Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/1-58xwKRptK1BNgXFfLys5TTKchI.roa
File: 1-58xwKRptK1BNgXFfLys5TTKchI.roa (raw, json)
Hash identifier: VtX2+Dmc+7ogvkINChJlC9zpXPrJS6bKVxvODMtMkIs=
Subject key identifier: FB:9F:31:C0:A4:69:B4:AD:41:36:05:C5:7C:BC:AC:E5:34:CA:72:12
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 018D31D1886F1860016269A84838FA47A23E
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/1-58xwKRptK1BNgXFfLys5TTKchI.roa
Signing time: Mon 22 Jan 2024 15:37:11 +0000
ROA not before: Mon 22 Jan 2024 15:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209525
IP address blocks: 212.78.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:d1:88:6f:18:60:01:62:69:a8:48:38:fa:47:a2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jan 22 15:37:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb9f31c0a469b4ad413605c57cbcace534ca7212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e1:3b:44:e5:91:0c:24:0b:e8:90:ed:81:a7:
bd:0e:fa:b2:53:07:cd:f6:f2:4d:47:1d:ec:d6:bb:
ed:3e:69:1d:a1:af:cd:82:65:b9:20:89:a9:32:67:
f4:82:17:00:75:ab:14:ab:d0:f4:fc:bc:57:08:79:
ca:71:31:fd:63:f3:3e:ac:ff:d2:95:87:68:57:62:
ca:49:34:a9:a3:73:94:14:2c:77:af:c9:38:18:6a:
16:18:4e:41:80:6e:21:eb:51:98:65:4a:b0:d6:2c:
b0:51:e8:89:ed:c7:5b:be:0d:16:25:45:df:0f:8c:
fe:02:fe:b8:99:c6:4d:1e:7b:d2:4a:5e:90:1f:f8:
ec:b0:c0:d3:d7:e4:88:b1:ab:c2:35:32:d4:c0:a9:
7d:aa:dc:73:0a:f8:04:96:02:98:7d:8a:f2:2d:b2:
12:c3:21:31:9c:75:59:c6:d1:9a:b7:80:ae:bb:23:
35:92:49:f0:fa:cc:b4:03:6c:44:0a:59:0a:af:6e:
9f:36:65:3e:3a:71:63:e0:a2:74:22:cc:81:76:5c:
5f:d4:5d:b5:c3:67:85:08:32:b9:9b:0e:68:0f:36:
ab:3e:d5:70:30:60:7e:b6:bf:fc:e8:82:6a:7d:b8:
20:fa:8c:51:4c:6d:e9:c6:73:a5:99:01:75:88:8c:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9F:31:C0:A4:69:B4:AD:41:36:05:C5:7C:BC:AC:E5:34:CA:72:12
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/1-58xwKRptK1BNgXFfLys5TTKchI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.36.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8e:16:62:56:09:3f:c5:f2:37:a2:3d:0c:51:9a:3d:23:e0:
9a:c7:15:d6:0c:54:fb:e1:44:90:fd:a5:94:10:07:0c:4c:54:
36:0f:2b:a4:a1:4e:e9:b0:e0:a0:99:3b:e2:d5:ee:83:cc:50:
30:98:05:37:e5:3f:1f:64:8c:18:e7:1d:78:d9:92:72:d4:52:
bc:94:d0:3e:bb:bb:56:a5:c7:45:86:09:4b:b2:34:c3:b7:8a:
5f:d2:e1:ce:35:d5:c7:a5:e3:79:bf:18:96:a8:d7:7b:fb:fd:
b0:75:1c:42:16:5b:93:44:d4:03:45:73:b0:34:e0:66:8c:6a:
2e:04:30:d9:cd:d4:5c:c1:64:ff:0b:0a:eb:de:76:37:d1:2a:
a8:05:ef:1f:e0:d0:0f:90:41:57:83:17:e8:66:44:81:f6:dd:
da:4d:7e:15:95:dd:e7:af:46:de:9b:64:be:8b:67:24:cc:3b:
6b:06:99:c5:34:63:fc:1b:03:6d:90:53:97:e8:62:77:f8:bd:
ac:01:70:9f:6d:23:51:26:1d:13:1c:65:fb:a5:0b:d0:b6:cf:
6d:ca:66:bd:ad:52:77:d9:87:53:5d:89:30:8f:68:98:02:75:
18:c8:1b:55:21:d6:40:00:b9:79:a9:37:02:32:eb:81:a1:62:
97:5c:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:49 2025 by rpki-client