Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/8n_SAPQ_6SdgX2Lvwwe2_DpkCCo.roa
File: 8n_SAPQ_6SdgX2Lvwwe2_DpkCCo.roa (raw, json)
Hash identifier: aDOXGaO39W8UFhNFVSv4dkyP1zBJpk8NINXZFBQiFok=
Subject key identifier: F2:7F:D2:00:F4:3F:E9:27:60:5F:62:EF:C3:07:B6:FC:3A:64:08:2A
Certificate issuer: /CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Certificate serial: 019191574A6DACDB1E4A3602592B27E76084
Authority key identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/8n_SAPQ_6SdgX2Lvwwe2_DpkCCo.roa
Signing time: Tue 27 Aug 2024 00:58:22 +0000
ROA not before: Tue 27 Aug 2024 00:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12840
IP address blocks: 212.109.96.0/20 maxlen: 20
212.109.96.0/24 maxlen: 24
212.109.98.0/24 maxlen: 24
212.109.99.0/24 maxlen: 24
212.109.100.0/24 maxlen: 24
212.109.102.0/24 maxlen: 24
212.109.103.0/24 maxlen: 24
212.109.107.0/24 maxlen: 24
212.109.109.0/24 maxlen: 24
212.109.112.0/22 maxlen: 22
212.109.112.0/24 maxlen: 24
212.109.113.0/24 maxlen: 24
212.109.114.0/24 maxlen: 24
212.109.115.0/24 maxlen: 24
212.109.120.0/23 maxlen: 23
212.109.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 01:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:91:57:4a:6d:ac:db:1e:4a:36:02:59:2b:27:e7:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Validity
Not Before: Aug 27 00:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f27fd200f43fe927605f62efc307b6fc3a64082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:e8:a3:b8:5c:15:fd:ac:81:48:be:f8:6e:
07:27:af:e8:9a:4e:cf:64:f5:6e:6a:3a:5d:af:a2:
c1:bc:7b:8f:ee:fa:f8:ed:6c:a3:ae:91:a8:8c:15:
d5:f9:70:57:60:e2:d1:55:f5:5a:5f:f4:d7:16:3d:
e1:5c:f7:c8:73:7b:1e:37:58:39:fd:5f:f6:bd:ef:
69:a8:d4:0c:c4:2b:86:d1:93:5a:78:14:c8:5d:06:
27:55:4d:b4:52:5a:86:02:c8:5e:82:60:1d:2d:fa:
b2:ca:f7:02:14:10:a8:e8:9e:66:69:14:40:cb:cd:
d8:0e:e5:6c:0f:2d:59:72:55:1b:64:d8:27:5b:0a:
81:ff:d8:06:11:30:f5:bb:04:ea:27:37:98:84:7e:
74:45:e4:12:b2:1c:8e:74:11:69:96:3c:59:33:92:
5f:b3:02:3b:a9:9f:f8:a9:64:ab:10:7e:2e:27:75:
f2:71:6b:24:dd:04:4b:24:20:30:c5:f5:fb:4f:d7:
7d:43:af:c4:56:45:14:83:73:41:ad:88:21:98:4e:
50:c6:af:ee:79:90:a7:38:7a:c7:6e:1f:19:a3:a2:
cc:ff:9d:30:56:1b:ca:ef:49:ae:11:70:76:fd:10:
aa:33:e3:60:1d:cf:41:ed:27:9a:6e:42:7d:21:82:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:D2:00:F4:3F:E9:27:60:5F:62:EF:C3:07:B6:FC:3A:64:08:2A
X509v3 Authority Key Identifier:
keyid:68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/8n_SAPQ_6SdgX2Lvwwe2_DpkCCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.96.0-212.109.115.255
212.109.120.0/23
212.109.123.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ff:9d:14:0d:3c:1a:02:79:fa:69:47:0a:dc:42:33:78:5b:
af:e9:06:6b:be:04:11:45:d7:d5:5a:d4:1c:46:3e:7d:73:37:
76:6c:ac:ef:55:3c:6f:fa:bd:96:81:46:8f:9b:63:2e:04:d0:
95:cd:e4:0c:8c:d0:a4:d2:c4:06:cf:25:17:0b:73:b4:82:74:
81:4d:f7:93:08:48:70:ba:f6:92:54:bf:77:01:28:f6:e3:f3:
26:eb:49:cd:77:b4:98:d3:3c:cd:0e:2b:c5:fb:53:c2:46:88:
a0:09:ab:97:9a:4d:c9:55:5e:3c:e7:7b:ff:dd:98:fc:65:c1:
df:82:a0:5c:00:b8:04:8c:27:fd:cd:89:ed:a5:86:b8:43:20:
ff:3f:8b:57:b1:36:f2:f1:31:c7:6c:ca:cb:70:8e:3d:84:e9:
02:76:15:a0:2c:11:1e:f5:13:df:30:0e:65:b1:23:18:3d:cd:
2e:cf:10:e7:99:05:75:69:ab:eb:c3:d3:f2:05:8e:f4:12:86:
e3:22:8d:f4:a0:e8:93:76:41:2d:9c:86:6c:77:aa:1b:8a:f1:
d0:ca:0f:4d:e0:5f:c4:47:59:c8:7b:3d:d2:7c:3c:02:d8:f4:
4a:1d:fe:9b:6b:dd:12:3d:1c:a0:bf:a7:87:a2:85:31:5c:14:
db:98:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:46:22 2025 by rpki-client