Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/iCX7z_b0Pxcw5OOkMBx9BM4ylqg.roa
File: iCX7z_b0Pxcw5OOkMBx9BM4ylqg.roa (raw, json)
Hash identifier: yhgqe4s5EZogDDjSoStci/YGBnnzq+Y9Ar5KWLv+1+M=
Subject key identifier: 88:25:FB:CF:F6:F4:3F:17:30:E4:E3:A4:30:1C:7D:04:CE:32:96:A8
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 018D5EE62F3F5DF1DDFEB5A5C2B969EC410C
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/iCX7z_b0Pxcw5OOkMBx9BM4ylqg.roa
Signing time: Wed 31 Jan 2024 09:42:39 +0000
ROA not before: Wed 31 Jan 2024 09:42:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12822
IP address blocks: 212.108.160.0/20 maxlen: 20
212.108.176.0/21 maxlen: 21
212.108.184.0/21 maxlen: 21
2a02:358::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:e6:2f:3f:5d:f1:dd:fe:b5:a5:c2:b9:69:ec:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Jan 31 09:42:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8825fbcff6f43f1730e4e3a4301c7d04ce3296a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:68:dd:cd:5c:da:cc:c5:24:f8:4e:7c:9e:
fa:ab:d4:d0:a5:f6:7b:de:03:df:2c:e6:03:0c:ab:
6e:84:12:03:07:27:1a:48:ec:fa:82:c0:af:e9:d7:
a7:ef:96:ea:a0:ae:cf:5c:3b:22:ff:e5:4d:96:5c:
ca:4f:c5:46:6c:8b:bc:2e:d3:86:83:7a:67:c0:d3:
dd:18:12:bb:e1:8d:99:e1:57:c4:fe:f3:f5:17:45:
98:0f:2d:05:48:ce:74:c7:f0:64:96:86:db:72:3c:
1f:bc:3b:da:90:81:e1:24:a4:e8:d0:d8:3e:f0:c9:
23:52:9d:4a:fb:f7:32:6b:68:9d:ac:65:ef:c3:ee:
b8:d7:fc:04:55:48:56:78:fb:5f:40:ee:de:84:5a:
f8:74:75:2f:25:09:87:40:a3:be:5b:ae:63:9d:92:
a2:9e:4e:f7:c9:c4:b5:34:7d:09:df:7a:6c:e0:d4:
77:59:24:f0:fd:1b:20:3c:07:52:d5:36:e6:59:fd:
50:8a:c7:e4:de:8f:6f:a3:72:42:00:54:5d:9b:bb:
ce:b0:db:94:59:b8:75:f7:92:57:fb:d0:90:ad:59:
b1:6c:1c:7d:fd:69:9c:04:34:81:e8:9c:32:af:16:
ae:61:8e:5c:a7:8d:5d:4a:d6:14:30:17:30:ed:7f:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:FB:CF:F6:F4:3F:17:30:E4:E3:A4:30:1C:7D:04:CE:32:96:A8
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/iCX7z_b0Pxcw5OOkMBx9BM4ylqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.160.0/19
IPv6:
2a02:358::/32
Signature Algorithm: sha256WithRSAEncryption
4c:61:4c:9b:e8:e9:d3:59:3b:76:36:27:92:9e:fb:73:4b:a2:
bf:2b:9f:d2:28:17:72:07:51:ac:ca:b2:57:b5:9b:f1:66:a6:
32:93:ae:85:11:ae:f8:1d:8b:a6:7b:85:e6:4a:45:d8:0c:25:
8f:35:55:2e:0d:36:a5:c0:20:65:e1:6f:50:90:3e:44:a3:ae:
c9:ed:c3:ef:78:47:87:75:6d:44:49:19:04:82:53:a2:b2:c6:
7e:c2:cd:8c:9a:66:1d:54:1c:41:83:2c:ee:d4:24:3d:e0:29:
fa:f6:93:b4:38:82:81:80:fb:f2:d1:a7:27:45:a2:ed:7b:a6:
c9:ee:9d:f3:a4:a2:ee:cd:98:d9:09:65:96:3a:04:e9:14:33:
eb:00:50:50:41:65:34:34:19:27:f9:59:0d:a1:14:04:0e:ff:
69:5e:b5:2c:7c:3f:43:de:1f:77:46:d5:67:aa:b3:d3:c5:b6:
87:70:a7:df:67:ba:39:89:4b:17:6c:90:a8:62:0a:ed:f3:7a:
2c:05:ff:30:6e:ac:5b:d6:58:87:8f:b5:b2:63:24:ec:da:57:
e4:55:f7:64:91:c1:9b:0d:3f:14:30:a8:42:c8:10:2d:7c:b1:
7e:d6:63:2f:45:d8:f1:e2:29:0e:ab:71:57:81:dc:76:73:8b:
b9:b6:26:75
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY1e5i8/XfHd/rWlwrlp7EEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MDE5MGJkZmIwYTNmMjNiNDQxMWU3ZDc0OGVkZGJiZDA5
Zjg1NDYwHhcNMjQwMTMxMDk0MjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODI1ZmJjZmY2ZjQzZjE3MzBlNGUzYTQzMDFjN2QwNGNlMzI5NmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0Bo3c1c2szFJPhOfJ76q9TQpfZ7
3gPfLOYDDKtuhBIDBycaSOz6gsCv6den75bqoK7PXDsi/+VNllzKT8VGbIu8LtOG
g3pnwNPdGBK74Y2Z4VfE/vP1F0WYDy0FSM50x/BklobbcjwfvDvakIHhJKTo0Ng+
8MkjUp1K+/cya2idrGXvw+641/wEVUhWePtfQO7ehFr4dHUvJQmHQKO+W65jnZKi
nk73ycS1NH0J33ps4NR3WSTw/RsgPAdS1TbmWf1Qisfk3o9vo3JCAFRdm7vOsNuU
Wbh195JX+9CQrVmxbBx9/WmcBDSB6JwyrxauYY5cp41dStYUMBcw7X8t6wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIgl+8/29D8XMOTjpDAcfQTOMpaoMB8GA1UdIwQY
MBaAFFYBkL37Cj8jtEEefXSO3bvQn4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMt
MmI5ZmM0MWUwYTgwLzEvaUNYN3pfYjBQeGN3NU9Pa01CeDlCTTR5bHFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMtMmI5ZmM0MWUwYTgw
LzEvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1GygMA0E
AgACMAcDBQAqAgNYMA0GCSqGSIb3DQEBCwUAA4IBAQBMYUyb6OnTWTt2NieSnvtz
S6K/K5/SKBdyB1GsyrJXtZvxZqYyk66FEa74HYume4XmSkXYDCWPNVUuDTalwCBl
4W9QkD5Eo67J7cPveEeHdW1ESRkEglOissZ+ws2MmmYdVBxBgyzu1CQ94Cn69pO0
OIKBgPvy0acnRaLte6bJ7p3zpKLuzZjZCWWWOgTpFDPrAFBQQWU0NBkn+VkNoRQE
Dv9pXrUsfD9D3h93RtVnqrPTxbaHcKffZ7o5iUsXbJCoYgrt83osBf8wbqxb1liH
j7WyYyTs2lfkVfdkkcGbDT8UMKhCyBAtfLF+1mMvRdjx4ikOq3FXgdx2c4u5tiZ1
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:08 2025 by rpki-client