2e:3e:b5:
0f:9e:74:d6:22:26:92:ee:cd:0e:9a:7c:48:b2:76:e7:d1:08:
c9:4a:4a:bb:cf:29:0f:6b:50:8f:05:61:c4:0a:7f:24:ee:42:
68:3f:64:29:75:0a:cd:20:28:7b:24:cb:6f:3a:fc:6d:34:99:
58:fe:9a:a3:6d:12:60:75:4b:ad:3a:e3:ca:3f:2a:41:bb:1b:
51:27:3a:fc:65:3c:3e:a5:44:dc:6f:5b:f6:10:b2:5a:fe:d9:
ff:53:6b:32:3f:43:83:8b:5e:45:e4:90:95:04:6c:0e:76:d2:
c7:0a:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:10 2025 by rpki-client