Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TUizSuIr7AUiY7Ve1sE4GO3eB5Q.roa
File: TUizSuIr7AUiY7Ve1sE4GO3eB5Q.roa (raw, json)
Hash identifier: 66fnMoKIja6E3aNYL+e8Ao9lDj4nfbwfAuFUXeIHBeI=
Subject key identifier: 4D:48:B3:4A:E2:2B:EC:05:22:63:B5:5E:D6:C1:38:18:ED:DE:07:94
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214439A9D7B95D69C56731D1D34A2EE5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TUizSuIr7AUiY7Ve1sE4GO3eB5Q.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 267507
IP address blocks: 212.38.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:39:a9:d7:b9:5d:69:c5:67:31:d1:d3:4a:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d48b34ae22bec052263b55ed6c13818edde0794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:76:54:50:5f:e0:cf:48:53:4b:99:3d:df:
ff:d2:4f:a6:2d:47:94:64:71:f2:b1:0d:81:7f:24:
7d:b9:63:ac:a3:b0:dc:89:ef:e8:70:fb:0a:a4:a8:
9d:c5:56:2f:53:a3:74:ec:d1:bd:2f:19:4f:c9:c4:
2b:b0:99:16:1d:4c:95:93:e8:a2:2d:c7:ee:76:a0:
7a:26:2f:73:1a:d3:a9:03:a6:d0:e8:45:79:95:e4:
db:ac:f4:21:e2:4f:ce:e2:70:ef:a3:7f:44:73:fe:
97:7a:46:da:ad:da:52:e3:52:48:53:06:ac:1c:c4:
d8:82:5f:19:ac:2a:b1:5c:c2:5d:82:79:b1:0d:c2:
da:5d:ce:5e:95:5b:14:52:86:d0:f4:65:85:d1:b3:
c5:80:2e:50:34:55:76:50:4e:4b:66:7c:2b:0d:c5:
e0:56:83:9d:48:c3:00:ba:04:a5:13:5c:4d:83:33:
43:20:7c:ae:15:3f:f2:29:0b:96:77:26:e4:85:d2:
92:a2:58:bb:b8:19:97:6a:5b:49:ff:4c:6d:7f:2a:
c4:f4:ce:fc:d2:50:a6:14:84:71:db:9b:ff:c0:8b:
a7:0f:9e:a7:90:cc:3d:20:49:c3:dc:25:e0:71:1a:
92:2d:86:1e:a4:20:52:a1:c5:67:5a:2d:c6:89:ea:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:B3:4A:E2:2B:EC:05:22:63:B5:5E:D6:C1:38:18:ED:DE:07:94
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TUizSuIr7AUiY7Ve1sE4GO3eB5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.84.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c4:cf:67:ee:e1:5a:82:74:20:7a:cd:79:c4:65:7b:3e:39:
24:7f:4a:88:b5:3a:e6:6b:02:30:38:f2:46:10:57:86:19:b0:
32:6a:4a:8c:e2:c4:1e:41:a1:d1:23:a5:ae:07:ff:ea:d9:08:
78:37:bb:99:c4:14:99:f3:02:b1:29:cb:54:9c:0b:79:4c:2e:
7b:2c:e5:94:8d:3e:8e:07:e7:40:27:f4:68:4a:f3:e7:17:cb:
b6:a5:49:ed:92:04:cc:b6:03:33:d0:2a:bf:b1:2e:c7:ef:40:
bd:80:51:0b:56:9f:cc:bf:a6:5e:aa:6c:10:35:f5:2d:ec:cd:
2e:5e:4e:38:21:d1:d4:10:21:0c:b2:81:1f:81:36:5d:0c:e6:
43:ce:f2:01:f7:9a:55:2f:38:44:9c:2f:bf:6c:ec:09:29:a7:
d3:06:65:52:c9:79:14:cc:56:03:b8:d0:61:0a:6c:3a:06:f4:
cb:d7:67:79:9e:8e:8c:23:bd:34:fa:a5:b7:7c:05:34:e3:7b:
d5:9f:6a:e5:01:0c:5e:cd:80:f5:36:2b:f8:5a:40:bb:ff:07:
28:f7:67:05:0d:bc:78:cd:1b:fb:77:dd:f2:77:01:03:49:66:
c0:9b:a5:31:13:7f:56:01:37:34:cf:04:27:aa:ad:07:3f:14:
01:38:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:08 2025 by rpki-client