Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Nqp93V8AzQrU_-iCpS11ou2GVtg.roa
File: Nqp93V8AzQrU_-iCpS11ou2GVtg.roa (raw, json)
Hash identifier: ygNhQC4tRCsCgvHegcRTWUkfk1wLmw7K3EWd+mhXGrA=
Subject key identifier: 36:AA:7D:DD:5F:00:CD:0A:D4:FF:E8:82:A5:2D:75:A2:ED:86:56:D8
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0192412C829C7E2BBB10B48A767F63D5BCEC
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Nqp93V8AzQrU_-iCpS11ou2GVtg.roa
Signing time: Mon 30 Sep 2024 04:24:48 +0000
ROA not before: Mon 30 Sep 2024 04:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.243.0/24 maxlen: 24
212.116.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 16:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:2c:82:9c:7e:2b:bb:10:b4:8a:76:7f:63:d5:bc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 30 04:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36aa7ddd5f00cd0ad4ffe882a52d75a2ed8656d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:21:4b:d1:ea:0e:fe:a3:d9:2f:db:89:8e:
a0:9b:50:45:06:cc:6b:c4:83:43:d4:57:71:93:e4:
ab:78:25:f2:f1:c5:7c:f8:bb:19:83:59:2a:07:b4:
43:8b:4d:dc:b6:fa:f3:6a:13:72:8a:f7:41:02:16:
b6:7a:60:07:c8:2b:48:5c:57:cf:a3:8a:89:9f:d8:
97:3b:87:58:36:c3:fc:4a:3c:a7:2f:40:df:6a:98:
b4:0e:f1:6b:85:ea:32:2c:98:48:c6:4f:12:d2:2c:
1d:4a:8a:a4:3e:07:86:b6:46:df:29:70:1e:0d:ba:
ad:ad:22:1c:c8:4a:3d:7b:a2:3f:68:48:26:04:51:
81:a7:57:98:4d:5b:7e:09:6d:d0:a4:44:e7:f9:7d:
8f:ec:ed:82:49:0a:04:36:c3:8f:d7:9e:a3:30:99:
05:b5:d2:89:f7:c1:86:70:06:7c:a8:b6:8d:de:9d:
57:f2:da:5c:f0:fb:eb:3b:ea:44:10:b4:aa:fd:5f:
05:df:98:93:53:b9:36:da:9b:72:ec:b4:21:67:0f:
28:1c:f9:21:3a:bc:c7:19:b5:bf:f5:a2:cd:67:f8:
86:aa:94:7e:f1:d9:28:14:1c:70:04:a4:ae:61:3e:
60:24:0f:c1:48:a4:a3:4b:61:2b:9d:6f:08:1e:f4:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:7D:DD:5F:00:CD:0A:D4:FF:E8:82:A5:2D:75:A2:ED:86:56:D8
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Nqp93V8AzQrU_-iCpS11ou2GVtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.243.0/24
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:44:18:a1:02:96:7a:e0:6d:38:c5:5c:ff:35:0f:dc:70:98:
b4:e2:ca:e5:51:1a:8e:cd:b5:56:f0:9e:72:3d:01:a7:a6:05:
20:97:f9:93:b9:ad:8b:34:4f:5e:30:05:ca:ca:1b:e4:de:1c:
df:aa:36:3e:e0:66:c9:37:5b:8a:74:a7:78:dd:02:93:ab:22:
b3:ef:73:c5:cf:ae:6a:5f:c7:83:aa:ec:8b:4a:f1:9c:d5:a3:
1f:31:8a:67:6d:d1:83:d6:e9:64:84:cb:0f:4f:14:d1:e6:a6:
b5:de:71:2a:8b:57:e9:e6:74:3c:1b:c2:e2:ea:01:cc:09:17:
bb:60:75:a0:68:e1:b9:8c:1d:6d:5a:23:49:44:e2:d4:c8:8b:
52:3a:0c:02:46:69:6e:6d:83:80:fd:de:4f:09:55:c0:aa:31:
c0:99:59:6a:31:59:a7:67:a7:d9:12:f5:bf:a0:19:d8:28:1f:
00:54:76:ad:b1:9a:70:8a:d1:ab:da:bd:a4:66:8d:fa:50:2f:
47:94:6b:ca:d6:c7:eb:3d:4d:a7:b8:ae:20:4a:86:42:cf:77:
f7:13:54:58:c7:58:47:2a:a4:6f:d0:8e:b5:23:14:62:d4:d5:
c2:ad:e3:63:00:d7:80:ef:d7:26:4c:74:be:98:85:0b:c9:cb:
04:5e:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:38 2025 by rpki-client