Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/7VZaz6j8jgJkQYlvRokCHuod22M.roa
File: 7VZaz6j8jgJkQYlvRokCHuod22M.roa (raw, json)
Hash identifier: LOrKGfQIp3WKGhQdrOjIAQdGHyTi4nq2/kIp/8COvS4=
Subject key identifier: ED:56:5A:CF:A8:FC:8E:02:64:41:89:6F:46:89:02:1E:EA:1D:DB:63
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 0190C4FC698BBE4CFCD465A24DF6058FEA3E
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/7VZaz6j8jgJkQYlvRokCHuod22M.roa
Signing time: Thu 18 Jul 2024 08:36:34 +0000
ROA not before: Thu 18 Jul 2024 08:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16339
IP address blocks: 212.78.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:fc:69:8b:be:4c:fc:d4:65:a2:4d:f6:05:8f:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Jul 18 08:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed565acfa8fc8e026441896f4689021eea1ddb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:bc:e2:98:1d:83:a4:c6:06:37:40:bf:89:
5e:27:69:ba:d0:c9:03:fb:68:f6:cb:71:ea:68:a4:
89:85:88:fa:55:4b:7f:9f:6f:0d:df:04:d1:f4:20:
b6:72:af:db:77:1d:0b:62:84:15:22:fe:f2:13:eb:
c3:95:26:5b:52:20:12:c8:d3:ad:ed:4d:3e:db:8a:
a0:2b:6c:f1:48:85:44:a5:29:a3:c6:c8:45:92:a2:
45:cd:6a:c0:8b:4a:8f:98:36:79:d1:c5:c3:5a:7c:
37:0b:17:98:75:1b:06:4e:de:5e:aa:1f:a9:88:5d:
c1:bb:ff:af:1b:1b:b2:f2:47:ae:a5:96:b7:18:37:
0f:1e:38:ec:6c:17:00:89:c1:f7:12:f0:76:f6:97:
8c:a3:40:0e:8e:e1:02:f1:1b:b6:4a:db:b4:8b:8b:
ab:5c:d6:63:1f:28:a6:b5:9e:41:8d:d0:8f:68:e1:
1a:a4:8d:96:0e:2b:7a:b2:18:40:5c:7d:a0:62:11:
f6:1c:cc:42:43:75:d1:40:bb:f2:cd:33:7d:fd:bd:
4e:1c:99:6c:fb:64:5e:96:b0:4a:43:f3:1d:9f:61:
95:df:4a:29:9e:d1:77:18:34:27:32:a2:9a:6c:c0:
45:90:c7:ed:aa:3c:3e:71:f4:45:4d:65:a4:ff:35:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:5A:CF:A8:FC:8E:02:64:41:89:6F:46:89:02:1E:EA:1D:DB:63
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/7VZaz6j8jgJkQYlvRokCHuod22M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
27:ac:ce:3e:7e:dc:fc:d3:4d:51:eb:ad:9f:b4:55:37:57:31:
c8:b7:18:35:16:c2:95:cf:69:cf:b2:ea:5f:46:34:ec:c6:8b:
96:3f:8a:7e:d2:08:d9:2d:44:7f:5a:9e:8e:7a:08:47:a6:13:
18:4c:7e:a8:76:7c:e8:15:9e:76:52:a5:f9:f9:87:f3:a2:e5:
8a:3a:79:a9:49:d2:74:1a:2a:0c:bf:4e:af:a7:03:6a:93:a4:
d1:48:26:72:db:ab:5a:e6:13:1a:0b:b6:e1:24:47:6f:71:b7:
9f:e7:34:76:2d:6d:1a:af:ab:20:61:ac:aa:93:5c:6a:d7:4b:
27:77:5f:0d:b0:f5:d8:69:02:53:fc:7f:12:52:2b:b2:91:e2:
44:01:23:d5:55:0a:c8:01:8c:14:be:c0:a8:fd:cc:a6:71:b8:
cd:c4:39:c1:48:35:cd:4e:85:2b:15:ea:ee:bd:6e:25:e2:01:
16:a0:96:0f:c6:98:c9:f3:52:ab:dd:c1:3a:c9:e5:4a:99:3f:
13:a8:f2:84:b8:0b:6d:d1:70:30:4f:54:57:0b:d1:b6:4e:df:
2e:bd:cf:9d:a9:c4:3a:9f:a3:ce:43:e2:3e:76:32:20:90:31:
ec:88:bf:cf:6e:93:a3:f5:68:ce:dd:ee:d9:69:a8:31:69:4e:
4e:e5:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:53 2025 by rpki-client