Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oxYB7fHnUq5Vmqgqav1SqrVGJl4.roa
File: oxYB7fHnUq5Vmqgqav1SqrVGJl4.roa (raw, json)
Hash identifier: RB9KIY98kVb9Pz96Ilkvk/VwJqi8wWvUM+W1Plh5zNQ=
Subject key identifier: A3:16:01:ED:F1:E7:52:AE:55:9A:A8:2A:6A:FD:52:AA:B5:46:26:5E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019300BA2DD1B1FB770B99973DD27EAD04B2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oxYB7fHnUq5Vmqgqav1SqrVGJl4.roa
Signing time: Wed 06 Nov 2024 09:07:01 +0000
ROA not before: Wed 06 Nov 2024 09:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214654
IP address blocks: 212.38.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 10:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:ba:2d:d1:b1:fb:77:0b:99:97:3d:d2:7e:ad:04:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 6 09:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a31601edf1e752ae559aa82a6afd52aab546265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:44:6e:9f:84:48:f3:f2:c2:3a:23:ab:dd:
8b:01:02:6f:90:fb:6f:fd:cb:07:f5:f5:0e:b7:3b:
c0:8f:92:29:73:66:6d:a9:d3:b1:6a:39:d8:fa:5c:
e6:e1:77:f4:14:12:cb:42:c6:7f:07:d1:fb:fa:53:
c2:72:c4:bf:91:39:de:2a:d3:f8:d2:24:f2:2a:9e:
1d:1a:e9:c5:a7:29:15:bd:b6:c1:17:2d:aa:ee:1b:
cc:fb:13:23:cb:45:17:57:d0:19:24:f2:ec:f8:d5:
53:08:60:ed:4e:37:19:60:64:6b:4b:47:a9:3e:eb:
84:d1:29:a9:29:78:c3:10:ba:6b:96:17:25:74:05:
aa:bd:f9:40:ec:05:98:c2:9a:b1:66:fa:f1:a7:5e:
ff:b1:3a:d6:a5:56:05:86:12:7a:d2:af:29:8a:d1:
14:49:68:5c:00:ff:a7:79:9a:5f:e9:8d:3b:5e:a3:
86:d2:d5:97:26:2a:ff:d5:12:fe:54:f2:a8:b8:70:
c4:3a:a5:b7:20:06:80:0a:4e:d6:f7:5d:49:ec:c8:
09:d0:dd:0f:54:53:79:12:63:41:0b:b4:7c:c7:c1:
d9:02:ad:78:6d:59:3d:f8:6f:9e:08:16:ad:09:57:
ca:1b:31:a0:79:b4:ae:a7:6e:de:78:41:7d:35:71:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:01:ED:F1:E7:52:AE:55:9A:A8:2A:6A:FD:52:AA:B5:46:26:5E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oxYB7fHnUq5Vmqgqav1SqrVGJl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.81.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3f:bd:97:e4:5a:9f:32:df:7b:7d:75:c2:3f:4d:21:cf:8a:
da:36:81:2d:6f:cc:16:cc:78:1a:2b:da:73:8b:78:fc:10:59:
9d:80:25:d6:65:20:d6:20:32:25:4e:ad:37:eb:04:9b:71:2f:
7f:0c:c5:9a:8e:af:59:ee:dc:97:f5:78:07:73:74:66:ad:f0:
fa:16:a8:9f:05:ec:c4:97:38:02:29:32:b1:8e:cd:70:8f:7a:
3b:e8:8f:ea:70:a0:91:d4:bd:33:88:9a:55:12:16:f7:72:7b:
32:d0:28:ba:32:7e:e5:d7:af:db:71:b0:34:12:4e:a9:fd:89:
23:e5:88:42:4a:b9:16:7c:3d:0d:20:bc:f2:d6:fc:d1:22:25:
5a:7c:35:c5:b0:1e:b5:ba:bd:ee:e2:2d:2c:28:26:ed:d0:3b:
5a:a8:84:86:a8:99:2e:1b:fd:8a:c4:9f:6a:06:e6:31:fe:36:
2b:9e:6b:9b:28:bc:39:54:65:b1:64:b6:da:1e:da:fd:ca:0c:
e6:e8:84:60:02:77:a1:7b:f2:e7:11:a2:b4:05:fe:5b:ea:93:
90:ff:9c:76:b8:04:05:86:02:39:87:29:21:48:cc:3a:02:7c:
63:69:cc:b5:71:48:5f:bb:aa:c4:2e:ed:0e:8b:01:f2:9c:c7:
2e:9e:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:15:08 2025 by rpki-client