Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/afSLZ_ZPSQ5BfZySxNYx_V_quSk.roa
File: afSLZ_ZPSQ5BfZySxNYx_V_quSk.roa (raw, json)
Hash identifier: DRZw2wTUU/O2ZNGwlBssY4r61pzZy+o6RyujGEDGRq0=
Subject key identifier: 69:F4:8B:67:F6:4F:49:0E:41:7D:9C:92:C4:D6:31:FD:5F:EA:B9:29
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 0193BA92CA783BC7AEF72C614D8F91673B18
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/afSLZ_ZPSQ5BfZySxNYx_V_quSk.roa
Signing time: Thu 12 Dec 2024 11:13:22 +0000
ROA not before: Thu 12 Dec 2024 11:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 212.70.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Dec 2024 11:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:92:ca:78:3b:c7:ae:f7:2c:61:4d:8f:91:67:3b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Dec 12 11:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69f48b67f64f490e417d9c92c4d631fd5feab929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:38:59:22:75:5a:fc:84:f0:5a:a9:f2:62:
58:9b:3d:01:79:ba:1f:42:b8:fb:64:71:60:13:90:
3b:b0:54:fa:53:c6:87:78:da:b7:af:13:9b:7b:42:
94:53:22:3a:83:1f:21:ed:4b:93:ef:a1:75:ab:39:
9e:b3:1b:d4:ac:63:b5:17:fc:3b:98:25:29:6d:ba:
49:0a:d5:f0:21:22:05:1b:e8:f1:30:93:fe:f1:95:
22:af:e0:20:e8:cb:00:65:fa:64:3c:43:5e:4c:80:
d7:bc:a2:58:9a:1b:84:f6:71:eb:8a:23:6c:71:b9:
2b:ac:92:cd:fd:ed:e6:0f:25:3f:76:09:da:53:be:
99:55:6a:85:b7:f3:cd:c4:ce:b3:a8:ae:b3:aa:cb:
b0:c8:56:ab:8a:0c:5a:47:2c:e6:df:00:e1:86:d9:
f3:74:29:91:3c:8b:f6:4f:31:54:6a:eb:6f:0a:9c:
78:a9:fa:4f:a2:8f:59:ea:f9:7a:df:8a:19:1a:a3:
95:ef:68:80:21:b3:b2:26:b8:27:8b:c6:ae:3e:01:
2b:d1:db:d9:25:10:cb:d6:ec:b4:f8:fc:10:ee:ff:
0e:18:fa:a1:d4:b9:50:e0:7a:6d:e0:f7:18:22:72:
8d:c0:d1:33:55:65:c4:1f:95:e9:cb:21:e4:ba:82:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:8B:67:F6:4F:49:0E:41:7D:9C:92:C4:D6:31:FD:5F:EA:B9:29
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/afSLZ_ZPSQ5BfZySxNYx_V_quSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:cb:51:f6:16:33:16:c5:05:e8:31:08:04:14:8e:f3:aa:95:
ba:27:81:b6:23:7f:89:4e:5f:5f:2a:1b:8e:6e:01:68:6f:ba:
bd:b5:0d:e3:d2:9b:a0:be:13:95:d2:03:ae:1f:92:51:c0:e7:
0b:f2:2f:1b:a2:4d:4d:ee:53:3b:24:97:4e:2f:3a:f9:c1:cd:
81:13:5a:23:2b:da:84:08:45:17:c2:26:c6:22:c2:cf:65:b9:
e4:a6:61:64:2e:eb:57:c8:57:0a:e4:9d:63:ec:e8:90:64:93:
8e:27:02:2c:e8:c7:f1:30:00:9b:90:5e:f4:ad:fb:b2:66:bb:
85:a7:9e:6b:99:79:69:9c:7f:d6:78:14:14:36:b8:64:87:6b:
14:36:7b:ff:2a:9e:43:06:f9:da:3f:b8:50:67:0a:68:09:89:
7a:cd:06:b5:29:59:c0:9f:2b:25:33:2a:2d:4a:30:9f:7e:ba:
6e:19:1d:2e:c2:62:70:6e:05:3b:a1:40:1d:dd:fa:21:20:7b:
8b:b5:15:93:5d:e0:28:bb:42:52:40:fb:c5:d2:f5:32:fa:37:
f3:e7:90:a1:81:9d:74:a5:43:d6:6b:b4:ff:a6:5a:73:70:30:
d5:6b:0e:08:1b:fc:8d:e3:53:13:a5:f1:e2:27:70:af:a9:13:
59:c1:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:04 2025 by rpki-client