Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/cOJH4s4Tzd-_xUWTr5LbUTvkYr4.roa
File: cOJH4s4Tzd-_xUWTr5LbUTvkYr4.roa (raw, json)
Hash identifier: 44XKyi1l8dJ9tl6uQB1SQfN8+8zRHRe1Ry5/VIOvLck=
Subject key identifier: 70:E2:47:E2:CE:13:CD:DF:BF:C5:45:93:AF:92:DB:51:3B:E4:62:BE
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 01936DB35856F21BE7853392C0FFEE0FE59B
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/cOJH4s4Tzd-_xUWTr5LbUTvkYr4.roa
Signing time: Wed 27 Nov 2024 12:58:10 +0000
ROA not before: Wed 27 Nov 2024 12:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62077
IP address blocks: 2.57.212.0/24 maxlen: 24
2.57.213.0/24 maxlen: 24
185.33.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:b3:58:56:f2:1b:e7:85:33:92:c0:ff:ee:0f:e5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Nov 27 12:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70e247e2ce13cddfbfc54593af92db513be462be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:90:16:33:95:1d:c9:52:78:26:fa:ff:9d:
5f:84:f3:57:40:69:6a:50:1a:51:fd:d3:51:da:8c:
29:58:73:70:3a:1c:ef:29:da:52:21:36:df:78:bf:
87:b6:cf:64:25:77:b0:9b:1c:57:92:7e:53:9a:40:
ce:d0:13:04:98:fc:b6:6e:3c:41:05:2e:e3:7e:5a:
70:ec:27:0d:09:b9:5b:89:5e:ad:fe:c6:d7:92:86:
8c:ca:9d:dd:b2:92:73:e5:ad:26:b3:a1:71:2f:a0:
33:fd:a7:1c:14:45:a0:61:42:99:05:f7:fb:8f:cc:
6c:3a:a2:7c:d0:74:a3:69:52:4f:bf:09:51:04:fe:
6b:0e:95:25:6d:65:bc:ce:d3:dd:6c:f2:4b:a9:9d:
8a:32:7d:19:ef:37:62:d0:1f:2e:b0:cf:79:bc:17:
5a:bb:b6:de:4f:ef:8a:b1:30:57:f2:b5:d0:18:db:
90:d6:e9:9b:aa:1d:66:5b:28:d7:34:bf:34:f2:0c:
de:38:9d:d3:06:29:59:f3:70:3d:c3:52:41:8c:9a:
73:09:33:9c:48:5d:fd:63:22:9b:06:09:54:fa:f9:
1b:2c:4f:ad:d7:21:6b:e9:9c:21:ba:38:93:3c:60:
0e:91:6a:a2:da:d0:52:8d:45:6a:96:7c:b2:f5:14:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E2:47:E2:CE:13:CD:DF:BF:C5:45:93:AF:92:DB:51:3B:E4:62:BE
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/cOJH4s4Tzd-_xUWTr5LbUTvkYr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.212.0/23
185.33.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c7:11:a9:0a:dd:84:4a:53:42:05:db:52:fd:47:30:2b:2e:
14:63:3a:e0:5e:12:4d:0f:88:be:b7:4a:b2:b6:23:6b:09:e3:
f8:b3:b4:08:ec:33:6d:29:3e:d1:80:af:e2:50:a5:df:38:10:
38:90:09:e2:81:bf:1f:17:9a:a0:e0:1e:9a:ff:b9:79:78:c3:
0b:dd:c7:a5:dd:f2:30:f0:98:a4:ba:63:30:df:83:ce:72:ce:
b7:90:94:6e:4c:f4:2f:0c:b7:1e:b5:b9:eb:75:18:11:52:50:
94:7b:f5:2a:2f:72:84:32:c0:5a:95:89:af:2c:c1:8e:55:6e:
26:2a:cc:d1:76:cb:fe:4a:3d:ce:3e:96:b5:65:49:4a:c2:36:
34:5e:79:27:fa:88:83:2f:e1:ea:46:2a:9e:5c:22:05:20:29:
15:80:44:31:08:6c:5f:f1:e0:eb:63:6c:9a:1e:45:b3:b3:49:
6e:16:69:aa:9c:0c:5d:ff:fc:46:c9:1b:ae:73:10:ab:9a:c4:
2b:fe:dc:3a:02:55:1e:06:f6:d1:2c:8a:cd:8a:5e:32:ae:3a:
d5:59:95:dd:48:4b:6c:e4:6a:ad:f2:84:97:5d:ed:59:42:dd:
2a:eb:2a:9c:d9:d4:12:68:58:77:22:23:18:d0:16:9b:95:1a:
ba:33:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:35 2025 by rpki-client