Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/hPphoxo_mXNs5AR5CFweCQFIUGY.roa
File: hPphoxo_mXNs5AR5CFweCQFIUGY.roa (raw, json)
Hash identifier: AxM6wtSTeR/TWvgR5vDXodXNL/VMrncOxxtsc9l5dSA=
Subject key identifier: 84:FA:61:A3:1A:3F:99:73:6C:E4:04:79:08:5C:1E:09:01:48:50:66
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0195287442615AB49DCA3E599324FE2610C1
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/hPphoxo_mXNs5AR5CFweCQFIUGY.roa
Signing time: Fri 21 Feb 2025 12:21:02 +0000
ROA not before: Fri 21 Feb 2025 12:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.236.0/22 maxlen: 24
212.116.236.0/23 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Mar 2025 05:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:74:42:61:5a:b4:9d:ca:3e:59:93:24:fe:26:10:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Feb 21 12:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84fa61a31a3f99736ce40479085c1e0901485066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:01:d6:78:ad:1d:87:21:31:6c:8a:e4:24:
2b:0f:1a:fb:c8:6e:14:10:19:f1:1b:54:2f:0d:a2:
4d:e2:17:98:08:03:8e:b8:cb:d1:67:90:2c:83:33:
da:32:9e:8f:11:21:04:9d:a4:79:c1:51:6a:88:e1:
24:d4:de:73:51:32:da:1d:1b:69:ab:73:49:23:da:
70:1d:36:f6:52:b7:09:98:8e:1d:f7:94:fe:09:f8:
58:c7:94:a7:f5:a0:04:72:41:99:8c:b0:ee:0e:8a:
78:c7:5b:d8:c2:02:1a:09:79:b4:f6:32:d0:c8:91:
fa:74:cd:fc:f0:90:32:ec:55:b3:4d:b5:51:c5:8b:
73:dd:99:1d:87:91:9a:6f:a8:81:7d:25:10:3c:de:
9f:1e:f6:00:f6:5e:16:05:1d:7d:ec:4b:2f:f4:d7:
5d:79:d7:6d:5c:78:5a:89:e0:29:5c:5f:c4:84:3d:
0c:ae:bd:50:01:77:ac:92:74:8e:9c:be:d3:97:72:
5e:e9:32:15:a4:cf:03:4f:4b:02:36:e7:57:34:7e:
6c:78:d2:45:34:56:2d:57:f7:0e:10:51:c3:9b:0f:
48:77:b8:f0:e7:3f:f9:0a:6e:f8:c4:9a:b9:9b:78:
ab:22:93:f5:6f:01:cc:2a:51:98:57:de:ca:c9:04:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FA:61:A3:1A:3F:99:73:6C:E4:04:79:08:5C:1E:09:01:48:50:66
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/hPphoxo_mXNs5AR5CFweCQFIUGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.236.0/22
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:62:7b:30:c6:62:1d:e2:5c:28:cc:99:c9:eb:08:72:10:96:
f8:4e:68:2f:8b:f4:d7:30:a1:5f:3a:28:48:c1:f3:39:91:15:
ed:fb:22:d8:d8:ad:bc:00:62:5e:4f:36:c8:22:89:73:7b:0c:
34:76:59:c4:0e:62:6f:3b:93:06:1f:ab:0a:89:c6:0c:a3:43:
06:3c:78:cd:02:a3:ad:99:5f:a4:1e:68:e1:b5:9d:42:65:bc:
e6:9c:97:7b:91:d9:56:ee:f5:97:63:3d:2d:c9:9e:a0:cf:19:
e2:25:40:e4:70:1b:e5:8a:5f:29:9a:cc:95:9b:47:27:bb:d5:
a9:f6:53:51:1a:cb:f4:07:97:c5:2e:a3:02:26:4a:fc:43:17:
1e:1f:ad:70:c3:ed:56:92:5d:20:2b:ca:c1:7b:40:77:f5:c9:
c6:9f:87:3e:c3:d2:ad:25:5e:7b:e1:e2:9f:73:f9:cc:e8:9b:
06:c9:a1:ab:b4:1c:d5:bc:67:9d:ed:66:a3:ef:dd:4f:a9:ca:
a2:5d:b2:b2:3e:94:fa:e0:3c:bb:80:af:8c:24:05:a0:cb:3f:
63:2c:24:0f:a0:74:26:52:97:63:f3:0e:a6:42:bb:45:97:0c:
79:e6:ad:d1:71:c0:0c:5c:65:4d:69:8c:7d:25:28:7e:89:e9:
3b:55:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:17 2025 by rpki-client