Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/4TFVCYhpu2PA59oxdHpQACQQIRE.roa
File: 4TFVCYhpu2PA59oxdHpQACQQIRE.roa (raw, json)
Hash identifier: vDLTmjfuZ3vDD+CTsmyzLJyev5RT9s9/xy4yI1FVVHg=
Subject key identifier: E1:31:55:09:88:69:BB:63:C0:E7:DA:31:74:7A:50:00:24:10:21:11
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 0192042E305C9128DFE13711B4B246C3BC32
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/4TFVCYhpu2PA59oxdHpQACQQIRE.roa
Signing time: Wed 18 Sep 2024 08:09:48 +0000
ROA not before: Wed 18 Sep 2024 08:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12548
IP address blocks: 212.68.160.0/22 maxlen: 22
212.68.172.0/22 maxlen: 22
212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/22 maxlen: 22
212.68.176.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.180.0/22 maxlen: 22
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 09:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:2e:30:5c:91:28:df:e1:37:11:b4:b2:46:c3:bc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Sep 18 08:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e13155098869bb63c0e7da31747a500024102111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:96:22:cb:8c:df:13:25:7b:bc:0d:49:d4:
36:25:46:4b:67:a3:ba:c4:8a:2e:03:fb:f9:37:b1:
18:d2:92:51:4c:3f:fd:81:33:80:94:26:14:a4:6c:
4f:88:8e:24:75:96:45:e5:0c:fc:5a:bb:95:05:a4:
ca:a2:c5:6b:1d:ce:85:40:7d:e5:07:bb:84:fe:d8:
98:a2:ce:85:92:32:54:5c:b1:b1:08:2a:8a:6f:5d:
ba:3b:e1:20:b8:c2:3a:bf:39:72:e1:3c:af:75:2d:
8c:f7:9a:80:6a:ad:35:6a:4a:4d:8f:c8:a6:0d:b4:
95:00:11:e7:63:cc:26:a3:c2:dc:e5:81:0b:df:b1:
ec:e8:66:af:04:a3:e2:80:0f:51:a9:5e:5b:bb:89:
3a:1f:f5:23:66:2a:96:36:86:01:a0:cd:b3:ac:ec:
54:80:ff:67:31:a8:0b:87:b4:68:5d:6c:c2:08:b2:
24:ce:da:c9:10:5f:70:57:f7:72:ce:25:91:62:91:
c5:a7:ef:f1:3d:58:ff:95:fd:a1:79:ee:70:3c:7a:
6e:a3:88:b8:4c:18:53:dc:0e:df:40:8d:58:0a:f5:
a1:c3:ed:04:55:9c:6c:84:94:0b:da:80:54:de:e7:
01:56:ea:64:4c:67:6a:7c:81:43:17:bf:ea:5a:bc:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:55:09:88:69:BB:63:C0:E7:DA:31:74:7A:50:00:24:10:21:11
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/4TFVCYhpu2PA59oxdHpQACQQIRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.160.0/22
212.68.172.0-212.68.183.255
Signature Algorithm: sha256WithRSAEncryption
6e:00:90:4e:87:6f:13:25:8b:33:a4:8e:d5:80:47:e9:cb:95:
f2:fb:91:ef:e6:c4:d5:38:67:8c:86:2d:71:d4:87:8e:42:cc:
5a:98:3d:71:b6:92:11:8f:d4:44:dd:97:37:0a:3b:f6:a0:59:
6a:4d:46:74:97:be:6a:48:06:98:af:58:ce:03:f8:47:ea:b0:
03:5a:f5:a9:ea:a9:e3:77:9e:41:15:44:f5:bd:66:41:fb:c0:
13:4b:4a:e7:59:84:e1:ff:60:8d:0b:34:34:be:00:6a:db:b1:
5f:20:54:e2:bf:09:33:4f:51:c1:90:be:09:f5:2b:3c:9d:cd:
05:72:a0:81:f0:d0:3c:64:f0:5f:c5:cd:aa:a2:8b:6a:32:04:
4e:40:6c:fc:e3:ba:11:29:b8:20:56:17:2a:a4:04:2d:14:c3:
d9:19:2c:a9:56:54:9d:f0:b3:a9:c5:72:ea:e8:37:39:3d:6c:
3e:51:7f:07:3d:61:38:74:e9:80:81:24:d4:e1:9b:76:65:29:
92:56:3d:07:55:0e:87:82:83:b1:09:6e:1f:d2:b9:1d:7c:03:
86:3f:c7:72:76:aa:d6:2d:f9:be:45:d3:2b:e3:83:d3:f7:ab:
f5:00:9d:91:e8:eb:5d:49:14:a4:69:f7:89:75:ed:81:3d:e8:
53:24:c1:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:27 2025 by rpki-client