Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/eNJkbV62zZTNNW42sI_7ePyw8uI.roa
File: eNJkbV62zZTNNW42sI_7ePyw8uI.roa (raw, json)
Hash identifier: U/EbKmC+cBBh0EfjrZF4sJpZIPQZZ3WiPvCooafugXE=
Subject key identifier: 78:D2:64:6D:5E:B6:CD:94:CD:35:6E:36:B0:8F:FB:78:FC:B0:F2:E2
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 0195CC8D099095E1D2915A205490F87D076A
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/eNJkbV62zZTNNW42sI_7ePyw8uI.roa
Signing time: Tue 25 Mar 2025 09:05:49 +0000
ROA not before: Tue 25 Mar 2025 09:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47164
IP address blocks: 212.231.80.0/24 maxlen: 24
212.231.81.0/24 maxlen: 24
212.231.82.0/24 maxlen: 24
212.231.83.0/24 maxlen: 24
212.231.84.0/24 maxlen: 24
212.231.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Apr 2025 14:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:8d:09:90:95:e1:d2:91:5a:20:54:90:f8:7d:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Mar 25 09:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d2646d5eb6cd94cd356e36b08ffb78fcb0f2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:4d:43:e2:23:da:5f:56:40:f2:e3:17:c7:
ad:3a:0f:d7:6b:9c:c4:ea:98:30:72:98:48:7b:83:
a5:dc:b2:d2:05:57:b8:8c:42:ad:ef:72:56:2a:32:
f5:01:6f:98:e1:fa:31:94:03:e2:2e:77:5c:d3:d6:
2b:f8:72:7b:c0:9e:e2:d6:71:91:7c:14:79:54:f0:
77:fe:82:f0:e5:96:56:5c:f3:f2:d0:c0:a0:bd:3f:
0b:44:25:f0:f6:5e:bf:10:79:7b:78:06:44:d5:1a:
7a:25:18:a8:b2:2e:86:da:d8:4a:95:3a:6c:b2:48:
2e:fd:30:95:e5:fc:98:38:da:aa:7a:41:1e:06:d0:
20:99:e7:32:01:f8:9f:f7:8f:3a:f4:76:d8:31:63:
8c:89:c6:77:6c:7b:31:fe:b8:5d:00:6a:59:d9:2d:
24:0b:6c:17:7e:c8:8d:3b:c5:81:18:20:1a:95:1a:
9a:d0:c1:ce:9c:14:50:bd:0b:ec:a3:8d:95:34:03:
c9:8d:54:a5:f0:39:74:dc:ef:93:2f:49:e8:eb:3e:
45:cf:d1:f0:46:2b:f1:90:95:23:67:73:e0:a6:8d:
24:35:6c:ca:d1:ac:e9:7f:5a:9c:b7:ce:db:6d:b3:
b9:f9:39:70:53:08:f8:e0:c6:30:0a:e6:c1:d8:08:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:64:6D:5E:B6:CD:94:CD:35:6E:36:B0:8F:FB:78:FC:B0:F2:E2
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/eNJkbV62zZTNNW42sI_7ePyw8uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.231.80.0-212.231.85.255
Signature Algorithm: sha256WithRSAEncryption
5c:de:ae:6d:55:51:b6:28:a3:c0:c4:82:45:7b:a6:6b:57:d6:
ee:b6:e9:82:65:55:be:91:c2:9b:58:78:86:72:54:32:ef:ff:
ce:2f:d9:41:73:6f:41:0d:b6:cb:9d:1b:1a:fc:0e:79:58:2f:
52:11:0c:c6:ac:6b:79:e2:77:42:5a:eb:76:3c:17:70:ee:40:
b8:43:08:b6:1b:64:86:50:d6:5d:93:b8:20:b3:68:35:99:f3:
63:20:ef:ea:58:59:bb:fb:e7:2f:24:01:1d:ce:c6:26:2e:d3:
47:51:17:fe:0f:a1:89:b3:1a:e5:82:f3:27:be:1e:54:8e:c2:
2c:e9:97:2d:35:85:92:a3:46:eb:e7:3f:81:8f:75:34:04:18:
73:89:82:da:0a:aa:14:59:30:30:85:04:71:60:eb:60:8b:51:
6f:52:27:5c:85:c6:ce:5a:c6:1f:6e:9a:8e:98:06:ee:fc:3a:
54:0a:b1:70:ca:93:11:5d:8b:43:3b:2f:c6:c2:66:ed:60:57:
18:9b:7b:6a:d3:63:2e:f7:28:8e:b9:a0:e1:cc:51:26:c9:1d:
59:0d:8c:e4:3e:26:12:b0:64:2c:4e:3f:16:85:26:39:cf:e3:
c3:4f:3e:83:a0:c4:e3:2a:fd:e0:a0:4b:10:28:a4:94:77:46:
75:fa:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:11:56 2025 by rpki-client