Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TRIVJ4cmZpkomwM53vH9MUUg2GQ.roa
File: TRIVJ4cmZpkomwM53vH9MUUg2GQ.roa (raw, json)
Hash identifier: atl5JrUvCcRiN7cDiQioYd+wH2TDNAoV9LwnVffuWvM=
Subject key identifier: 4D:12:15:27:87:26:66:99:28:9B:03:39:DE:F1:FD:31:45:20:D8:64
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EAEB1D824A1D95E012F3B828206C5DA2A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TRIVJ4cmZpkomwM53vH9MUUg2GQ.roa
Signing time: Fri 05 Apr 2024 14:37:54 +0000
ROA not before: Fri 05 Apr 2024 14:37:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215184
IP address blocks: 213.130.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 15:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:b1:d8:24:a1:d9:5e:01:2f:3b:82:82:06:c5:da:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 5 14:37:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d12152787266699289b0339def1fd314520d864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:de:7e:dd:1e:0d:df:4f:c2:25:7a:f6:37:
67:59:9a:17:e6:d5:4a:df:ae:1a:00:ca:33:12:d3:
1f:8a:04:94:90:b7:56:57:e8:7a:06:ca:35:5d:65:
78:4c:50:19:58:dd:7b:1e:bd:67:5c:58:ce:6a:60:
6f:1e:2c:14:f9:b5:b4:e3:b6:a9:73:98:55:5b:0f:
fe:de:67:0d:17:33:e0:55:0c:0e:b8:17:38:9f:54:
b6:c7:94:07:63:12:63:8e:62:38:e3:6a:b7:ea:00:
9f:43:b7:26:25:dc:5a:ae:8f:46:df:2f:39:4b:a6:
47:ec:42:1b:9f:cf:b6:30:6a:58:0d:e1:34:c8:9a:
12:e4:a6:61:43:a8:11:9f:ed:5f:e9:c0:27:02:f0:
ac:be:03:0e:df:5d:42:3e:f8:eb:52:2c:8d:bd:5e:
3c:99:4f:bf:fe:f0:65:4c:93:1c:a5:e8:16:35:d3:
1a:0b:30:c7:11:5d:e0:41:d8:4e:4b:4d:3e:fe:17:
0e:1b:84:b9:63:5d:ed:95:42:fa:97:49:e9:e0:37:
2d:78:de:97:1e:66:6b:dd:0e:4a:43:41:a0:e3:0d:
03:6a:ba:a0:ca:ad:e6:05:aa:41:ea:0e:a8:a0:6a:
91:80:8d:c0:1e:62:73:4a:99:2e:77:8a:1a:a6:81:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:15:27:87:26:66:99:28:9B:03:39:DE:F1:FD:31:45:20:D8:64
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TRIVJ4cmZpkomwM53vH9MUUg2GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:7d:bf:5d:57:23:98:df:0a:ec:e8:b3:5c:0a:2a:99:4b:71:
80:b4:46:58:0e:63:8a:0e:f3:ae:3b:04:eb:92:8b:cd:25:c3:
b0:b1:fe:a0:85:08:0c:36:4d:c6:1f:80:7d:85:4e:32:7c:e0:
7a:a7:25:f1:93:c9:ff:3e:62:a9:88:91:48:41:3f:11:66:48:
41:ef:16:c9:68:f5:35:c0:75:bd:24:3b:15:8e:de:6a:54:a7:
ad:be:72:83:01:9b:de:48:36:ba:cd:0c:7b:9b:dc:b3:4d:8f:
b0:42:7d:57:12:c1:8b:f1:97:9c:d9:c9:39:d8:ee:31:5f:f1:
f3:50:8a:b4:3f:64:21:75:53:0c:60:0b:b9:3a:2a:ec:45:8f:
8c:b7:74:4f:30:dc:64:20:bc:a6:b9:eb:10:3c:2d:88:7f:a8:
74:00:00:61:08:4c:5a:8c:eb:2e:d5:97:f9:27:a7:9a:19:dd:
6a:fc:21:46:43:69:d5:97:66:97:53:1f:0c:94:e1:60:19:d7:
51:48:ec:a1:92:ba:01:df:06:91:f3:02:02:32:57:a8:b5:b5:
a8:00:27:c4:96:c1:49:b2:85:f2:24:26:4c:dd:c4:ea:29:9a:
db:37:3b:89:61:8f:e9:35:4c:dc:9c:bd:d4:64:af:bb:f9:60:
ae:00:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:59 2025 by rpki-client