Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/rNXStkF0k4veu8Jf3c0-TWQlz9c.roa
File: rNXStkF0k4veu8Jf3c0-TWQlz9c.roa (raw, json)
Hash identifier: Aa/tpiCAWJNU300NkZiJ2y/KBurtv8X1sa09C+gKKtE=
Subject key identifier: AC:D5:D2:B6:41:74:93:8B:DE:BB:C2:5F:DD:CD:3E:4D:64:25:CF:D7
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 0195AA7F63C11E07C1CDF88BDC52F74E9B49
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/rNXStkF0k4veu8Jf3c0-TWQlz9c.roa
Signing time: Tue 18 Mar 2025 18:23:49 +0000
ROA not before: Tue 18 Mar 2025 18:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 212.29.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 19:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:aa:7f:63:c1:1e:07:c1:cd:f8:8b:dc:52:f7:4e:9b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Mar 18 18:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acd5d2b64174938bdebbc25fddcd3e4d6425cfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:e0:e1:10:26:8d:e5:09:7d:1f:97:aa:fa:
28:0a:e2:64:92:c2:88:dd:71:8f:7e:a3:ab:47:64:
77:c3:59:e6:9f:ea:bc:8e:e3:50:8b:19:f3:f7:d7:
e6:19:de:f6:81:07:29:a1:bc:6c:28:ac:6a:9d:97:
c0:25:6e:2d:3e:2e:35:2e:42:a4:98:17:9b:d6:c3:
a4:67:68:d9:0c:ae:3d:95:de:9f:bc:fe:b6:da:36:
e1:30:fa:12:89:a4:c7:69:ae:f5:30:e1:bb:d2:8b:
4d:18:04:ed:b2:6b:42:5a:50:b3:da:89:c9:c6:54:
3f:f8:7a:42:29:eb:40:66:56:f1:94:cd:ac:13:60:
a4:2f:5c:1e:ff:e2:e6:a8:d5:27:f7:d3:22:a2:74:
93:01:9b:1e:59:6e:9b:31:3f:81:78:a7:95:68:60:
b1:83:ed:d9:43:10:95:37:a0:f4:1d:3d:b6:5c:35:
69:3f:8e:98:ff:0e:0a:23:14:77:90:be:22:ec:c1:
13:5d:62:2f:4d:9d:9a:2a:f3:e1:0a:7f:47:ad:9f:
ac:f0:34:08:78:f6:d8:56:db:99:47:cb:16:c0:8a:
76:ed:29:4b:5e:22:22:cb:a9:30:bd:5a:3a:99:72:
28:37:2b:aa:73:7e:ea:e4:54:ed:b1:72:db:6d:fd:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D5:D2:B6:41:74:93:8B:DE:BB:C2:5F:DD:CD:3E:4D:64:25:CF:D7
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/rNXStkF0k4veu8Jf3c0-TWQlz9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.29.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:78:49:ee:19:81:1b:52:f7:89:01:7b:d9:3d:ff:91:f2:f7:
5c:f5:f7:33:b8:b2:e8:ff:be:3c:c9:9c:cf:46:3e:3c:3d:d6:
46:76:45:06:d5:96:62:77:70:e9:11:c0:ef:01:e0:16:3f:98:
3b:11:ea:74:69:d3:1c:61:67:a1:b7:48:69:1e:2e:bb:21:36:
fe:f7:13:46:53:d7:4e:1f:af:7e:62:d6:50:32:33:77:1c:3a:
5d:76:6d:f2:f9:b1:68:4b:21:5c:1d:88:8d:68:a6:94:1b:05:
76:8d:af:9e:47:4c:3c:5e:94:8e:01:d5:e0:1b:0b:9a:9e:e5:
db:9b:cd:ef:60:6e:f9:b6:92:ab:ff:84:db:9c:f6:f4:42:42:
c5:3c:8d:dc:ff:6b:73:c0:d0:53:5f:67:44:b9:bc:ab:2a:85:
cf:f0:7b:e9:e0:52:50:b5:1d:b8:79:6f:04:3c:ed:22:8a:46:
aa:09:b4:02:06:11:b1:7d:5b:34:20:57:31:b7:ac:8e:de:ad:
f7:1a:af:ed:0c:96:aa:4c:f7:14:00:7f:e8:35:d4:45:fe:04:
e8:c4:27:b5:57:24:c1:4c:2e:93:9b:28:78:88:55:53:84:7f:
0a:ea:ac:88:46:5e:f5:db:f6:ed:a3:55:a4:24:f8:20:7d:17:
6c:80:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:43:39 2025 by rpki-client