Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/CxHFNNst-fYaR8fRzk38-LASvFg.roa
File: CxHFNNst-fYaR8fRzk38-LASvFg.roa (raw, json)
Hash identifier: eFpYT1vX9w1jfJ8Gl+XViZB2SVuU62tpD/Ib3mYe2zo=
Subject key identifier: 0B:11:C5:34:DB:2D:F9:F6:1A:47:C7:D1:CE:4D:FC:F8:B0:12:BC:58
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73110C8F1EAD1E8D9D4F8D70ADAB2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/CxHFNNst-fYaR8fRzk38-LASvFg.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16071
IP address blocks: 212.234.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:31:10:c8:f1:ea:d1:e8:d9:d4:f8:d7:0a:da:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b11c534db2df9f61a47c7d1ce4dfcf8b012bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:af:bb:f1:a4:18:48:40:d7:90:8f:ba:a8:
6c:49:e7:41:1f:47:ab:6e:65:0f:c6:9f:75:ee:f6:
4e:bf:e6:2a:9d:6d:4c:93:e6:b0:a1:38:9b:4a:6f:
eb:2f:e5:e4:13:21:9f:ff:93:4f:68:5f:24:55:d7:
d4:b4:cf:9c:49:9d:ea:00:2f:a1:1d:e1:00:a6:6b:
4b:e3:9b:d0:7f:f8:86:75:79:93:9d:eb:7b:3a:d0:
59:73:8f:07:81:9f:f4:fe:7e:f4:73:a9:16:44:0e:
83:56:15:b6:0d:45:e5:b2:eb:5f:cd:97:a1:a3:2d:
65:9b:6b:b0:1d:89:59:a1:10:cf:49:cd:3e:81:bd:
f7:84:f4:29:62:bc:58:fd:c0:c6:a1:1e:7f:1a:83:
8a:07:ad:ab:28:34:e7:19:00:1f:02:48:a9:fc:6d:
8b:b4:0e:7f:ee:b5:b1:07:93:42:af:7a:1b:31:13:
91:ef:6c:c4:48:2b:e7:9f:98:c9:3a:f6:bc:c5:37:
e6:44:a7:06:7b:b4:01:85:6d:b0:92:32:17:20:31:
83:97:ec:6f:c8:f6:59:f9:c5:1e:de:ec:cb:ac:a9:
65:8f:79:49:1e:5c:51:f4:f9:77:9f:47:f4:ab:62:
0d:81:a6:18:2a:77:97:11:9d:17:b3:11:37:a0:57:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:C5:34:DB:2D:F9:F6:1A:47:C7:D1:CE:4D:FC:F8:B0:12:BC:58
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/CxHFNNst-fYaR8fRzk38-LASvFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:48:4c:df:32:2d:b5:3f:c0:5d:48:b2:1f:2f:db:e7:5c:c9:
a9:54:36:1f:8a:ce:47:29:18:07:84:13:34:b5:f3:82:1a:dd:
d5:a7:ec:20:6a:54:84:bf:ea:ff:0a:47:4f:1a:09:b1:f6:e7:
9a:f3:25:71:17:d7:f7:73:39:a7:1d:56:83:1e:a3:03:12:af:
22:40:86:3b:a9:d3:1c:70:4b:8f:7d:66:f0:bb:25:94:0b:07:
fa:6b:5d:27:4c:74:38:9a:0a:05:64:34:ba:e1:a9:59:de:4d:
a8:5f:1b:db:95:94:b5:ce:a1:d4:cd:58:2c:5f:fa:28:32:0e:
93:22:cb:e8:5c:5d:2e:9f:23:25:2f:2a:41:6f:2a:21:e3:01:
ae:bf:41:78:77:48:cd:c6:ee:f1:1b:b9:60:37:37:7f:f9:d1:
ff:20:73:9e:0a:f4:86:8a:ca:56:d9:2a:86:83:3e:50:89:b0:
46:5a:8c:c4:98:a8:f8:a9:c6:bc:29:c6:c1:de:bb:0b:f1:5b:
81:47:9a:a0:02:1e:8f:29:db:38:d6:5a:4f:63:72:f2:59:9d:
a0:ee:51:d1:46:ba:84:5d:f0:4d:12:08:d5:e1:27:53:0c:63:
e4:7e:4d:0e:27:85:81:e6:9d:f0:c2:ab:d5:0f:97:aa:d4:5e:
53:83:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:46 2025 by rpki-client