Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323134303235.roa
File: 3231322e3130332e34362e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: LFB7Snp5rWp88wE9Fmb9QyFhVldn8ex5y7IOggpdBIs=
Subject key identifier: 10:72:08:B5:EE:A5:77:0B:7E:35:4A:C0:9A:58:E6:38:40:06:55:0F
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 7D7B634E5DDC5BC87B2162F38D589E82B6F6672D
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323134303235.roa
Signing time: Tue 31 Dec 2024 13:22:15 +0000
ROA not before: Tue 31 Dec 2024 13:17:15 +0000
ROA not after: Tue 30 Dec 2025 13:22:15 +0000
asID: 214025
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7b:63:4e:5d:dc:5b:c8:7b:21:62:f3:8d:58:9e:82:b6:f6:67:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Dec 31 13:17:15 2024 GMT
Not After : Dec 30 13:22:15 2025 GMT
Subject: CN=107208B5EEA5770B7E354AC09A58E6384006550F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:08:7e:57:06:3c:5b:a7:ac:9a:d1:9c:04:
ef:24:3a:7a:db:bf:9c:32:f5:52:44:b0:df:b5:6c:
9c:bc:1f:01:f3:7f:37:27:56:ec:08:4f:41:57:f4:
a5:0c:b2:3b:86:ca:f2:91:cc:dc:61:cd:1d:19:ce:
0f:d1:e8:20:a5:03:24:96:10:af:e0:b9:64:ef:9f:
3a:60:1c:14:64:99:d7:4f:b5:30:fe:c1:34:27:ed:
8d:9b:f7:6d:1f:b9:af:c9:9b:62:41:d0:08:53:09:
b0:c2:1f:1a:c6:82:03:9a:86:1b:ed:5b:50:25:95:
cf:a1:0f:96:68:e5:fa:cc:57:a8:3e:a9:1a:0c:68:
a9:d4:9d:fb:0a:03:9f:0f:f1:aa:46:bb:74:fa:c1:
a2:b3:35:cb:47:d7:01:d2:7c:d5:4a:a6:d5:c2:42:
13:6f:49:9d:ba:42:0c:df:28:df:2b:ea:c7:a0:86:
bd:cc:ea:e8:9e:24:af:d8:7c:23:c4:ec:58:18:27:
f7:49:d0:90:1d:c4:78:b1:e4:20:1e:84:31:59:45:
d7:a6:28:90:83:d5:ef:92:3d:12:40:04:6c:ae:de:
4c:e1:0b:0a:38:de:f2:66:91:32:7a:fe:61:66:6b:
47:9a:2d:ee:9d:03:2a:d8:cc:9a:3f:68:9e:53:3e:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:72:08:B5:EE:A5:77:0B:7E:35:4A:C0:9A:58:E6:38:40:06:55:0F
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ff:0f:58:3d:72:f5:5f:be:d9:b4:3c:c7:80:18:d2:6d:e9:
50:b1:98:b8:75:86:54:5f:c8:5f:a8:e2:47:74:77:bd:4b:73:
85:99:c0:1b:18:fd:d8:76:23:5d:33:24:d6:d7:59:3c:52:ee:
66:9c:80:72:4a:1f:c4:49:dd:9d:42:6f:ae:7e:19:97:ad:c3:
38:97:24:9a:6a:26:51:9a:70:fb:78:86:10:4e:d3:c8:af:08:
b3:92:a2:e3:b6:31:90:72:aa:26:ad:03:e6:19:42:9e:27:85:
d9:34:cc:1b:6d:34:02:68:7b:ac:95:ef:0a:45:2d:b7:9d:7d:
fd:e5:5b:65:4b:f9:6e:ee:c4:fe:7a:7a:5e:c7:61:56:4c:b5:
6c:bd:f6:a2:53:08:18:ab:ea:1c:93:77:5b:5e:e4:c8:6c:c2:
f7:ce:d9:e8:f0:12:fb:c7:61:89:9f:de:fc:b6:b2:17:64:bf:
8c:49:ea:89:35:39:e2:6b:0a:af:c2:df:5c:ec:13:cc:12:73:
f7:3f:9e:33:5b:47:eb:6d:8e:8d:1d:21:aa:15:81:43:cb:ec:
2d:de:1e:aa:dc:f4:c9:ec:36:d4:25:88:61:90:01:8d:1d:7c:
85:ed:fc:be:63:81:06:57:fd:06:11:b6:99:5d:69:ae:65:08:
aa:5e:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:40 2025 by rpki-client