Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/rJvdzUm0s66MyI-ExwlwiWCe80g.roa
File: rJvdzUm0s66MyI-ExwlwiWCe80g.roa (raw, json)
Hash identifier: xdzO0Hsd3Y0/GwSvmKdmipU9/5G6Be+WdVAF+uXXXR0=
Subject key identifier: AC:9B:DD:CD:49:B4:B3:AE:8C:C8:8F:84:C7:09:70:89:60:9E:F3:48
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 018D9CE0CF9489727F36625600D268B0852A
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/rJvdzUm0s66MyI-ExwlwiWCe80g.roa
Signing time: Mon 12 Feb 2024 10:33:15 +0000
ROA not before: Mon 12 Feb 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28716
IP address blocks: 212.104.0.0/24 maxlen: 24
212.104.2.0/23 maxlen: 24
212.104.4.0/22 maxlen: 24
212.104.8.0/23 maxlen: 24
212.104.16.0/20 maxlen: 24
212.104.32.0/21 maxlen: 24
212.104.44.0/22 maxlen: 24
212.104.48.0/21 maxlen: 24
212.104.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 12:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:e0:cf:94:89:72:7f:36:62:56:00:d2:68:b0:85:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Feb 12 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac9bddcd49b4b3ae8cc88f84c7097089609ef348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:41:5a:c4:4a:09:54:6b:d3:7f:4f:91:bb:
00:ee:da:c0:15:6c:93:15:f2:a5:1a:cb:95:69:fe:
50:d1:6c:8a:f6:17:92:d7:42:8b:30:88:06:1a:bd:
e6:39:ae:fd:92:dd:46:c5:8e:72:8c:66:28:b1:1c:
f6:2c:eb:77:fd:d7:fa:0e:aa:88:42:de:1d:76:ef:
5f:18:51:61:38:62:5f:35:02:56:11:7f:85:3e:b4:
cb:c1:d5:0a:01:f3:75:90:42:64:2b:12:81:99:8d:
66:96:36:a9:3d:a5:18:0f:23:7e:f9:5a:97:28:19:
31:b9:7d:c3:ac:96:1f:89:1c:ae:44:4c:ee:68:35:
91:df:1a:1f:ad:64:01:0f:b2:3d:bf:93:6c:95:5b:
c3:03:e2:5d:f8:c0:d0:de:6a:30:86:9f:cd:0b:29:
2a:15:9f:b2:78:f5:33:9c:33:2b:d2:19:8e:1d:30:
4b:5b:ab:10:e6:72:c2:56:3a:da:e7:2d:eb:fc:20:
a1:42:bf:3b:86:76:49:b6:9c:39:36:7e:a1:c4:f9:
68:c7:d5:7a:80:29:70:dd:f6:f7:be:e6:ca:00:80:
4a:26:7a:3a:3d:3f:7b:3d:a1:90:0d:1e:09:f0:94:
f6:a9:04:1c:7a:7a:3c:ab:ef:27:1e:1e:a6:5f:12:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:DD:CD:49:B4:B3:AE:8C:C8:8F:84:C7:09:70:89:60:9E:F3:48
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/rJvdzUm0s66MyI-ExwlwiWCe80g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0/24
212.104.2.0-212.104.9.255
212.104.16.0-212.104.39.255
212.104.44.0-212.104.63.255
Signature Algorithm: sha256WithRSAEncryption
51:bb:9d:3e:c4:0d:84:3f:bd:35:4a:c0:69:62:3f:56:fb:b2:
9d:0b:36:5f:15:75:4d:67:d0:03:b4:88:2a:60:c3:dd:6f:d8:
d1:59:68:64:80:96:b8:5c:c8:ee:a3:14:d6:b0:02:81:c9:4b:
2d:88:c3:56:b8:9c:9d:17:26:84:f7:8c:2f:24:62:a3:17:44:
d0:1b:6c:22:84:bc:88:bb:59:c2:c5:de:0d:77:ab:d4:d0:c9:
ea:32:34:08:55:9c:de:0e:a8:a8:67:c6:94:be:cd:8f:72:d8:
1c:4a:97:cf:36:d6:c2:5f:90:e6:19:87:1a:0d:4f:94:f2:20:
1c:1a:1e:6c:83:bc:e0:74:41:43:78:b4:df:0b:d2:5f:31:26:
af:f0:0a:b7:5c:ec:b0:78:60:d9:4d:fc:9a:22:ea:02:3b:4e:
15:01:70:63:06:ce:b4:55:39:62:48:96:d8:de:8a:f0:ac:d0:
88:17:1c:bc:e4:9f:05:bb:02:e9:79:4b:9b:9d:59:e7:0c:59:
a7:00:5e:cc:7f:85:91:a4:57:0a:a2:91:35:6b:50:2b:90:df:
cf:48:40:02:22:02:8e:16:c6:a5:ce:4c:1b:0b:e3:bc:b3:88:
11:7b:0f:e4:f4:86:e2:73:ff:e5:25:ce:7f:f2:86:fc:9d:0e:
ef:04:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:10 2025 by rpki-client