Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/m0pL13Q7YTcMJF_SiEGKIezpwEg.roa
File: m0pL13Q7YTcMJF_SiEGKIezpwEg.roa (raw, json)
Hash identifier: A/A2L/LDuqN0E+QAc7s0zvR3xft3wNsRARYYi8Jp0gs=
Subject key identifier: 9B:4A:4B:D7:74:3B:61:37:0C:24:5F:D2:88:41:8A:21:EC:E9:C0:48
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 019397AA23B171FE857836BE97213AAA9871
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/m0pL13Q7YTcMJF_SiEGKIezpwEg.roa
Signing time: Thu 05 Dec 2024 16:32:10 +0000
ROA not before: Thu 05 Dec 2024 16:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28716
IP address blocks: 212.104.0.0/24 maxlen: 24
212.104.2.0/23 maxlen: 24
212.104.4.0/22 maxlen: 24
212.104.8.0/23 maxlen: 24
212.104.11.0/24 maxlen: 24
212.104.16.0/20 maxlen: 24
212.104.32.0/21 maxlen: 24
212.104.40.0/23 maxlen: 24
212.104.44.0/22 maxlen: 24
212.104.48.0/21 maxlen: 24
212.104.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 08:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:aa:23:b1:71:fe:85:78:36:be:97:21:3a:aa:98:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Dec 5 16:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b4a4bd7743b61370c245fd288418a21ece9c048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:bd:96:a1:b2:33:1e:3e:d2:73:47:0c:de:
52:b8:bd:a6:c1:b9:9f:48:76:80:1e:dc:94:b6:a3:
69:f2:56:d5:06:f6:41:52:90:6d:c3:31:89:da:c8:
2e:63:cc:67:e8:9d:a4:ae:d3:73:90:08:3b:40:5a:
ef:99:65:db:70:c5:37:c9:dc:cd:51:f1:34:20:ea:
b4:46:6e:cd:23:7f:51:5b:87:f2:c9:1c:87:36:80:
8c:5f:34:43:b0:33:21:45:bc:eb:c1:8b:68:5a:73:
4a:65:ac:71:33:ec:13:fd:58:78:9e:74:67:ea:a1:
87:eb:d0:6c:9c:93:eb:a8:15:47:e9:e1:3f:cc:86:
a2:8c:06:42:fb:89:57:53:2a:d2:e2:0a:0c:03:50:
f4:b9:09:0c:f9:68:83:e4:36:43:14:d1:65:96:ba:
79:1b:90:3e:b7:c2:d8:4d:73:e6:6a:89:e7:45:f5:
9a:87:72:bd:9f:1d:11:db:ef:e0:39:ec:61:5e:74:
e4:4d:2f:f2:aa:77:3e:aa:35:2e:ed:a7:1e:72:6b:
46:18:17:60:af:0e:4d:1f:ce:ce:25:b6:08:22:7d:
9c:ac:5a:80:52:40:84:38:ea:c9:a8:bb:05:4c:46:
24:ef:15:f3:6c:17:4b:49:c4:96:50:19:9b:83:75:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:4B:D7:74:3B:61:37:0C:24:5F:D2:88:41:8A:21:EC:E9:C0:48
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/m0pL13Q7YTcMJF_SiEGKIezpwEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0/24
212.104.2.0-212.104.9.255
212.104.11.0/24
212.104.16.0-212.104.41.255
212.104.44.0-212.104.63.255
Signature Algorithm: sha256WithRSAEncryption
34:f5:14:2c:32:8b:95:b6:df:99:64:97:0b:a2:ff:1d:42:36:
ef:13:32:5f:1f:52:06:f6:bd:a3:54:67:bb:35:f5:5a:38:31:
33:18:5f:27:86:3b:f2:0d:f1:95:f6:31:9e:b3:c2:b8:ba:c0:
96:e2:de:8a:7f:de:3a:cb:d4:f2:80:f2:d0:ec:6b:48:3b:55:
63:92:08:9d:5c:10:aa:c0:7f:02:79:33:de:9f:89:58:74:e6:
d8:cf:3f:cc:63:af:2a:b9:38:cd:bc:2b:37:e3:94:d6:80:13:
5a:26:9a:79:51:0d:1a:12:d4:1d:62:3c:c2:50:0a:d9:cc:24:
06:9f:15:e3:6e:cb:42:f4:87:75:b1:1a:9a:f1:70:49:de:ca:
f6:88:47:d9:a3:78:e2:d5:3e:e9:35:7c:bd:ce:59:79:2c:f5:
c7:df:31:29:78:c9:97:33:3c:98:bc:ad:9b:30:f7:75:18:12:
49:a9:1e:00:c4:b0:fa:87:56:db:58:3b:bf:10:02:3b:85:7b:
59:d4:87:92:24:82:9e:e1:00:1e:f3:5a:93:33:61:22:20:71:
4a:73:d7:09:8e:de:bf:7d:50:04:30:a6:44:1e:44:76:c0:b3:
53:84:64:4a:a8:f7:f3:f7:cb:07:18:16:18:97:8e:a4:e3:39:
97:72:59:bb
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZOXqiOxcf6FeDa+lyE6qphxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjQxMjA1MTYzMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRhNGJkNzc0M2I2MTM3MGMyNDVmZDI4ODQxOGEyMWVjZTljMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyC9lqGyMx4+0nNHDN5SuL2mwbmf
SHaAHtyUtqNp8lbVBvZBUpBtwzGJ2sguY8xn6J2krtNzkAg7QFrvmWXbcMU3ydzN
UfE0IOq0Rm7NI39RW4fyyRyHNoCMXzRDsDMhRbzrwYtoWnNKZaxxM+wT/Vh4nnRn
6qGH69BsnJPrqBVH6eE/zIaijAZC+4lXUyrS4goMA1D0uQkM+WiD5DZDFNFllrp5
G5A+t8LYTXPmaonnRfWah3K9nx0R2+/gOexhXnTkTS/yqnc+qjUu7acecmtGGBdg
rw5NH87OJbYIIn2crFqAUkCEOOrJqLsFTEYk7xXzbBdLScSWUBmbg3V1iQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFJtKS9d0O2E3DCRf0ohBiiHs6cBIMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvbTBwTDEzUTdZVGNNSkZfU2lFR0tJZXpwd0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQA1GgAMAwD
BAHUaAIDBAHUaAgDBADUaAswDAMEBNRoEAMEAdRoKDAMAwQC1GgsAwQG1GgAMA0G
CSqGSIb3DQEBCwUAA4IBAQA09RQsMouVtt+ZZJcLov8dQjbvEzJfH1IG9r2jVGe7
NfVaODEzGF8nhjvyDfGV9jGes8K4usCW4t6Kf946y9TygPLQ7GtIO1VjkgidXBCq
wH8CeTPen4lYdObYzz/MY68quTjNvCs345TWgBNaJpp5UQ0aEtQdYjzCUArZzCQG
nxXjbstC9Id1sRqa8XBJ3sr2iEfZo3ji1T7pNXy9zll5LPXH3zEpeMmXMzyYvK2b
MPd1GBJJqR4AxLD6h1bbWDu/EAI7hXtZ1IeSJIKe4QAe81qTM2EiIHFKc9cJjt6/
fVAEMKZEHkR2wLNThGRKqPfz98sHGBYYl46k4zmXclm7
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:08 2025 by rpki-client