Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34352e302f32342d3234203d3e20383334.roa
File: 3231322e3130332e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kRW8E8r+WGMmO2xBwH7xV6f7kRMPaFGSq+MQr0lUgl8=
Subject key identifier: E1:97:BD:54:5C:51:65:0E:0F:6C:F5:58:22:61:5C:84:E0:63:A6:8E
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 26A9965D0DB201D9F16AC81E36937C6ACEB1C5E5
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34352e302f32342d3234203d3e20383334.roa
Signing time: Wed 27 Nov 2024 06:44:58 +0000
ROA not before: Wed 27 Nov 2024 06:39:58 +0000
ROA not after: Wed 26 Nov 2025 06:44:58 +0000
asID: 834
IP address blocks: 212.103.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 12:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a9:96:5d:0d:b2:01:d9:f1:6a:c8:1e:36:93:7c:6a:ce:b1:c5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Nov 27 06:39:58 2024 GMT
Not After : Nov 26 06:44:58 2025 GMT
Subject: CN=E197BD545C51650E0F6CF55822615C84E063A68E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:c8:52:07:5e:6e:e1:5a:91:bb:44:4c:02:
03:fb:97:6b:05:c0:25:a2:a6:b1:09:36:47:b5:43:
62:73:15:75:d7:ff:47:44:20:7f:cc:73:fc:f6:19:
ef:42:81:46:a0:9f:af:0c:43:74:cb:be:ae:00:52:
4c:61:81:3d:7b:a5:50:24:bd:f7:fa:d3:c7:8f:84:
2e:06:d2:7e:aa:6f:dc:21:a9:2d:50:2f:a4:9d:7f:
6b:71:1c:12:d4:4e:77:96:17:0d:28:e1:aa:b3:23:
56:c6:59:95:ec:c2:a3:bd:60:77:b9:dc:ab:b6:16:
70:fc:99:32:e1:a3:0f:50:b3:51:7f:3f:79:e5:51:
57:1c:e5:d7:e6:15:e3:1b:d1:03:65:25:cc:11:c6:
7a:6b:40:f1:ae:ca:c8:82:fd:3b:32:f0:f2:ef:1a:
61:67:36:c6:16:c9:a7:0f:ce:82:b3:72:62:85:52:
3e:ea:a9:65:ab:e5:36:77:d3:51:a7:ce:b8:ef:3c:
d3:0f:85:c2:d0:c4:35:1e:4e:c0:a9:d1:5f:35:2a:
1e:02:88:b4:8b:75:b8:eb:03:93:09:0d:18:33:81:
a7:a6:b0:ef:6c:19:3c:d8:33:ba:e7:94:e2:c5:85:
61:19:d2:08:8b:1b:1e:f1:d5:dc:87:d6:84:db:69:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:BD:54:5C:51:65:0E:0F:6C:F5:58:22:61:5C:84:E0:63:A6:8E
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.45.0/24
Signature Algorithm: sha256WithRSAEncryption
89:33:bc:92:46:4c:b7:79:44:f8:d1:9a:1d:c5:3c:c4:ce:71:
dd:d1:7e:62:ec:1a:03:b1:cc:38:36:21:8b:85:74:0b:e8:3b:
24:9d:bd:9e:8d:2b:58:23:91:87:62:72:1e:7b:9e:f4:8f:68:
3d:f3:0f:a2:9c:75:70:19:fe:9e:1b:4d:16:e1:fb:3b:05:2b:
c1:96:e1:a7:18:7c:ee:95:d0:e4:13:48:27:e5:14:d4:26:a1:
6b:2e:29:18:dd:6e:0a:70:ed:e0:88:59:76:f5:05:58:ca:2c:
5e:00:d9:f3:97:9e:f0:d5:af:6e:79:41:5e:97:aa:ad:50:dd:
21:bc:79:e9:d8:53:89:46:37:93:19:b2:93:29:54:0e:ce:00:
79:79:38:a9:d1:91:36:d1:3d:37:e4:66:ea:46:85:db:1e:f6:
fd:f6:54:8c:f3:62:ca:19:70:36:db:62:7c:bc:8a:bc:0f:25:
99:d8:9c:33:18:d3:9a:a5:64:9c:ef:cc:4c:d9:e9:08:3d:8a:
65:93:32:d3:c5:e5:62:bf:f4:39:e6:22:0d:d5:e2:d2:42:7e:
2a:cd:da:83:79:1e:86:26:b1:ac:31:66:b2:08:7e:24:b4:5a:
74:54:d1:37:fa:fe:b3:2e:00:08:26:1e:43:34:cc:dc:52:00:
ed:66:ee:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:21:29 2025 by rpki-client