Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dSnNqPoetCSl3W8Nb3jzUh1aP4U.roa
File: dSnNqPoetCSl3W8Nb3jzUh1aP4U.roa (raw, json)
Hash identifier: DUxR7VKxUlENt+zBO2BmUYJ8i1MpsqsH6WjTB4jTT+E=
Subject key identifier: 75:29:CD:A8:FA:1E:B4:24:A5:DD:6F:0D:6F:78:F3:52:1D:5A:3F:85
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194ACE5C46E988ABCB3A081F79AE53FAEE3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dSnNqPoetCSl3W8Nb3jzUh1aP4U.roa
Signing time: Tue 28 Jan 2025 12:32:06 +0000
ROA not before: Tue 28 Jan 2025 12:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204769
IP address blocks: 212.192.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 07:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:e5:c4:6e:98:8a:bc:b3:a0:81:f7:9a:e5:3f:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 12:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7529cda8fa1eb424a5dd6f0d6f78f3521d5a3f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:bc:d7:50:2c:4d:a7:88:4e:46:d4:82:bc:
6f:05:43:32:11:3c:73:5b:c2:4b:5a:7e:7a:11:87:
30:a0:ca:a6:22:ae:05:02:62:e0:2b:56:72:18:78:
e6:aa:5b:d0:a2:4a:5e:1d:a7:9e:ba:0b:4b:05:17:
10:e0:ac:03:84:7a:da:11:26:91:37:e1:0b:e4:96:
bc:10:cd:1e:13:c6:c3:1f:a8:10:9d:af:e6:e1:5e:
1b:c3:47:5b:74:3d:6a:a6:e8:18:ed:8d:23:f8:e1:
a9:3b:80:34:1b:a6:c3:3f:d4:fe:23:4d:db:c7:14:
3d:35:d7:c8:b7:84:04:51:57:7c:1f:ae:5d:2c:03:
97:a5:68:b0:8f:03:11:2f:4d:b3:3a:39:cf:2c:8d:
97:45:0d:48:4e:91:37:6a:5a:d4:d9:b8:10:72:46:
c7:06:ea:b5:27:6c:75:06:9b:87:31:8c:81:35:42:
e7:68:a2:ca:66:39:51:76:a6:44:42:0f:41:49:68:
b3:c5:67:20:05:99:5c:d5:d4:a7:aa:c8:bd:68:07:
bf:7a:be:9b:63:b4:86:5e:3a:f8:a2:30:9b:66:6e:
05:8f:11:e3:02:90:1f:1a:42:51:33:c1:75:26:66:
96:f8:92:8a:c4:9b:58:27:24:44:3f:b6:2b:19:c5:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:CD:A8:FA:1E:B4:24:A5:DD:6F:0D:6F:78:F3:52:1D:5A:3F:85
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dSnNqPoetCSl3W8Nb3jzUh1aP4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.213.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5b:b5:64:1c:f4:29:98:72:e9:db:33:f0:62:78:72:ed:3e:
8f:b9:78:cf:46:55:51:36:11:7b:64:e3:66:72:ad:d8:db:70:
d4:ed:a2:70:5b:f4:24:54:31:dc:42:04:5d:ec:6e:66:54:36:
eb:f0:35:b0:41:0e:80:92:ea:25:cf:4c:fd:67:52:ac:31:82:
ae:b7:8d:20:2b:99:08:7a:68:6a:5e:bf:65:c4:9b:00:60:aa:
45:22:33:27:a1:aa:ba:05:62:8f:15:bd:b7:4d:63:c4:5d:28:
8d:51:23:24:87:9a:b9:41:e7:58:72:ad:a3:9d:5d:eb:30:f6:
ea:42:b0:f6:60:b1:39:60:54:5a:56:1e:55:cd:eb:dc:31:7e:
ad:5b:59:22:0b:4a:91:33:da:fa:49:2b:ed:30:01:77:56:cb:
79:a5:2b:47:29:5b:5a:ab:41:b8:f4:6e:6e:22:59:bc:85:ae:
7e:be:76:a5:f2:70:9c:1c:5c:c2:9e:1d:7e:6e:56:13:21:dd:
e2:07:f6:2a:e5:7c:11:fd:89:e5:7a:f6:4b:1d:59:1f:5b:56:
3f:58:cc:c1:47:4a:82:31:93:fd:1d:ab:f8:2b:ff:c7:8b:16:
6e:a2:99:aa:97:52:af:44:c1:eb:97:e1:57:bc:4b:ff:b8:cf:
0b:a7:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:41 2025 by rpki-client