Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PoZXo8f6tvU-n7T5hz3rgHCaZG4.roa
File: PoZXo8f6tvU-n7T5hz3rgHCaZG4.roa (raw, json)
Hash identifier: Clt45//+RrkY2OCFydPsV9S7Opr8Mf547Q9mGZRBMs8=
Subject key identifier: 3E:86:57:A3:C7:FA:B6:F5:3E:9F:B4:F9:87:3D:EB:80:70:9A:64:6E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193CF51C717089BD3A39092C05D28AAAC89
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PoZXo8f6tvU-n7T5hz3rgHCaZG4.roa
Signing time: Mon 16 Dec 2024 11:54:23 +0000
ROA not before: Mon 16 Dec 2024 11:54:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214238
IP address blocks: 212.192.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:51:c7:17:08:9b:d3:a3:90:92:c0:5d:28:aa:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 16 11:54:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e8657a3c7fab6f53e9fb4f9873deb80709a646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:a0:93:38:64:ae:83:e7:c4:8f:6a:f2:44:
e6:a6:cb:69:a5:4e:16:3d:12:f9:bf:f1:62:c1:01:
16:58:5b:fe:22:69:d7:47:ff:22:4e:52:88:cc:50:
3d:4f:b2:66:02:23:01:18:79:fc:4e:10:ae:0c:6b:
4f:27:90:ff:a8:89:80:99:00:41:3b:fc:a5:4d:4f:
b3:f8:33:9c:bc:3e:e4:f2:9e:90:6d:05:18:5f:d9:
ce:42:5d:4e:da:64:e7:6c:39:ce:24:d8:d3:89:b0:
c8:1b:88:f6:52:fb:b0:d0:75:52:94:04:55:44:e0:
60:df:0f:a7:d5:c7:b9:b5:49:41:54:08:ac:f4:99:
1a:22:ad:7b:56:c8:a1:f0:d7:4a:73:80:9b:14:06:
ee:2f:33:d2:ed:a3:65:23:6b:de:9f:7d:2d:0b:8d:
6e:4b:1f:9e:78:3a:ca:ba:10:57:04:f5:21:f8:07:
f5:84:f3:9d:0c:01:03:f2:8b:38:4f:2a:06:a4:8e:
f0:ac:23:85:a3:1e:0d:43:e3:8e:7a:89:3b:5f:20:
28:bf:4d:e7:74:8a:e4:04:e7:1e:ac:d4:1a:a0:b8:
6c:da:2e:36:38:32:26:1f:32:59:88:5c:46:85:ea:
28:e4:b9:6b:f1:f5:e8:ae:1d:c5:5b:7a:88:bc:3e:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:57:A3:C7:FA:B6:F5:3E:9F:B4:F9:87:3D:EB:80:70:9A:64:6E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PoZXo8f6tvU-n7T5hz3rgHCaZG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
64:84:4d:09:9e:79:a7:0b:fc:56:7f:3f:8e:a2:d8:e4:73:a9:
52:44:14:b2:23:34:55:2a:e4:0c:a9:0a:8b:6a:33:0e:56:c5:
f9:3c:c5:b5:9d:03:31:24:4a:f5:74:a8:91:55:cb:43:6d:84:
0e:6c:e3:cf:f3:57:64:b4:74:a2:99:28:b3:23:0a:60:d5:18:
85:14:00:36:8a:48:0b:e5:47:80:d7:3d:62:61:3a:e1:e3:c8:
50:ad:f2:b3:d9:5e:0b:3e:93:8c:fb:3f:e4:e3:0e:bf:50:28:
dc:b6:db:7a:62:c3:63:9b:76:3c:b6:59:45:03:32:49:d4:4b:
a9:a9:65:a7:7b:ec:66:45:0e:3b:28:9f:a1:bc:92:70:a1:12:
f7:42:79:06:e1:e9:09:7b:c4:aa:63:d6:aa:66:3f:62:ee:cc:
b8:91:4f:89:0e:98:4a:d2:b9:82:1f:26:02:14:68:29:45:a6:
b7:e2:76:bf:5e:46:97:c3:cc:a5:fc:34:7a:a1:52:f7:8a:31:
37:f2:3c:36:a1:cb:a0:fe:97:6b:af:21:12:45:10:41:00:cd:
e3:3a:f4:6a:98:92:2e:56:a9:61:dc:90:1b:78:93:93:3a:6e:
de:c0:6d:5e:7d:af:68:95:5b:c1:7d:40:81:87:b7:ab:65:8a:
bd:91:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client