Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/XHoT4d-yYuksl-0C0XGhcEbUPWo.roa
File: XHoT4d-yYuksl-0C0XGhcEbUPWo.roa (raw, json)
Hash identifier: e9Gq7Sfi29qkOlcfQZcTRiA5P9+6Qr7roKVeMTLBLKI=
Subject key identifier: 5C:7A:13:E1:DF:B2:62:E9:2C:97:ED:02:D1:71:A1:70:46:D4:3D:6A
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0194B0F88C78A8ADF80DB6D6F54E8E130F05
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/XHoT4d-yYuksl-0C0XGhcEbUPWo.roa
Signing time: Wed 29 Jan 2025 07:31:06 +0000
ROA not before: Wed 29 Jan 2025 07:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213787
IP address blocks: 212.22.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 08:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:f8:8c:78:a8:ad:f8:0d:b6:d6:f5:4e:8e:13:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 29 07:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c7a13e1dfb262e92c97ed02d171a17046d43d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:98:d4:c2:03:cf:b0:9f:d2:61:0b:f3:74:
4d:1e:5d:eb:86:e6:48:8a:b6:c8:cc:9a:78:32:9d:
64:51:9e:e9:da:c2:7e:5b:cc:d6:93:4f:dd:a7:2e:
df:02:af:ba:c4:55:03:50:e3:15:87:8d:22:18:27:
81:3a:50:27:33:43:6c:08:f7:32:79:73:ee:6a:a6:
0b:cb:f8:ce:b9:d9:7a:b6:a1:02:06:aa:20:00:82:
f5:59:06:ec:cc:42:06:7f:17:72:cf:e5:40:5f:bd:
43:dc:e1:2a:f4:62:ae:4d:f6:cc:77:95:89:60:55:
86:75:61:49:b1:8f:91:47:fa:27:12:dc:df:f9:11:
7f:7d:f0:8d:98:b0:bd:b9:3b:81:7f:d0:c1:17:1c:
f1:eb:8d:d0:e1:1d:a0:c1:d4:d6:af:a4:19:97:6e:
06:f5:16:88:80:9d:e1:7a:4e:e0:6b:fd:9d:dd:0e:
45:cd:63:00:59:6b:5a:16:61:52:1c:2b:c0:0b:79:
a9:cd:c3:10:2c:f8:28:2c:81:3a:07:02:30:67:1e:
bc:42:38:75:0d:64:80:34:8c:12:61:5a:71:11:90:
f1:54:78:79:4a:dc:b8:d0:3c:06:60:7b:dc:11:75:
04:38:69:40:8c:fa:5a:c4:f7:84:eb:d7:ac:13:5d:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7A:13:E1:DF:B2:62:E9:2C:97:ED:02:D1:71:A1:70:46:D4:3D:6A
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/XHoT4d-yYuksl-0C0XGhcEbUPWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.68.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4c:a8:75:8c:c6:de:b3:44:e7:0e:f6:ec:ce:41:f5:72:04:
0c:77:f5:0c:80:de:7a:b4:37:09:4d:bb:92:5a:85:f8:02:af:
0b:1b:1e:19:4e:5a:58:0e:3c:9e:a5:aa:fd:8e:f0:72:8c:93:
01:f4:70:3c:3f:49:87:a3:0f:d6:95:31:dd:db:dc:2d:e1:08:
5d:f9:a2:a6:78:e7:dc:b4:a2:ab:20:33:1d:47:67:85:ee:c3:
c5:ee:20:33:52:50:63:be:ea:6a:76:41:89:04:fd:17:65:a4:
67:c4:1b:54:b7:8e:88:1c:34:7b:91:d0:c6:1f:91:34:f9:24:
7b:12:c6:60:0c:e9:b5:1f:e5:a6:3e:6b:cc:5e:72:37:f5:b4:
12:f4:e1:8e:ad:62:ec:8a:20:6c:c7:6b:84:e0:1a:7d:49:bc:
0f:57:82:19:b1:98:9c:64:32:61:cf:1b:49:0d:90:dd:88:91:
84:35:12:1f:5a:65:60:1f:47:fe:d9:72:61:ec:86:66:93:6d:
fb:71:3a:91:cd:26:bd:1d:99:8a:26:78:ba:03:fe:2a:ed:a3:
d7:0f:b5:e1:4e:e2:83:39:29:e7:92:13:d2:37:b2:30:c4:61:
a5:c1:e2:5f:1c:e4:5f:60:8d:58:50:6a:50:35:bc:74:d2:27:
bf:2f:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:58 2025 by rpki-client