Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ZM9QoOAiVO8OgEZI2Rajf72wrs.roa
File: 9ZM9QoOAiVO8OgEZI2Rajf72wrs.roa (raw, json)
Hash identifier: gKOojEaUc9+P6FDhCpUO39sue6L1ePp+XXknWmmLfpY=
Subject key identifier: F5:93:3D:42:83:80:89:53:BC:3A:01:19:23:64:5A:8D:FE:F6:C2:BB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193B04614921A4A5FC2D3CB85ADD2882D84
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ZM9QoOAiVO8OgEZI2Rajf72wrs.roa
Signing time: Tue 10 Dec 2024 11:13:23 +0000
ROA not before: Tue 10 Dec 2024 11:13:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198831
IP address blocks: 213.130.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:46:14:92:1a:4a:5f:c2:d3:cb:85:ad:d2:88:2d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 10 11:13:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5933d4283808953bc3a011923645a8dfef6c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:9e:ba:c9:78:6b:0d:5f:1e:30:ee:58:dc:
f0:d6:f5:84:9a:7a:22:89:04:18:2b:36:bf:e2:47:
79:1a:4d:7e:69:03:60:eb:28:b5:93:c5:78:fa:91:
79:7b:e8:5a:46:2a:54:9d:27:f6:b9:52:6b:49:a7:
24:e2:1d:75:f0:2a:7e:91:7c:ad:5e:8b:e3:54:c5:
70:23:8e:05:a5:4c:27:22:07:d9:5d:11:5f:ba:b8:
6b:11:b6:e9:2d:b7:b1:5d:ef:80:bd:ee:88:58:fe:
6a:de:a0:fd:37:8a:dc:2d:5c:b3:8c:55:82:8f:da:
fb:fe:4d:09:b0:30:81:d5:50:7c:4d:8f:d0:b5:2e:
15:57:41:17:1b:04:cc:8f:45:f7:f9:5a:72:4c:43:
ba:a2:ab:5e:f0:1d:5c:cd:b0:ad:94:92:9a:9d:3b:
c8:c7:a7:2a:b4:7b:46:1e:d5:f7:7e:08:f0:d7:d7:
fa:90:40:f5:69:40:8e:59:dd:db:cd:36:12:d8:f1:
a2:9a:ec:8a:42:da:a5:46:cb:c1:9d:8c:33:0f:53:
e2:ed:97:18:1e:74:43:22:3f:d3:89:3e:d8:0b:4b:
dc:33:55:17:db:c5:16:57:f2:ee:ed:dd:f4:c6:83:
63:a1:94:14:1c:da:24:5a:77:fe:01:60:26:0f:e9:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:3D:42:83:80:89:53:BC:3A:01:19:23:64:5A:8D:FE:F6:C2:BB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ZM9QoOAiVO8OgEZI2Rajf72wrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.153.0/24
Signature Algorithm: sha256WithRSAEncryption
66:83:ea:db:4b:85:35:18:cd:5a:a6:7c:ca:10:f6:d6:51:e0:
fc:7d:14:79:1b:70:2d:e5:02:eb:ce:d7:4a:e2:50:ca:1e:39:
bd:29:01:42:91:ba:a2:17:d7:d4:a6:bc:7d:bb:29:ab:1d:87:
fd:81:46:f9:07:c0:25:1b:7a:df:12:43:fe:26:47:92:1c:df:
ad:92:75:ba:7d:25:7c:55:20:3f:7d:81:cd:02:7d:45:16:5f:
ea:9e:c7:90:eb:ea:50:d0:a4:2c:80:08:86:c7:cb:ba:0e:6d:
72:15:6f:51:fa:08:22:c3:d8:64:57:99:f3:66:38:d8:84:13:
3b:d9:7e:3d:e0:3d:20:8f:f2:96:b4:6a:e8:65:08:e7:4e:5d:
ec:c2:98:3a:04:65:55:c2:f7:9a:66:51:b2:8d:a2:df:f6:f0:
ee:f7:bd:41:89:cb:94:61:22:51:bd:f5:b3:48:64:32:a5:a1:
b6:f9:35:06:e4:e4:5f:2d:94:ad:52:0b:66:20:80:2f:45:5f:
09:41:b4:c3:dd:9e:b9:9a:1a:10:39:96:ad:29:d6:70:7a:7e:
7b:d5:9b:d2:bd:6f:a3:f4:46:01:8b:02:9a:3f:10:4d:d7:7d:
59:06:a7:7e:f0:06:4e:3e:86:8c:85:f5:4d:ac:88:ff:65:f7:
ea:95:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:26:25 2025 by rpki-client