Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20323130353335.roa
File: 3231322e3130332e34372e302f32342d3234203d3e20323130353335.roa (raw, json)
Hash identifier: /a4BtP6sXpYxc1umvjg2uYG3KwQNljiJxJMIcDKSNo8=
Subject key identifier: 02:74:5A:F7:15:41:86:75:FF:0E:EE:A5:1C:12:AC:D6:2C:1B:09:CF
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 55CB93C738300BA39081E7C267E7BACFBD6E3F7F
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20323130353335.roa
Signing time: Wed 27 Nov 2024 19:49:38 +0000
ROA not before: Wed 27 Nov 2024 19:44:38 +0000
ROA not after: Wed 26 Nov 2025 19:49:38 +0000
asID: 210535
IP address blocks: 212.103.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cb:93:c7:38:30:0b:a3:90:81:e7:c2:67:e7:ba:cf:bd:6e:3f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Nov 27 19:44:38 2024 GMT
Not After : Nov 26 19:49:38 2025 GMT
Subject: CN=02745AF715418675FF0EEEA51C12ACD62C1B09CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:37:ae:93:5c:e3:ec:78:7f:4a:8c:86:d8:
7a:02:93:8c:17:d4:b1:5d:a2:78:0c:40:28:9f:dc:
c2:49:2b:f0:d4:6e:60:29:a1:ba:9c:64:19:25:da:
1e:49:6b:c6:e0:15:05:9f:fd:db:19:f1:f1:fe:0f:
d2:fd:bf:98:22:cd:40:25:cb:e4:03:10:6b:1a:7c:
53:92:f8:cd:98:56:dc:65:29:5b:23:4a:98:bc:f6:
00:60:cf:16:78:60:34:d2:d6:08:cb:75:91:c8:56:
ea:dc:a3:8c:dc:46:13:72:e8:99:e0:6d:24:b7:07:
b7:07:76:a6:23:65:41:75:5e:bb:8d:8b:22:08:1a:
18:3a:8b:ff:7d:23:5e:c9:40:d8:57:25:23:8e:2f:
c7:f3:de:d5:c4:fc:57:55:12:3c:21:98:2b:07:4e:
63:e7:3c:df:d5:3f:f4:ec:cb:72:d6:25:50:58:bb:
0c:73:0f:e4:42:a7:ca:d0:10:5b:54:fe:de:df:57:
53:8f:d7:08:9a:43:3d:8b:6e:83:cf:c3:82:43:d0:
e0:c8:8d:2f:43:86:95:00:bd:d7:5b:6c:21:99:1a:
82:c4:11:fb:57:4c:ff:9e:03:17:ba:e5:84:e5:cf:
7d:bb:a4:de:d7:96:49:a0:af:1e:d8:1f:9f:a2:64:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:74:5A:F7:15:41:86:75:FF:0E:EE:A5:1C:12:AC:D6:2C:1B:09:CF
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20323130353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.47.0/24
Signature Algorithm: sha256WithRSAEncryption
12:de:cd:b2:8f:5a:4d:7a:2f:6d:0e:6f:ab:9d:ca:88:69:d4:
4b:2a:4c:dd:eb:24:01:13:c5:b8:0e:5e:e9:bc:d0:a7:60:42:
5e:13:40:b8:5c:90:87:90:97:1d:70:3d:92:eb:63:9a:80:ec:
5c:21:aa:0a:6b:1a:08:4e:6d:fc:71:bb:11:48:ed:1e:f0:40:
89:0c:e2:7a:55:f0:a8:5e:2d:a9:6e:1a:ad:f1:8d:b4:d3:19:
24:41:c5:c0:d3:42:c2:68:a9:82:9e:cf:75:ae:92:2c:52:c9:
11:9f:9c:1e:0f:5b:a8:8d:1a:0a:cc:36:f5:29:97:7c:80:79:
79:49:a6:83:22:86:d3:4d:4a:e6:5f:38:5e:51:d2:69:c4:95:
a1:5e:32:2d:7f:b3:f7:cd:e4:1b:75:45:8e:84:00:9d:10:47:
e5:8c:f6:99:95:21:a0:01:04:34:0e:d5:3b:00:cf:83:83:82:
6d:f2:3d:c1:aa:eb:dd:90:df:f5:b3:dd:cd:a1:75:f8:ea:4c:
4c:a1:39:60:9d:f3:02:6b:46:71:ad:0a:d3:e6:ac:87:37:0e:
eb:e1:ac:69:2b:5c:8b:c7:b2:cf:1e:86:9d:1c:8d:6c:04:1d:
05:fc:cc:8b:d9:54:87:01:60:cf:c7:e7:a2:d6:50:e3:3a:fe:
df:bb:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:27:00 2025 by rpki-client