Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0rr_Ma4cfxEzntw9f0PctrEjOkU.roa
File: 0rr_Ma4cfxEzntw9f0PctrEjOkU.roa (raw, json)
Hash identifier: dk03I9rnp2nCjZ+AfQvZbjG/598bgl4peQ/799m4VlA=
Subject key identifier: D2:BA:FF:31:AE:1C:7F:11:33:9E:DC:3D:7F:43:DC:B6:B1:23:3A:45
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0193C6FC96939E116C3573181200294D7EC7
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0rr_Ma4cfxEzntw9f0PctrEjOkU.roa
Signing time: Sat 14 Dec 2024 21:04:22 +0000
ROA not before: Sat 14 Dec 2024 21:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:fc:96:93:9e:11:6c:35:73:18:12:00:29:4d:7e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Dec 14 21:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2baff31ae1c7f11339edc3d7f43dcb6b1233a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:a9:2f:44:c4:4e:23:6c:5a:5c:f7:88:f2:
d6:f6:93:69:2b:92:0e:ff:a6:94:9e:1d:6e:2f:e1:
e5:65:ee:08:cb:c8:92:a0:60:ac:a1:75:ad:7b:48:
dc:8c:b4:32:40:9b:86:b9:67:84:5e:7c:e3:d3:c4:
e2:9c:89:16:23:c9:1b:0e:68:d0:88:bf:ce:f8:5f:
7b:c8:77:d4:13:7d:04:dc:5c:6b:63:7b:85:85:c3:
0a:1e:ef:38:af:b6:76:94:d0:bd:72:60:b3:07:39:
c7:ba:1b:18:aa:b2:53:f5:92:34:6b:fc:40:b5:8f:
9e:69:91:e8:77:fd:06:9b:c8:8c:31:af:5e:22:55:
63:91:07:fc:06:f2:9d:d1:d9:3e:ee:16:b7:ca:b3:
ed:a2:c9:72:4b:74:68:a6:bc:87:c0:51:b2:84:dc:
bb:25:53:14:92:09:41:4a:19:c1:63:1d:d7:fe:c9:
79:29:d2:ca:46:f8:d5:ff:82:07:cb:74:1b:25:f6:
1b:a4:8d:b3:a4:5f:be:93:83:a8:59:4d:5f:40:6f:
a9:67:64:51:e9:0a:f7:d9:0e:b5:82:8b:af:4e:37:
64:a7:52:32:77:46:79:a2:a7:62:df:22:54:4e:8b:
d9:d2:d1:99:b2:4f:30:3a:09:5d:b6:c9:ab:75:a8:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:FF:31:AE:1C:7F:11:33:9E:DC:3D:7F:43:DC:B6:B1:23:3A:45
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0rr_Ma4cfxEzntw9f0PctrEjOkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:77:45:d6:9f:12:6e:62:b2:11:22:f3:b4:49:3e:22:47:35:
e4:45:9a:1c:26:c7:37:e0:be:ab:b8:a1:a6:b4:35:69:b2:c7:
0b:ba:e5:3e:33:10:82:f6:ec:66:9b:21:04:f9:18:d0:c5:17:
84:c8:25:c2:26:47:36:24:0a:69:db:b2:35:a3:ee:dc:42:2c:
9d:5e:68:b0:98:05:c1:eb:51:c7:e9:30:e7:ee:4b:b4:24:c8:
f5:42:8e:08:af:30:46:99:ce:92:f0:33:55:26:a5:fa:e4:3d:
3e:fd:4a:86:de:69:db:cb:7f:24:51:d9:28:8a:7f:ef:1f:7d:
72:0c:5d:ed:b9:d7:a2:82:59:98:c5:55:23:46:25:89:bc:53:
a6:25:a0:76:06:91:f9:7e:0c:82:05:25:43:ba:18:8f:f9:cd:
40:d7:14:38:56:b9:53:f6:f1:73:4d:1c:b6:f6:0d:4d:52:6f:
d7:32:bd:00:9b:f9:a7:7f:e3:72:2c:71:12:bc:43:bc:8e:2e:
19:af:a4:16:1b:cb:f5:67:d1:16:00:43:b3:55:e3:82:10:6f:
94:99:4d:51:66:31:19:32:8e:2b:8e:09:4c:66:9f:4a:62:ba:
6c:bc:c8:74:36:1c:d7:25:a6:45:e0:f9:fc:0f:1e:a3:6a:bc:
fb:00:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:58 2025 by rpki-client