Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/NyEPKWd_cq1oYojAxMvJKKe-s7c.roa
File: NyEPKWd_cq1oYojAxMvJKKe-s7c.roa (raw, json)
Hash identifier: sXokYnk7C2B24BduBpcteZL9BohUendZ0PUmQassW4s=
Subject key identifier: 37:21:0F:29:67:7F:72:AD:68:62:88:C0:C4:CB:C9:28:A7:BE:B3:B7
Certificate issuer: /CN=106fc87874912b1813ac4292457abddc018e9b45
Certificate serial: 018CCA2BA59D15A09E3385EA2A28921BA448
Authority key identifier: 10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/NyEPKWd_cq1oYojAxMvJKKe-s7c.roa
Signing time: Tue 02 Jan 2024 12:35:07 +0000
ROA not before: Tue 02 Jan 2024 12:35:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33986
IP address blocks: 212.94.135.0/24 maxlen: 24
212.94.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:a5:9d:15:a0:9e:33:85:ea:2a:28:92:1b:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106fc87874912b1813ac4292457abddc018e9b45
Validity
Not Before: Jan 2 12:35:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37210f29677f72ad686288c0c4cbc928a7beb3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:9a:39:af:1d:7c:04:76:6b:d1:16:f1:e1:
0c:08:64:1c:7b:42:0e:66:18:5a:85:d6:15:92:14:
a0:ed:1d:5c:11:1f:57:49:3c:15:54:2b:c0:87:91:
d7:c2:c2:20:9a:eb:0d:4e:fa:be:c5:59:2b:ea:c6:
4a:9f:b7:40:5d:f1:68:19:3d:1c:7f:4f:c6:a2:65:
16:95:e2:15:77:e7:f7:7a:2d:cc:9b:3e:2e:a8:97:
01:b2:0d:b4:f1:d2:62:5b:7f:a4:fe:6e:51:0d:99:
03:a9:d1:fe:a2:a9:9c:e7:25:b8:ee:61:cc:a2:cd:
5c:ba:0b:0c:6b:27:e0:66:92:9f:8b:de:97:26:fd:
43:e3:0f:ca:9b:d4:a8:97:28:23:78:02:b5:b9:9e:
1a:dc:f0:c3:bb:8a:fb:fd:0b:8b:2d:eb:7e:00:ea:
8e:1a:e0:88:19:c9:b0:e5:50:34:2b:ed:b5:6f:e1:
73:55:ec:4c:be:2e:af:56:45:b1:32:68:f5:da:77:
1d:a7:17:de:cb:e4:13:7d:f6:ba:a6:db:5a:06:e3:
81:8f:85:69:27:7b:93:0b:84:4b:ec:9f:3b:ca:21:
69:10:0d:47:9f:07:02:0d:91:fe:78:e7:4d:84:f8:
cf:26:22:7e:39:85:7c:95:1a:13:31:60:9c:98:81:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:0F:29:67:7F:72:AD:68:62:88:C0:C4:CB:C9:28:A7:BE:B3:B7
X509v3 Authority Key Identifier:
keyid:10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/NyEPKWd_cq1oYojAxMvJKKe-s7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.135.0-212.94.136.255
Signature Algorithm: sha256WithRSAEncryption
32:84:d0:e1:ee:4d:d9:7b:bd:54:24:95:d1:8d:f1:d6:c5:d5:
65:1d:e2:a1:f2:8d:76:6c:a7:d3:92:f8:f9:4f:a8:74:c2:3c:
ca:cb:52:0e:0b:be:f9:7f:a0:29:f7:0c:08:e9:73:28:0b:81:
ee:85:86:1f:63:e3:e0:fc:38:df:02:5c:63:21:2c:a6:95:f7:
78:6a:80:7a:15:53:1d:d9:93:85:8b:45:c7:a1:0f:ae:14:17:
41:d1:90:a5:36:4b:43:29:e5:78:02:da:ce:ab:54:d0:4b:8a:
99:a7:c3:b1:7c:c0:5c:8e:e6:7f:ee:79:f5:d0:f5:35:4a:c8:
ce:58:38:63:8e:6b:38:48:68:0b:5d:ca:3f:74:12:06:41:73:
1a:d5:64:2a:d2:8c:0f:e8:7f:84:c4:ce:23:66:24:20:28:d8:
1f:51:fe:fb:5b:97:d4:b6:4d:6f:d7:7c:c7:56:51:af:e6:82:
86:a3:d2:f0:46:cf:f2:49:78:d5:8c:24:9f:db:53:e6:ee:76:
2b:b0:95:20:e0:28:65:be:fa:66:c6:80:36:ea:ca:3a:9d:57:
c4:68:5f:5e:3c:12:57:54:ba:24:1b:d7:7e:b2:03:4d:70:c2:
7a:e8:a6:2a:de:79:43:61:f0:63:fa:06:a9:10:13:c4:90:36:
5a:33:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:41 2025 by rpki-client