Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/JslR_i6OAWVZoleeYPrWrmS0vmA.roa
File: JslR_i6OAWVZoleeYPrWrmS0vmA.roa (raw, json)
Hash identifier: yTsCmGAZod3FNGZPHsswSzhYe05gs7LexbM46bFWlNA=
Subject key identifier: 26:C9:51:FE:2E:8E:01:65:59:A2:57:9E:60:FA:D6:AE:64:B4:BE:60
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AECF5784B29D6DD10CB713FE0E8D8859
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/JslR_i6OAWVZoleeYPrWrmS0vmA.roa
Signing time: Mon 21 Oct 2024 11:21:16 +0000
ROA not before: Mon 21 Oct 2024 11:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 212.49.131.0/24 maxlen: 24
212.49.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:cf:57:84:b2:9d:6d:d1:0c:b7:13:fe:0e:8d:88:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 11:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26c951fe2e8e016559a2579e60fad6ae64b4be60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:29:db:1f:63:9f:08:4b:87:2b:4b:1b:9d:99:
23:03:4f:bd:b0:97:ee:5b:b5:6b:79:39:f3:1b:9c:
f9:f8:53:9a:ec:39:2f:d6:b5:a5:e2:91:7e:98:21:
84:dd:46:a8:6d:2a:56:94:94:cb:68:20:54:cc:73:
e5:e5:11:1a:4d:a7:5c:1c:0b:fc:be:27:e9:ff:bd:
86:ee:f7:0d:51:17:98:aa:52:97:3a:c3:d7:e9:b0:
b7:dc:9a:77:1d:40:96:e7:46:cc:58:60:d8:25:0e:
e5:63:8e:33:2b:ae:f2:09:b0:ef:6c:19:3c:85:fa:
59:b9:e3:3d:31:93:0d:b0:83:94:d7:19:78:2f:a4:
4c:6c:b2:e4:13:3a:e9:48:3b:1e:9d:bb:2c:4b:88:
d5:fb:0d:0a:82:94:b6:94:38:f3:e5:7d:26:5f:7f:
c2:b7:cd:0c:11:c2:6d:d5:4b:5d:7a:3f:19:d5:b6:
a6:53:1c:f5:e3:10:0b:7c:e9:e2:1e:53:92:78:c0:
29:50:eb:02:bd:3c:d5:42:9b:72:80:e2:6b:e5:ee:
7d:36:dd:ad:66:07:d4:dc:97:06:8b:7e:d4:77:2e:
4f:e7:3f:34:37:6f:0d:7e:24:1b:a7:5b:d8:79:c8:
5b:e9:9a:e2:a5:3a:3e:d9:3b:a2:9f:71:37:0b:49:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:51:FE:2E:8E:01:65:59:A2:57:9E:60:FA:D6:AE:64:B4:BE:60
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/JslR_i6OAWVZoleeYPrWrmS0vmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.131.0/24
212.49.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b2:96:20:7a:87:6b:3b:85:71:e7:59:c3:71:25:c4:da:5d:
0d:a9:50:45:a0:53:3b:4c:37:d3:d8:ac:db:a5:28:1a:b1:3e:
7e:39:66:c6:32:29:c1:ac:6f:37:98:d0:3a:fd:68:b2:2f:82:
b2:6c:2e:8a:23:e9:3b:c3:7c:f6:02:68:8d:9f:18:1a:23:bf:
2e:ab:40:31:1b:54:72:fc:01:ce:43:d6:5b:c0:5e:a8:fd:1e:
ad:73:b8:66:c6:c6:3f:35:81:e9:9a:b4:3c:0b:0f:14:05:2b:
24:d1:73:e8:83:f1:c1:ea:15:29:85:a2:7c:06:00:86:d8:a6:
a1:9d:b0:f8:73:93:66:c6:20:a3:cb:61:9a:ba:f2:f6:1b:80:
54:fa:b2:3d:54:12:51:93:4a:8f:18:8f:e2:1a:23:20:99:d1:
a1:ad:8f:c4:76:c9:9d:16:65:4d:e4:64:b8:f1:ca:aa:b0:c1:
bc:e7:99:80:e4:4f:14:d2:93:a1:e6:c9:b2:59:4d:aa:56:20:
c8:51:8d:9c:72:4b:28:ca:d9:e1:6f:78:ec:eb:a2:c6:c7:e6:
ae:7c:e1:ce:51:c3:c1:cc:60:bd:4f:a5:16:69:a3:d3:96:b0:
85:f2:d4:47:61:49:60:e4:0e:89:1a:c8:5e:99:ac:20:ec:cf:
f0:7d:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:10 2025 by rpki-client