Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4CdTlNNsVJnBCWD2lW1khBnjtZo.roa
File: 4CdTlNNsVJnBCWD2lW1khBnjtZo.roa (raw, json)
Hash identifier: YdgjWL5h7+nOqs3+IMj9iJq5UKsB1hgqDNYNNJFfdzI=
Subject key identifier: E0:27:53:94:D3:6C:54:99:C1:09:60:F6:95:6D:64:84:19:E3:B5:9A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193D9665AC32FE1994E41EF91D660F29AB3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4CdTlNNsVJnBCWD2lW1khBnjtZo.roa
Signing time: Wed 18 Dec 2024 10:53:03 +0000
ROA not before: Wed 18 Dec 2024 10:53:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 212.192.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:66:5a:c3:2f:e1:99:4e:41:ef:91:d6:60:f2:9a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 18 10:53:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0275394d36c5499c10960f6956d648419e3b59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:90:49:d4:01:0b:5c:59:95:1b:ac:de:7d:
a3:96:67:21:34:ed:67:a4:40:cc:49:e6:00:b2:0f:
8b:af:c4:57:98:82:b6:dc:3a:16:19:19:5c:37:86:
cd:80:38:73:c0:ef:75:9f:85:f7:a8:f3:c6:cd:ee:
b4:ff:87:e9:f9:d8:38:90:6c:14:ed:94:3e:c6:b2:
36:84:89:1c:da:0d:80:7a:a5:4b:ec:34:af:c4:c2:
a8:62:d4:ae:ae:9a:47:65:77:e5:34:25:9f:cb:41:
ee:5a:0a:39:35:c6:44:0a:2c:36:6d:61:76:09:90:
87:37:96:23:81:4f:21:b6:66:7d:5d:52:eb:f7:f7:
a2:a5:cf:5b:0d:c0:b8:da:43:9a:47:82:9b:fb:09:
8d:5b:78:54:4d:fe:e4:17:d6:67:0a:c7:03:c3:40:
1f:1c:2b:62:71:cb:33:9b:68:5c:5e:2f:c3:e0:54:
29:a2:1b:41:0f:eb:d3:59:8b:fc:e5:6a:c0:2c:58:
c8:47:9e:0f:14:c4:0f:27:7c:ed:b5:a8:4a:b8:20:
6e:5a:6c:69:6c:84:a4:78:d8:a8:72:bc:29:f2:ab:
82:f7:a4:64:ea:17:1f:e6:76:15:9a:5a:44:b3:a8:
c9:9b:9f:0e:ea:c4:7e:82:24:98:1b:0c:61:a4:7d:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:53:94:D3:6C:54:99:C1:09:60:F6:95:6D:64:84:19:E3:B5:9A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4CdTlNNsVJnBCWD2lW1khBnjtZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:4d:a2:f5:e2:24:eb:f9:28:50:c6:f3:df:64:01:1c:50:63:
b4:ea:e6:71:31:95:58:26:b6:fd:56:1d:2b:e7:98:ca:a2:6c:
f0:07:4d:9e:0e:69:2e:72:51:a7:ae:74:fb:cb:93:bf:ed:29:
73:92:3f:27:ee:d3:52:da:2c:25:2e:ca:31:7a:1f:86:33:ed:
b6:68:53:0b:33:69:d9:d8:53:c3:9a:fd:c0:c6:54:ee:f2:b3:
89:c5:b7:f0:40:39:da:f1:a8:c5:6e:d6:13:92:b0:ba:73:8b:
07:d4:32:89:cf:32:97:cd:b6:3e:52:71:de:ad:3d:f0:fb:68:
9a:eb:92:25:df:c7:1e:d9:37:9d:7f:f9:b8:97:9b:94:1f:47:
10:ae:5d:a0:55:21:23:76:7f:4d:db:57:4a:9f:1b:40:e5:a3:
e6:56:2a:a5:39:f8:a7:c1:b1:25:3f:67:f3:36:bb:35:53:a6:
c4:11:51:03:d0:27:56:47:6f:59:89:df:cf:09:6a:1b:5e:be:
bf:d3:a7:3b:1f:c0:50:21:a7:e8:0d:7e:86:58:82:85:d4:18:
3b:8e:15:33:79:68:45:45:db:6e:13:51:3b:d2:92:bc:b3:46:
30:72:cf:81:77:c6:f4:8d:35:80:58:28:75:c8:f7:04:69:3f:
3d:3e:12:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:17 2025 by rpki-client