Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/i3GBSuE3peOJ1ZFT7vrJJD3hwlo.roa
File: i3GBSuE3peOJ1ZFT7vrJJD3hwlo.roa (raw, json)
Hash identifier: 9N+edsTDYjew1YBJzM8a4nr/BjFmf0g5eDmk8OOebZE=
Subject key identifier: 8B:71:81:4A:E1:37:A5:E3:89:D5:91:53:EE:FA:C9:24:3D:E1:C2:5A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 01906182A17678E40DDF17826109FFB84C67
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/i3GBSuE3peOJ1ZFT7vrJJD3hwlo.roa
Signing time: Sat 29 Jun 2024 01:01:09 +0000
ROA not before: Sat 29 Jun 2024 01:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 212.60.10.0/24 maxlen: 24
212.60.11.0/24 maxlen: 24
2a09:800:2000::/35 maxlen: 35
Validation: Failed, certificate revoked on Sun 07 Jul 2024 14:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:61:82:a1:76:78:e4:0d:df:17:82:61:09:ff:b8:4c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jun 29 01:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b71814ae137a5e389d59153eefac9243de1c25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:b2:70:cc:88:dc:07:3a:53:e4:19:6e:c0:
9d:34:fd:57:73:66:bb:a2:d5:f5:1a:83:68:a4:2f:
2b:88:dd:d9:d1:7e:ec:c5:06:e7:54:c0:7f:48:81:
29:dc:9b:d2:64:b4:87:d3:60:5d:96:84:35:4c:c7:
fc:9c:05:15:41:b0:27:b4:4d:9b:ec:17:b8:ab:1b:
9e:53:19:d2:78:2f:87:06:5b:df:88:5b:f3:14:f1:
fd:53:bf:72:2d:f2:a2:a5:1c:9c:b2:75:60:ae:3e:
85:ef:e3:1d:b7:bf:11:30:7c:1a:4b:c7:75:97:ca:
c6:a5:b2:84:33:b3:ff:22:94:25:ec:fb:a4:de:c8:
12:00:ba:44:63:e8:94:7c:b7:f0:6f:aa:4e:f8:a2:
bb:16:5c:39:3b:d8:27:be:ab:a7:68:7f:0d:24:a0:
6a:62:32:81:c6:16:3c:75:03:7a:b2:59:1f:7d:6b:
99:3e:61:84:d2:6f:01:2d:63:0d:e2:76:0a:ab:3a:
e6:63:62:9f:00:56:22:47:dd:83:4e:4c:08:a2:ff:
d8:6e:85:45:fb:d8:1e:35:29:d7:5a:e5:09:d5:ac:
e4:15:3b:9f:10:c0:01:00:be:df:29:af:73:28:6d:
66:ee:65:ab:d8:6d:0a:70:c6:8b:95:72:0b:30:a0:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:81:4A:E1:37:A5:E3:89:D5:91:53:EE:FA:C9:24:3D:E1:C2:5A
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/i3GBSuE3peOJ1ZFT7vrJJD3hwlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.10.0/23
IPv6:
2a09:800:2000::/35
Signature Algorithm: sha256WithRSAEncryption
4b:bf:5f:f6:a6:af:89:0a:7e:7d:04:cd:a7:30:1c:f2:e0:49:
49:60:78:a5:fd:86:28:f3:8a:2a:09:ff:d1:0e:72:f5:50:27:
5d:6f:77:a9:89:5f:83:40:e2:77:88:cb:4d:1e:65:f3:59:b6:
4e:7f:43:3a:f9:0c:be:e6:9c:7f:8e:a4:18:a2:0f:55:c6:61:
aa:ca:70:c7:9b:b3:50:92:51:72:6c:d7:cd:b4:fb:aa:84:2d:
29:80:59:14:80:ce:b7:b2:32:60:ac:bc:bb:48:a1:3f:aa:26:
72:52:1c:40:da:77:22:cc:00:56:cf:89:77:fa:8e:10:64:1f:
0d:17:f6:02:a1:eb:77:ff:21:6b:9c:72:d9:5c:0b:18:ec:26:
2c:3e:6c:d7:0b:45:2b:73:9b:0f:eb:ac:fd:0f:03:4f:5e:4d:
2c:6c:ff:ec:cf:9b:cc:e9:f8:45:e2:67:b8:75:2d:7e:2e:20:
ef:ee:8d:ab:06:c8:01:7d:af:81:f0:6c:a8:7b:e5:89:89:a3:
81:a5:fb:2b:84:ee:6b:1d:66:a0:81:7d:14:9b:64:06:b2:fc:
c9:c7:8e:20:56:ee:59:26:b2:63:27:da:f6:26:ac:c1:9a:f3:
31:9f:f6:9d:50:4f:d8:da:b5:10:2c:75:94:e5:5b:6e:b9:c8:
0b:94:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:54 2025 by rpki-client