Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/otRKiszydCDY9q531U0lvSFQ9-k.roa
File: otRKiszydCDY9q531U0lvSFQ9-k.roa (raw, json)
Hash identifier: gnSGvbqgxtkHbNOFTt+ktv6F2FJ/txG4ExqUjGRj8J0=
Subject key identifier: A2:D4:4A:8A:CC:F2:74:20:D8:F6:AE:77:D5:4D:25:BD:21:50:F7:E9
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019425FC3C9E1EFAB66985B8D4A439BB9DB8
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/otRKiszydCDY9q531U0lvSFQ9-k.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47164
IP address blocks: 212.231.80.0/24 maxlen: 24
212.231.81.0/24 maxlen: 24
212.231.82.0/24 maxlen: 24
212.231.83.0/24 maxlen: 24
212.231.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 09:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3c:9e:1e:fa:b6:69:85:b8:d4:a4:39:bb:9d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2d44a8accf27420d8f6ae77d54d25bd2150f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:b9:ea:46:0f:4f:25:08:fd:27:d4:68:79:
8f:2a:71:a1:3c:c2:b5:77:03:6c:98:fd:73:c8:22:
33:11:50:65:84:a3:6c:90:d0:6a:e2:b6:5c:0f:ed:
f4:db:18:8a:8f:ad:db:65:e4:e6:1c:ca:ff:27:42:
2a:7c:81:4a:78:f0:16:09:88:b8:23:03:fa:0e:ef:
b1:20:aa:4f:6d:8d:e8:b8:59:11:7e:78:45:ab:f2:
a6:7f:31:84:19:83:35:6f:7d:f8:8d:f0:4a:1d:54:
59:e8:ae:7b:58:6c:e5:01:4f:fe:30:df:1c:4f:14:
cc:a3:01:bc:22:ac:7a:e3:29:14:8d:41:4e:f8:d7:
9f:90:1d:61:19:d6:3c:bd:63:1a:e2:49:1b:20:41:
0f:c3:00:3a:62:e6:4b:79:6c:bc:43:1a:bc:aa:c5:
c5:6a:81:32:aa:26:1b:ff:d9:b3:da:70:45:ad:50:
5d:e8:fb:7f:47:a5:4b:8f:d5:60:92:42:b3:0d:87:
2c:57:69:ed:8f:ea:55:b5:aa:a3:82:3b:d3:25:23:
b5:70:ae:11:2c:87:49:cd:85:0d:8f:f2:f2:ae:23:
9b:61:52:0e:70:7a:5e:2a:8d:cf:5f:9b:a8:97:16:
74:d2:35:66:2f:21:e6:c1:db:a2:74:23:e9:78:74:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:4A:8A:CC:F2:74:20:D8:F6:AE:77:D5:4D:25:BD:21:50:F7:E9
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/otRKiszydCDY9q531U0lvSFQ9-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.231.80.0/22
212.231.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c8:e4:f0:ba:68:7a:ad:6f:e3:1c:7c:72:01:ff:00:14:4b:
49:c6:61:ef:09:0f:dc:3d:c2:36:b4:1e:4e:49:bf:b0:e0:10:
3f:e1:62:06:d5:45:5a:46:8a:0e:ec:10:a5:c1:c3:79:fe:71:
b4:b3:bc:18:43:68:c4:bd:c4:d4:8e:0c:a8:b0:e9:15:56:2e:
47:70:23:34:87:75:7b:7e:41:a7:94:3c:fe:fd:07:72:fb:02:
98:80:fa:f3:28:11:57:51:31:48:06:ba:3b:84:5d:7a:b7:a7:
91:a1:e8:1e:da:79:2c:02:a3:49:a7:15:d7:63:5f:e9:3d:d7:
70:bf:ec:04:ae:12:34:74:b0:ca:a2:17:39:bf:0a:99:0a:dc:
eb:44:c4:9c:58:c3:81:da:47:35:50:c3:4e:93:18:2b:77:6f:
51:03:9b:fd:77:19:5a:1f:b9:a1:62:1f:4d:d2:eb:97:5c:e6:
8c:74:cf:14:7f:82:08:c0:5f:36:c7:06:83:51:b3:46:b9:d5:
69:9d:f7:fa:a3:a6:8e:e9:06:63:d8:73:5b:e4:32:df:5e:be:
9a:b6:d2:d7:00:43:b5:e3:0c:f5:1c:f3:3e:5f:c7:83:aa:1a:
45:b6:ad:33:60:e7:98:97:32:1f:00:f0:41:e8:6a:7b:40:ea:
b9:f2:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:17:05 2025 by rpki-client