Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/mNONJ1lbongMcV9joG0I54juE3s.roa
File: mNONJ1lbongMcV9joG0I54juE3s.roa (raw, json)
Hash identifier: d6mQ7+E4lWyzSp2gh/tWF50PAdN5SDHOSN4N03ITiaA=
Subject key identifier: 98:D3:8D:27:59:5B:A2:78:0C:71:5F:63:A0:6D:08:E7:88:EE:13:7B
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 018CC9BB3AD4A4F921DC33BF9EE806A55D8E
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/mNONJ1lbongMcV9joG0I54juE3s.roa
Signing time: Tue 02 Jan 2024 10:32:19 +0000
ROA not before: Tue 02 Jan 2024 10:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31367
IP address blocks: 212.69.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 13:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:3a:d4:a4:f9:21:dc:33:bf:9e:e8:06:a5:5d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Jan 2 10:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98d38d27595ba2780c715f63a06d08e788ee137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:4e:01:ba:a0:cb:3d:50:d4:90:1f:35:44:
e0:a0:53:f6:b1:5c:06:6c:d7:64:d5:15:98:d8:7a:
f4:a8:f0:db:0e:0d:73:e3:0f:02:10:6d:5d:6f:c8:
a0:d3:eb:d8:5d:7d:89:3e:a0:24:71:fb:80:65:0e:
c5:46:06:f2:00:e8:cf:70:6b:5d:ea:4f:11:7e:ce:
2a:61:73:e4:e6:59:4c:2d:89:b1:15:68:0c:f8:af:
70:ea:7c:bb:20:69:a6:ed:6d:9d:71:2e:d6:db:94:
1b:cb:8d:00:54:be:9c:37:9e:30:50:6f:84:26:fc:
c8:5a:7c:51:7c:6d:2b:ea:57:09:83:92:87:e0:e7:
65:82:b6:dc:e0:86:4e:1e:ca:9e:e7:cc:64:08:d4:
10:98:90:98:74:89:90:c5:a4:48:78:8a:ca:04:1f:
11:2f:c8:dd:91:ba:ab:a3:8f:29:c7:c1:73:b7:eb:
73:f6:fd:35:46:f9:37:ca:99:2a:f3:56:42:4c:fb:
29:4c:a0:48:b7:81:5c:bb:c4:26:07:54:90:3f:d3:
55:67:c3:5d:05:31:48:c9:83:06:30:7b:64:5d:1f:
26:55:10:96:00:62:87:8e:28:08:00:5b:ab:73:88:
3e:01:28:0b:b4:07:12:50:5b:85:45:59:d6:a5:f2:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D3:8D:27:59:5B:A2:78:0C:71:5F:63:A0:6D:08:E7:88:EE:13:7B
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/mNONJ1lbongMcV9joG0I54juE3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.185.0/24
Signature Algorithm: sha256WithRSAEncryption
89:14:2c:e3:cc:36:4e:0e:26:2e:6d:26:13:65:11:42:f9:75:
90:6d:71:56:a0:55:1a:7d:e4:99:3d:99:a9:80:9b:a0:4e:2d:
3a:de:80:ad:49:e2:e9:72:31:49:26:bd:2b:7a:72:fc:58:1e:
e7:7f:49:10:c5:36:86:c1:61:0f:39:c3:94:78:3c:7b:8f:1c:
68:5b:52:46:52:6d:bb:08:3c:c2:e5:a0:3a:db:ea:64:33:6c:
4c:53:00:b3:9d:f9:67:63:f3:7b:9c:58:e8:71:c8:19:bd:95:
d5:5a:e4:c1:d2:78:59:cc:a9:e0:5d:d4:53:ac:ad:cf:c9:67:
4b:60:25:9d:c7:59:6c:40:b9:7c:6c:0f:b9:f0:98:3d:a4:68:
90:f1:da:39:5c:19:79:26:78:ba:fe:6b:f0:ae:c0:b1:12:0b:
91:98:eb:39:be:a9:54:1c:97:9c:57:7d:a5:8a:72:5c:14:7e:
c3:39:df:2d:58:1b:b9:83:2b:ad:15:78:f9:7b:a5:e5:57:99:
3f:12:13:ba:01:b8:b5:d8:db:a5:23:39:7e:f2:4a:e0:15:16:
f9:a1:38:92:45:73:16:c0:25:00:b5:eb:eb:b0:f7:35:ed:f7:
89:22:66:7f:ba:ba:ba:f5:01:28:44:bd:3b:58:a7:6e:71:7b:
10:5b:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:00 2025 by rpki-client