Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y74w4AvaGq9zucov14mBqRD9eUk.roa
File: Y74w4AvaGq9zucov14mBqRD9eUk.roa (raw, json)
Hash identifier: mQnGQ01jpyczt4zNWhJrQSujUuWDwJsTzST3kAND4ao=
Subject key identifier: 63:BE:30:E0:0B:DA:1A:AF:73:B9:CA:2F:D7:89:81:A9:10:FD:79:49
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193CF52B129BEAA40D78AD6203D66D4A2EB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y74w4AvaGq9zucov14mBqRD9eUk.roa
Signing time: Mon 16 Dec 2024 11:55:23 +0000
ROA not before: Mon 16 Dec 2024 11:55:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214172
IP address blocks: 212.192.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:52:b1:29:be:aa:40:d7:8a:d6:20:3d:66:d4:a2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 16 11:55:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63be30e00bda1aaf73b9ca2fd78981a910fd7949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:4d:fa:cc:fb:4e:de:7a:7a:8f:3c:21:39:
9c:df:ce:59:48:e0:f4:9f:78:01:7c:f5:22:3d:5c:
9a:b4:33:d5:9a:b6:64:e7:a9:e7:8f:90:76:b9:3c:
75:e6:6e:af:61:37:9c:2c:2e:14:e1:39:b0:cd:ce:
84:8e:44:e6:66:11:2d:8b:cc:a6:8d:b4:f2:d6:1a:
bf:3a:c6:c7:c1:2a:bb:33:e2:d1:11:d8:9d:fa:9a:
e2:f8:f8:12:9a:f5:68:bf:75:b0:04:52:e5:83:68:
ea:9c:90:21:14:99:e5:b9:60:45:69:69:7c:e5:b1:
db:4c:da:9d:b1:d5:dc:25:7c:fe:7f:62:9c:1d:b2:
ae:df:cb:93:70:44:0e:bd:50:b1:5c:8a:67:33:94:
b8:9d:41:32:69:2e:c9:e5:db:9e:bb:d3:3c:6e:20:
40:94:75:78:5a:7c:30:d8:c3:b2:14:b0:c2:2d:00:
7e:5b:ac:c7:38:81:b2:8d:b2:f8:0d:61:a6:ac:e0:
ff:85:15:ae:ae:8f:d9:5c:02:d4:a5:90:4c:9e:f9:
9c:f1:77:76:43:a6:8f:69:a0:33:cf:08:17:37:da:
62:e1:0f:cb:78:0e:f7:a3:92:36:80:dc:4a:5c:2f:
10:54:dd:85:52:a5:af:ff:16:15:3e:e9:64:88:be:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:30:E0:0B:DA:1A:AF:73:B9:CA:2F:D7:89:81:A9:10:FD:79:49
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y74w4AvaGq9zucov14mBqRD9eUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.4.0/24
Signature Algorithm: sha256WithRSAEncryption
00:47:62:3c:b0:8a:48:7b:da:79:1c:df:51:31:c0:12:78:ed:
88:64:60:9c:7a:87:99:09:25:54:e5:44:9d:8b:a1:a0:01:63:
ab:36:0f:92:e9:8e:c2:02:b5:26:cb:0f:fc:4f:1e:e5:68:13:
96:8f:3d:40:e7:9c:ca:9c:8c:1f:9b:0d:1b:ac:38:84:d2:bd:
91:7c:90:92:80:7f:ba:a3:50:d2:58:7d:9d:b5:66:74:a5:c8:
e5:16:26:92:14:4f:a0:8c:a3:20:03:12:dc:f8:65:40:90:44:
50:63:75:cf:14:b1:ff:ed:ab:2e:3c:50:8d:1b:31:08:64:ca:
d6:cf:7f:9d:91:e3:05:3b:79:87:aa:40:38:cd:7a:12:b1:b1:
01:b7:43:e8:a8:64:82:eb:aa:7c:f9:f3:88:af:61:9e:22:cf:
0a:cc:e3:1b:6e:c0:b4:e0:05:b9:02:64:ca:70:43:24:8d:68:
99:18:0f:67:b8:c1:59:ff:25:9e:28:74:e0:58:f4:1c:e0:84:
5d:8e:85:fe:14:4f:3d:2e:0a:06:ae:4b:a6:00:a1:16:f2:32:
77:c8:be:fd:61:71:5c:39:0c:9c:0a:22:ff:66:2d:29:b1:ca:
f1:a0:0f:ae:ab:ed:e3:6a:92:1e:ec:d1:32:a7:33:07:27:65:
c3:4c:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:43 2025 by rpki-client