Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ZvmHFcWNZeQ1XtFOWZXTDfdKqok.roa
File: ZvmHFcWNZeQ1XtFOWZXTDfdKqok.roa (raw, json)
Hash identifier: eNRGYTBzQuyiSkNpaeosMdJ7pAzVJBMZZeDho/3JMbM=
Subject key identifier: 66:F9:87:15:C5:8D:65:E4:35:5E:D1:4E:59:95:D3:0D:F7:4A:AA:89
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019178A015E442D568DFB844DD7217D6A979
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ZvmHFcWNZeQ1XtFOWZXTDfdKqok.roa
Signing time: Thu 22 Aug 2024 05:47:22 +0000
ROA not before: Thu 22 Aug 2024 05:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212460
IP address blocks: 212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
2a04:2dc0:1d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:a0:15:e4:42:d5:68:df:b8:44:dd:72:17:d6:a9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Aug 22 05:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66f98715c58d65e4355ed14e5995d30df74aaa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:db:d4:b4:2d:b1:f0:8e:3c:56:fa:06:4a:
48:af:af:d5:ce:22:45:50:d9:5a:ca:c1:10:f1:25:
cc:ac:7a:97:07:5b:68:fe:38:cf:c8:aa:84:87:46:
c7:61:0d:cd:e0:5d:fb:b8:ed:dd:c3:c4:76:a3:4d:
31:15:48:6e:36:a1:77:c5:7f:ec:02:34:71:61:22:
ec:43:88:48:6f:05:76:3f:cb:0b:2b:48:be:87:21:
d6:30:76:ae:b9:c4:e4:dd:8c:cc:e1:b3:fe:0f:cd:
0f:40:a4:bc:6b:cc:f7:89:f2:e7:87:62:af:7f:cf:
7f:5e:eb:77:95:ab:ad:75:d1:7c:0a:b1:d9:f8:ce:
31:c7:de:87:af:73:73:b0:b2:00:78:90:2c:7e:be:
39:82:82:6f:c2:7f:21:08:8b:02:7a:0f:b2:fd:26:
b6:4c:e8:7e:28:24:62:3b:19:8a:10:ca:53:64:b9:
99:c3:7d:24:3a:cd:28:b3:16:1c:a0:e0:5e:f7:a6:
52:6c:f2:55:77:67:98:8d:72:ad:f6:cf:9a:29:c2:
9e:67:6f:36:2d:83:51:bc:98:db:db:46:03:95:3f:
3f:9f:ce:c8:a2:6f:a0:df:d2:3f:b4:f1:91:96:89:
f5:37:01:3a:c3:f0:cb:9f:3c:eb:a2:19:7a:09:f5:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:87:15:C5:8D:65:E4:35:5E:D1:4E:59:95:D3:0D:F7:4A:AA:89
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/ZvmHFcWNZeQ1XtFOWZXTDfdKqok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0-212.126.114.255
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
21:f0:56:da:a3:79:c1:05:e3:77:0f:15:3d:11:e3:c7:e8:61:
53:52:d8:60:4b:02:a9:9b:3d:21:dc:51:b5:39:98:5a:f4:26:
21:4a:20:80:d6:2f:c7:56:af:db:4c:b7:77:3c:3c:49:d5:41:
40:23:be:0e:b9:11:e1:bf:1f:25:a0:1e:d9:24:51:1a:01:13:
3d:44:72:d9:e4:d8:45:d6:c5:91:ef:a2:ba:ec:90:fb:3b:56:
0c:cb:93:18:aa:af:7e:98:7a:4a:f3:57:4a:35:b1:3c:76:8c:
32:21:d2:e9:e9:61:00:a4:35:b7:cc:98:a4:af:15:ac:75:6e:
c8:ac:43:b2:d5:51:9a:ab:6d:1a:39:02:28:fb:37:93:b1:f6:
bb:7f:3d:73:76:71:5b:0b:a2:36:e5:3d:9b:24:18:4c:6b:36:
18:2a:08:1d:c2:e3:e9:ec:6d:21:ae:ed:32:ea:1b:ab:3e:fe:
c3:fa:c6:7f:3d:67:8a:fd:9b:ab:6f:f8:de:0b:c1:7b:58:b5:
fe:aa:34:bb:ff:01:7c:a6:dd:cd:d0:42:b9:b4:91:da:c1:53:
dc:85:17:6c:46:6a:87:e4:df:be:5b:ba:47:26:c5:88:64:3b:
9b:0b:74:f0:f6:58:6d:d0:a2:6a:e0:e4:c1:b8:97:53:cf:99:
f4:37:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:04:25 2025 by rpki-client