Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UknPJYyi-7g2GWpWpsf0EZk2Xg.roa
File: 4UknPJYyi-7g2GWpWpsf0EZk2Xg.roa (raw, json)
Hash identifier: oyPnhiblHGg6XW8hgilK5cBiyDNloW0V/Mjs/qrI918=
Subject key identifier: E1:49:27:3C:96:32:8B:EE:E0:D8:65:A9:5A:9B:1F:D0:46:64:D9:78
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193CF4F061F16EFD497CEDC2FEB5DE6A0F6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UknPJYyi-7g2GWpWpsf0EZk2Xg.roa
Signing time: Mon 16 Dec 2024 11:51:22 +0000
ROA not before: Mon 16 Dec 2024 11:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 212.192.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:4f:06:1f:16:ef:d4:97:ce:dc:2f:eb:5d:e6:a0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 16 11:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e149273c96328beee0d865a95a9b1fd04664d978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:0e:9e:11:5f:87:f1:5b:a9:2f:96:1b:0b:
49:fa:a1:29:ee:cd:62:11:6b:8d:1b:0f:41:ec:3b:
be:f4:d6:8b:81:6f:06:5b:21:24:bc:5e:22:a4:ae:
ed:b1:88:1b:e6:6f:cb:7e:46:a0:95:4d:02:47:23:
14:ab:51:aa:c0:a6:62:2b:b1:6a:c6:3e:8c:1f:d3:
1c:be:25:2b:5d:02:0c:35:fb:a6:1a:bb:3f:85:06:
bf:b0:58:dc:28:4d:36:68:21:9a:21:91:f0:7a:46:
4d:7c:9f:91:3b:a5:3d:cb:5a:06:82:96:38:92:d3:
54:77:7e:18:6f:4e:05:c0:fb:1b:5c:4b:91:5f:44:
f0:d8:c7:37:31:5d:f3:f4:dd:a1:49:0c:98:81:d3:
48:bc:7d:7e:bd:52:bc:de:90:c0:8a:1c:1d:4a:a1:
9d:ae:bd:ac:da:54:6b:21:8a:81:4b:e8:16:45:8a:
5b:50:bb:eb:8f:9a:66:f0:c2:52:20:20:b0:e3:f0:
6a:6f:d4:7e:58:c7:0f:da:12:b0:c2:e2:47:64:0e:
e4:5f:7f:8c:e7:20:d2:8e:66:8a:ae:91:1c:e7:09:
bd:cb:1a:a9:64:61:16:63:9a:3a:ca:ad:84:26:05:
4b:76:f6:96:87:49:10:51:4b:72:e7:26:31:d6:43:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:49:27:3C:96:32:8B:EE:E0:D8:65:A9:5A:9B:1F:D0:46:64:D9:78
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4UknPJYyi-7g2GWpWpsf0EZk2Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
85:00:db:30:1b:ae:b2:ad:e8:83:91:d0:ab:70:01:d3:21:6c:
b6:c6:59:fc:ab:63:70:9f:a4:35:58:62:58:e5:12:af:bf:0e:
48:4f:b8:78:4e:54:f0:bd:1a:cb:08:c3:5f:2c:2e:84:f0:b4:
19:1f:68:eb:ae:a0:fa:22:34:98:c3:56:43:b4:26:7b:65:f1:
ed:25:77:bf:41:64:ba:7c:4e:91:48:e1:49:a5:7c:58:c5:f8:
dd:3b:21:03:a9:68:9c:e8:25:9e:f9:00:b9:5a:83:f3:ca:fd:
01:90:37:b7:0b:ef:3c:d1:fd:de:92:bd:a5:8f:29:69:ff:b9:
94:09:29:09:39:bc:bc:83:02:ed:1e:2c:23:bc:e7:61:40:5b:
61:b4:1c:22:63:88:13:07:a7:65:c0:4f:6f:b2:d0:d4:0a:2f:
c5:9b:55:35:b8:ac:19:8d:3e:2f:21:eb:ba:33:ee:56:af:e5:
0b:da:b1:6d:5c:cf:8f:a6:09:c6:16:fc:99:31:a9:7a:36:38:
21:85:a3:2f:ba:b8:9a:12:06:29:f7:d3:b4:4b:99:1d:4f:b3:
fb:84:21:24:40:59:05:8d:30:ec:f9:ee:96:18:4a:6f:f6:d9:
3b:f4:d4:01:6f:1e:71:a8:b5:24:ba:4b:92:f0:a0:47:d3:88:
d3:a0:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:24 2025 by rpki-client