Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/baaSUb9yKi0QUi4KQbCneGnn-KE.roa
File: baaSUb9yKi0QUi4KQbCneGnn-KE.roa (raw, json)
Hash identifier: GJTBXGx4MP2C2HOzPDNF1bVjmmXk94HWT9d82EWOnzg=
Subject key identifier: 6D:A6:92:51:BF:72:2A:2D:10:52:2E:0A:41:B0:A7:78:69:E7:F8:A1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EC82CA43DAB2A3CF034E59AE195CEAC5C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/baaSUb9yKi0QUi4KQbCneGnn-KE.roa
Signing time: Wed 10 Apr 2024 13:22:32 +0000
ROA not before: Wed 10 Apr 2024 13:22:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209336
IP address blocks: 212.38.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 15:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:2c:a4:3d:ab:2a:3c:f0:34:e5:9a:e1:95:ce:ac:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 10 13:22:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6da69251bf722a2d10522e0a41b0a77869e7f8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:dd:f1:62:57:ad:8a:1e:b1:a7:34:9a:9a:
a7:b9:23:bd:95:cc:ec:2e:42:8e:81:9b:4e:ac:4d:
46:1c:af:7b:6b:f1:45:fb:43:28:d0:3f:b8:2d:d9:
90:15:1b:82:b2:61:a2:f2:c8:8c:2d:c7:b6:fd:60:
6e:5a:5d:68:42:47:b4:9e:17:f6:8a:1f:ca:1f:5a:
b6:0b:a6:85:5e:0f:db:c9:e7:5e:71:9a:f1:ed:6c:
03:3a:8a:57:7b:6f:ab:4d:51:a2:9b:d0:75:32:3c:
1d:43:db:00:55:39:9d:75:bf:d5:79:15:7b:ea:09:
ec:5d:f0:d3:c5:4c:3a:43:59:d9:b5:e2:38:fa:07:
b8:08:7d:f9:72:64:32:10:21:db:1a:37:79:39:ae:
f4:ab:f8:e0:3e:98:f2:20:87:de:cc:28:9d:48:33:
af:a2:c5:69:47:6c:47:ac:16:92:b8:35:60:72:37:
3c:ed:6a:11:8b:9a:22:da:56:5e:d1:59:2c:22:7c:
e8:41:65:c1:12:37:96:5c:c0:2e:94:f6:9c:22:1e:
64:32:6a:d4:88:65:d8:85:50:33:bb:a7:8f:08:52:
b4:54:77:22:54:ff:54:1d:44:aa:88:fb:77:1c:a0:
b3:82:a9:90:8b:9a:99:54:98:55:fb:7a:50:28:bd:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:92:51:BF:72:2A:2D:10:52:2E:0A:41:B0:A7:78:69:E7:F8:A1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/baaSUb9yKi0QUi4KQbCneGnn-KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.71.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a5:3b:88:08:14:cf:95:2d:8a:06:5f:39:15:1a:e1:fa:d9:
00:9f:87:56:b0:15:54:ee:61:00:f8:68:c2:21:47:ba:1c:ba:
2e:a5:d9:5d:5e:83:3b:8d:df:50:0d:04:24:8f:56:c5:39:29:
08:08:42:e9:aa:02:ff:52:a0:af:ab:80:64:ee:af:84:fb:49:
4b:f3:c6:63:9a:91:71:e8:4a:b6:b1:2d:e9:b9:d6:4e:86:97:
dd:46:d0:6d:e4:4f:ac:a4:ec:6f:60:e3:96:64:7b:5a:cc:67:
d0:db:7f:fa:a0:b3:2d:61:42:cf:b9:db:ab:b5:e3:de:36:cc:
39:b0:b3:5d:23:3e:93:9a:15:c0:a3:ab:5b:22:5c:0d:cc:6b:
69:85:24:f8:c9:24:e4:2a:f4:6d:3f:e2:74:53:f6:16:97:07:
66:e4:ea:52:33:49:bb:c2:25:ee:0a:57:17:7b:14:28:2e:27:
f8:ba:5b:13:e5:41:44:73:e0:2d:a3:bd:07:30:d9:f3:cc:84:
35:13:8d:2c:18:fe:8b:c7:34:05:71:9e:09:63:31:35:aa:5b:
49:0e:89:b0:21:9d:bd:a9:2b:3c:6f:7d:53:45:34:a0:2d:3d:
3c:7e:25:88:10:19:b6:2b:0d:02:27:0c:5c:e2:09:12:8f:f6:
71:e3:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:17 2025 by rpki-client