Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lipDHmKh2GAegV3m3pxN-_xFAdA.roa
File: lipDHmKh2GAegV3m3pxN-_xFAdA.roa (raw, json)
Hash identifier: je7OuNRkFsL6B5FzsfeRi157snnDN81eXoP3e8gmH5A=
Subject key identifier: 96:2A:43:1E:62:A1:D8:60:1E:81:5D:E6:DE:9C:4D:FB:FC:45:01:D0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193D036CB7605F8E33A9CC1672D53F72640
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lipDHmKh2GAegV3m3pxN-_xFAdA.roa
Signing time: Mon 16 Dec 2024 16:04:32 +0000
ROA not before: Mon 16 Dec 2024 16:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214504
IP address blocks: 212.192.2.0/24 maxlen: 24
212.192.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:36:cb:76:05:f8:e3:3a:9c:c1:67:2d:53:f7:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 16 16:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=962a431e62a1d8601e815de6de9c4dfbfc4501d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:79:c3:a0:a1:03:3a:12:3f:c3:3c:09:3f:
f3:74:0f:0b:56:67:4d:c0:10:45:5c:03:03:6f:ab:
46:80:4f:4a:ee:88:b3:bd:cf:a7:21:fb:8f:6b:94:
e8:6f:64:b6:d5:4b:55:68:4b:e3:a0:1b:b8:54:da:
90:92:79:e5:b6:08:99:82:14:f0:b8:c5:28:46:60:
34:24:4d:cc:af:5d:aa:fa:b0:89:2f:87:6e:83:31:
a6:82:f9:8e:03:1e:e7:c1:90:1f:6a:30:ac:e2:a1:
59:ef:62:1d:5c:6a:2d:68:53:65:dd:27:56:18:39:
9a:c9:53:43:46:e1:10:79:be:8d:8f:4e:b2:ac:2a:
d8:86:ff:ce:2c:ef:cb:c8:30:dc:01:5a:6c:ab:fc:
77:8a:59:02:ac:a4:8e:1e:a0:00:f5:86:d4:06:83:
71:62:9d:18:3d:bd:40:3b:0e:25:da:80:25:96:71:
e8:a3:30:d4:1c:43:5c:2f:21:88:f7:fe:2c:6b:10:
ea:dc:c2:4f:e2:13:7c:cb:c2:66:63:f0:7f:6e:96:
74:70:6f:5c:4d:ed:6f:40:b3:6b:95:40:b1:41:e5:
86:dd:73:80:3f:55:fe:95:a4:e3:21:f0:bd:87:30:
3f:cb:01:f1:a8:94:b9:9e:1e:cf:00:0d:ad:6d:e1:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:43:1E:62:A1:D8:60:1E:81:5D:E6:DE:9C:4D:FB:FC:45:01:D0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lipDHmKh2GAegV3m3pxN-_xFAdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.2.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:eb:9c:bf:dd:27:99:69:06:4c:32:f5:28:51:b9:6d:3d:48:
13:ab:49:92:10:cc:c2:00:7a:01:50:32:b9:67:d5:47:94:66:
24:f2:73:68:dc:23:1c:d4:44:47:0f:55:78:7d:db:e1:15:80:
c3:e4:93:60:d3:20:9e:6c:5a:c0:c2:b2:06:0a:c8:1a:47:07:
ae:ae:4d:f5:6f:32:81:a0:0f:7f:25:d9:ca:82:fd:2f:a6:43:
b0:57:cd:b4:3c:75:90:f5:e1:be:84:29:c5:be:c0:45:99:ee:
0b:95:c7:9a:4b:2c:a2:c9:21:67:df:9c:20:79:7f:90:b3:e3:
49:20:4e:38:a2:fc:0e:46:f2:8a:3e:91:51:27:eb:e4:2c:bc:
c1:9e:4b:70:00:f6:7c:3e:88:94:a0:b2:45:cf:be:7a:b8:30:
fb:2a:ca:69:12:b7:62:f6:5f:bd:24:c8:19:21:f5:2c:9b:a0:
f9:95:9f:8f:37:5e:9f:f9:52:c3:e9:66:c2:2d:73:27:df:ab:
ec:f9:76:1a:6a:22:f7:42:14:27:49:d5:af:1b:65:7f:fe:6c:
f5:d2:82:d4:42:66:62:cd:ed:df:68:69:c5:21:33:97:6c:fb:
d9:48:fe:92:2f:66:46:56:15:bc:4e:c4:27:59:4e:39:78:53:
f8:57:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:17 2025 by rpki-client