Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uf0bxKtLo-mY5azF9dyFKqeGYIc.roa
File: uf0bxKtLo-mY5azF9dyFKqeGYIc.roa (raw, json)
Hash identifier: vK8oLJRXOBWvnC+f9kWzsl+H1rOtyGboltyYfRofYbQ=
Subject key identifier: B9:FD:1B:C4:AB:4B:A3:E9:98:E5:AC:C5:F5:DC:85:2A:A7:86:60:87
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0194AC0A0AF89BC0F01E2CEE4D05912C7BB3
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uf0bxKtLo-mY5azF9dyFKqeGYIc.roa
Signing time: Tue 28 Jan 2025 08:32:06 +0000
ROA not before: Tue 28 Jan 2025 08:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 212.32.68.0/24 maxlen: 24
212.32.69.0/24 maxlen: 24
212.32.72.0/24 maxlen: 24
213.254.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 13:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:0a:0a:f8:9b:c0:f0:1e:2c:ee:4d:05:91:2c:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 28 08:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9fd1bc4ab4ba3e998e5acc5f5dc852aa7866087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:51:97:70:68:00:2e:87:d8:3d:6a:5b:7c:
3d:3b:c8:43:2d:3d:18:c3:4a:c6:4e:63:a5:2a:e5:
b5:ff:98:49:b3:b9:07:2d:04:4a:17:dd:89:94:06:
69:21:73:9e:53:10:3d:b2:54:c1:95:45:d3:f5:92:
bf:22:88:ff:79:fb:c3:ea:e2:3c:24:5b:f5:c3:6f:
ef:21:16:12:16:51:f9:15:be:75:19:21:7d:50:6a:
72:53:0e:48:e0:c6:72:51:9a:29:14:65:75:21:9a:
4e:40:f8:e3:e3:11:56:f5:05:16:e8:19:4f:73:49:
17:e8:e2:0b:91:5b:a2:0d:db:c7:3b:55:d2:bc:a8:
92:84:b9:63:ee:82:d9:46:72:4a:65:97:bd:63:21:
84:4a:b7:0c:f6:e5:18:cf:fd:9b:34:d2:a9:34:b8:
8a:81:06:58:78:01:13:22:c5:38:2d:ae:46:e0:62:
cd:42:9c:37:91:5e:f1:bf:ab:7d:ca:66:96:ec:d9:
77:08:21:28:be:29:ed:da:a2:e2:ae:f6:46:44:eb:
85:7b:63:a0:b7:2f:4d:c9:5d:a8:1b:af:c5:50:64:
bb:ba:b3:37:5f:ed:b7:9e:d6:84:92:6b:78:e8:f0:
f6:61:3c:c2:c6:90:3e:4b:c0:7d:9a:0e:43:e9:93:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:1B:C4:AB:4B:A3:E9:98:E5:AC:C5:F5:DC:85:2A:A7:86:60:87
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uf0bxKtLo-mY5azF9dyFKqeGYIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.68.0/23
212.32.72.0/24
213.254.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:93:9b:9e:fe:a5:40:39:0a:3d:f1:50:01:b5:12:e8:1c:34:
dc:5a:9b:84:23:15:e5:1f:ec:3a:25:6b:a8:2e:66:7f:f2:64:
05:57:ee:61:14:d5:45:94:22:87:39:89:85:42:c0:5e:9c:ca:
df:48:be:65:d2:84:87:fe:83:aa:40:56:e9:17:c3:8c:09:79:
7a:f5:5c:67:3c:27:31:f0:17:0f:59:cb:01:69:d5:54:3f:d4:
ed:be:d9:16:70:a2:7a:ac:13:3b:f8:63:81:89:22:0a:55:7e:
f8:2a:1c:5e:55:18:70:4b:29:78:32:60:40:48:c3:3c:15:d2:
9b:96:4e:ed:2e:50:a3:b0:92:72:ba:78:db:42:91:76:ba:c0:
fa:ae:55:3f:bb:bb:68:18:a1:75:92:37:1e:82:b8:24:b8:a3:
10:99:51:dd:e3:bb:ee:ad:67:6b:65:b4:c4:81:de:5b:b8:56:
e5:c7:40:c0:6d:6c:30:a0:e5:79:2a:b9:b4:3a:bb:a6:76:b0:
39:8b:6c:21:b9:bc:26:cd:b6:3b:b7:91:8a:56:8e:92:1f:ad:
14:4e:86:a5:0d:d8:80:47:88:13:6c:aa:ca:a3:ad:3e:d7:08:
48:bf:d0:a3:d0:b8:aa:28:91:dd:1f:35:19:85:aa:ee:76:ff:
38:b3:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:37:55 2025 by rpki-client