Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ny2pYzow83lfWKq6NAfIU_OAuaU.roa
File: Ny2pYzow83lfWKq6NAfIU_OAuaU.roa (raw, json)
Hash identifier: gJ3XsJm3ioi6DrjEQ1bdx4xwVl2tDkxmm1NOBcechYw=
Subject key identifier: 37:2D:A9:63:3A:30:F3:79:5F:58:AA:BA:34:07:C8:53:F3:80:B9:A5
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01928DC9E5D1BB332AB376D75677C1D69F7E
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ny2pYzow83lfWKq6NAfIU_OAuaU.roa
Signing time: Tue 15 Oct 2024 01:27:51 +0000
ROA not before: Tue 15 Oct 2024 01:27:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 212.116.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8d:c9:e5:d1:bb:33:2a:b3:76:d7:56:77:c1:d6:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 15 01:27:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=372da9633a30f3795f58aaba3407c853f380b9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:d6:ab:3a:e9:e8:5a:97:ce:a3:69:3c:96:
1d:e6:1b:78:d3:b2:0f:c7:db:4a:3a:7a:ee:68:e5:
b8:d9:26:43:bd:6a:d1:5e:1c:b1:a8:7b:84:ab:6f:
5a:4d:9d:32:8a:1a:f3:5a:e1:09:07:ff:95:79:c1:
76:73:8e:6f:fd:69:6b:10:1c:b1:bb:9e:b9:79:cc:
da:3f:0e:bc:e2:02:bc:ca:af:45:c2:63:08:49:6d:
fd:1c:f4:26:a2:a9:11:77:98:1b:ec:24:e4:d7:70:
f5:d6:03:4f:11:52:d2:e8:8e:08:5b:78:d6:5d:7a:
fc:c9:af:d9:2c:ae:48:16:43:23:fd:1c:08:6c:2f:
5b:c6:b3:69:4b:6b:e3:1e:bd:3b:56:59:02:30:92:
a5:d4:69:f4:d3:6a:28:88:5f:09:65:26:80:17:94:
64:15:18:e2:1b:18:4a:cb:1f:62:31:8e:5f:c4:8a:
8a:b4:73:00:4c:26:ff:f5:c4:c6:07:1e:3a:42:03:
cb:fa:52:b3:67:49:4e:64:37:9c:01:ea:15:85:a0:
ff:24:be:c2:b8:42:75:af:27:60:a8:c5:59:b8:e0:
38:0f:43:b2:1b:44:d7:20:0e:36:cd:46:1d:b6:85:
01:3d:b4:0a:c4:5d:f0:1e:57:e7:21:b1:af:1b:53:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:A9:63:3A:30:F3:79:5F:58:AA:BA:34:07:C8:53:F3:80:B9:A5
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ny2pYzow83lfWKq6NAfIU_OAuaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:51:dc:fc:6a:28:20:57:d9:25:5b:f4:d0:4f:7d:c7:4c:d7:
67:47:14:89:61:a6:51:bc:dd:45:65:76:f2:21:79:3a:72:3d:
58:f3:1f:09:5d:d0:19:ca:b0:16:42:cf:e0:48:36:a3:b9:f3:
8a:3d:96:28:a2:33:47:bd:39:83:8a:2f:95:02:84:2e:a3:1f:
b0:49:7b:60:bd:68:e1:55:b8:9e:d7:1b:64:27:b3:57:03:7c:
8e:fb:4f:f4:b9:e8:fa:22:f5:3f:4f:27:76:5c:b0:e0:cf:a9:
ce:61:cf:b2:05:e6:cd:d2:8f:0b:e6:84:0e:63:16:db:7e:04:
1b:70:0a:27:c2:ba:79:e0:04:03:db:b0:4a:b1:77:ca:96:ef:
84:ee:ec:c3:66:63:29:15:33:83:ff:d6:00:a2:b4:c5:53:cd:
35:6c:cb:b2:44:ea:b7:52:6f:bf:ce:48:68:52:19:1d:67:ec:
f4:24:72:84:70:81:da:11:f7:6b:39:0c:2c:56:f2:db:b4:29:
8c:71:4c:9e:e4:45:86:fd:bd:2d:df:8b:2c:95:e0:5d:5e:cd:
29:4e:e8:7e:9b:30:19:c1:fe:7e:7a:f8:c0:10:9d:11:57:0c:
3b:04:e4:71:52:46:13:2d:2c:f7:40:9a:0d:67:db:c6:71:48:
a9:0c:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:16 2025 by rpki-client