Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YEcxqXtFzdmsNo_C_vy-olzbLOI.roa
File: YEcxqXtFzdmsNo_C_vy-olzbLOI.roa (raw, json)
Hash identifier: iW8zTnd83OnJXsE55RKLX2/ll3JcEaCGpo8axKpBcpU=
Subject key identifier: 60:47:31:A9:7B:45:CD:D9:AC:36:8F:C2:FE:FC:BE:A2:5C:DB:2C:E2
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01943862FDDE78FCFF1F65CA847FE5F9A478
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YEcxqXtFzdmsNo_C_vy-olzbLOI.roa
Signing time: Sun 05 Jan 2025 21:33:19 +0000
ROA not before: Sun 05 Jan 2025 21:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.236.0/22 maxlen: 24
212.116.236.0/23 maxlen: 24
212.116.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 01:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:62:fd:de:78:fc:ff:1f:65:ca:84:7f:e5:f9:a4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 5 21:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=604731a97b45cdd9ac368fc2fefcbea25cdb2ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:46:49:80:86:92:c9:5c:b4:a7:1b:8c:6f:
48:d9:93:a1:b4:b4:94:aa:b1:55:26:b2:cf:3f:77:
a6:3e:0f:d1:5b:e9:67:f0:50:1b:2a:4e:08:89:82:
62:92:25:98:2c:61:ac:57:51:82:2f:d7:14:74:08:
a0:76:81:17:6a:39:a1:44:e9:c6:9c:1d:1e:f6:ce:
34:0b:83:73:20:96:b5:ee:20:82:4c:21:57:18:a1:
3d:1e:6a:12:b8:c1:e7:bc:08:fd:58:a8:24:d4:b5:
51:4b:a8:23:76:26:45:40:b1:36:a4:d7:54:7e:2b:
a0:e4:d3:64:59:7b:ac:36:8f:48:35:dc:20:b1:26:
ac:f3:1e:7a:04:b8:cd:7b:ce:b3:58:5a:2c:31:26:
ca:2b:58:d2:3f:c7:e5:bb:3b:13:85:d1:94:cb:2e:
aa:86:fe:33:a9:a4:6c:a1:c2:22:be:ae:94:89:1e:
c6:1a:1c:37:62:fb:0e:84:ed:19:10:59:38:da:95:
bb:24:d0:03:e3:70:c9:39:3b:3d:86:58:dc:f9:43:
8d:df:ef:ca:68:cb:52:90:6a:b9:45:ed:08:23:eb:
77:a2:ff:50:19:6d:1f:fe:02:7d:9a:3e:18:e6:10:
f8:f8:f5:6a:c5:6b:3f:df:9b:03:ed:85:ea:5f:44:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:31:A9:7B:45:CD:D9:AC:36:8F:C2:FE:FC:BE:A2:5C:DB:2C:E2
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YEcxqXtFzdmsNo_C_vy-olzbLOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:5b:85:82:d5:67:e6:d2:3c:1b:60:f2:86:3c:e3:83:47:8d:
55:41:4a:4e:81:56:b9:42:d2:94:56:c5:66:4c:b8:b7:4a:e9:
d6:cd:ec:a5:88:c4:b8:6e:28:e5:bd:49:b5:aa:af:84:20:13:
5c:57:9b:77:67:f5:e4:8f:24:c8:79:9e:2a:4a:73:8e:82:c1:
a7:c3:d2:37:f7:e5:75:cb:f0:1b:47:9e:ac:37:35:b1:8d:cc:
d6:b1:eb:88:01:02:cd:1b:3a:95:d3:f8:f4:c3:eb:ed:c4:55:
96:3e:80:a9:99:18:2e:88:39:9b:21:81:ca:b3:8f:fd:8e:a6:
23:9e:5d:ab:64:64:aa:9c:21:1c:76:77:17:60:23:1b:0d:e8:
3c:a9:5c:a9:5e:9c:ac:bc:bb:c9:27:96:af:78:53:e1:6d:f6:
f5:1c:b7:71:42:2a:44:be:d4:db:ed:6e:cf:ed:be:0e:5b:f0:
ae:ed:02:08:b1:bb:c0:e6:de:d2:3e:f0:34:bd:4c:11:a6:94:
ab:5b:a9:fb:a3:7e:34:42:24:8f:e4:34:03:fc:fc:4a:78:1e:
bf:0d:ef:e6:f5:5b:55:ac:d2:05:31:63:7d:2a:66:31:16:25:
cd:2d:7b:3f:5b:ab:d9:83:0d:0e:be:db:67:ab:ca:07:16:8b:
9c:86:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:47 2025 by rpki-client