Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Re2JkfDBO9wgl_TqoUrVCS0JUHY.roa
File: Re2JkfDBO9wgl_TqoUrVCS0JUHY.roa (raw, json)
Hash identifier: I3d4gTloO/Pysc4eq0XgVmfsZJ6L2mrrJDh1bnejjA4=
Subject key identifier: 45:ED:89:91:F0:C1:3B:DC:20:97:F4:EA:A1:4A:D5:09:2D:09:50:76
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193CF4E1A9B1A781EF0CECE7659B34E2DC6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Re2JkfDBO9wgl_TqoUrVCS0JUHY.roa
Signing time: Mon 16 Dec 2024 11:50:22 +0000
ROA not before: Mon 16 Dec 2024 11:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210715
IP address blocks: 212.192.28.0/24 maxlen: 24
212.192.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:4e:1a:9b:1a:78:1e:f0:ce:ce:76:59:b3:4e:2d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 16 11:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45ed8991f0c13bdc2097f4eaa14ad5092d095076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:29:40:1e:cb:d3:6f:29:f4:6d:7f:d1:ed:
ea:79:56:68:f9:1a:d8:c6:c7:1d:7e:b5:68:e4:55:
f9:00:ab:69:e2:4d:eb:be:78:56:68:4d:eb:8a:a4:
7a:13:d4:70:2f:8e:0c:6f:a1:e8:83:2f:fd:cb:f2:
36:4c:de:77:b4:fe:20:20:a5:0c:79:09:84:05:7a:
d7:b6:e7:f2:c3:a7:8c:18:15:b3:9b:f2:64:b1:1b:
01:17:59:36:e3:f3:fc:54:eb:41:a2:c9:c8:d0:1b:
e2:91:b7:ab:a3:d6:70:6e:0b:4b:f7:ef:d4:e3:0d:
bc:ec:57:ac:6e:ba:37:25:9c:f3:38:72:9d:97:cb:
fc:fa:9c:8d:99:81:ae:ca:7e:1b:77:43:6f:58:0a:
50:7e:3e:26:8e:2e:23:2a:05:f2:9c:b4:e1:19:e7:
08:6f:d8:35:1d:b2:bb:f3:e7:a5:90:89:8a:31:04:
30:bc:91:0a:b6:b1:66:a8:07:a0:4a:a9:5a:dc:b2:
1a:62:44:e2:9d:67:96:fa:6c:c9:28:83:8e:32:4a:
68:c4:ca:b6:1c:3e:26:47:20:d9:cd:0e:30:a6:fc:
ce:a3:40:b2:64:14:bf:5f:07:86:55:8a:61:1a:95:
19:39:48:6e:c2:e3:12:ac:b5:50:1d:1c:ba:86:52:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:ED:89:91:F0:C1:3B:DC:20:97:F4:EA:A1:4A:D5:09:2D:09:50:76
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Re2JkfDBO9wgl_TqoUrVCS0JUHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.28.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:47:ca:37:2e:14:8b:f2:5f:ca:a2:32:d7:fa:71:86:bc:9e:
01:e5:f6:cd:05:cd:42:49:25:18:87:d1:4c:36:b0:be:11:ed:
54:07:cf:27:5a:ea:cf:3d:ff:7d:03:72:49:1b:8a:91:ad:1e:
00:f1:95:5f:81:45:d2:a9:c1:b1:60:8e:2d:33:0e:6a:59:b9:
86:b5:fe:1d:19:0c:8e:21:d1:1c:e4:b4:26:40:29:e3:be:c0:
d0:c6:62:77:bc:4f:de:fe:70:92:33:f9:65:86:6a:58:c1:4d:
6a:4b:68:58:e9:d6:ff:69:ad:90:7a:1f:a5:bd:4f:41:04:20:
30:eb:a6:e6:78:f2:19:2a:b0:6e:d1:93:18:d9:87:59:99:60:
e5:5b:f4:b3:04:1b:86:e1:c0:64:10:4b:bf:ad:27:0f:23:cc:
ee:8b:48:fc:04:63:95:2c:c0:da:42:41:fe:95:3b:1f:15:b8:
f2:0f:97:c2:17:fa:ab:3b:39:39:9f:5e:89:fe:b7:dc:05:33:
e7:88:a7:75:0a:6d:18:43:b6:d7:61:5f:11:a5:4e:19:1a:a3:
a4:d5:e3:f9:a8:3d:2e:49:51:74:5c:01:a3:03:a9:d2:cf:ab:
d6:8c:09:34:7d:21:90:35:dc:50:80:2e:79:5e:10:f8:4f:45:
db:b7:3d:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPPThqbGnge8M7OdlmzTi3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMjE2MTE1MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVkODk5MWYwYzEzYmRjMjA5N2Y0ZWFhMTRhZDUwOTJkMDk1MDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMApQB7L028p9G1/0e3qeVZo+RrY
xscdfrVo5FX5AKtp4k3rvnhWaE3riqR6E9RwL44Mb6Hogy/9y/I2TN53tP4gIKUM
eQmEBXrXtufyw6eMGBWzm/JksRsBF1k24/P8VOtBosnI0Bvikbero9ZwbgtL9+/U
4w287Fesbro3JZzzOHKdl8v8+pyNmYGuyn4bd0NvWApQfj4mji4jKgXynLThGecI
b9g1HbK78+elkImKMQQwvJEKtrFmqAegSqla3LIaYkTinWeW+mzJKIOOMkpoxMq2
HD4mRyDZzQ4wpvzOo0CyZBS/XweGVYphGpUZOUhuwuMSrLVQHRy6hlKxDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXtiZHwwTvcIJf06qFK1QktCVB2MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvUmUySmtmREJPOXdnbF9UcW9VclZDUzBKVUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1MAcMA0G
CSqGSIb3DQEBCwUAA4IBAQBbR8o3LhSL8l/KojLX+nGGvJ4B5fbNBc1CSSUYh9FM
NrC+Ee1UB88nWurPPf99A3JJG4qRrR4A8ZVfgUXSqcGxYI4tMw5qWbmGtf4dGQyO
IdEc5LQmQCnjvsDQxmJ3vE/e/nCSM/llhmpYwU1qS2hY6db/aa2Qeh+lvU9BBCAw
66bmePIZKrBu0ZMY2YdZmWDlW/SzBBuG4cBkEEu/rScPI8zui0j8BGOVLMDaQkH+
lTsfFbjyD5fCF/qrOzk5n16J/rfcBTPniKd1Cm0YQ7bXYV8RpU4ZGqOk1eP5qD0u
SVF0XAGjA6nSz6vWjAk0fSGQNdxQgC55XhD4T0Xbtz1H
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:45 2025 by rpki-client