Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12876.roa
File: AS12876.roa (raw, json)
Hash identifier: KKiPWnlT4QdhBT7xIQeJvQGNeHXx43a5EFIylxZ8TYs=
Subject key identifier: 44:2D:83:97:12:52:D2:B1:C3:E7:2A:21:91:2F:F4:04:D3:74:45:AC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2F2942A1AF529F817E9F27E16655FCF52D4C6636
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12876.roa
Signing time: Tue 03 Dec 2024 12:21:38 +0000
ROA not before: Tue 03 Dec 2024 12:16:38 +0000
ROA not after: Tue 02 Dec 2025 12:21:38 +0000
asID: 12876
IP address blocks: 46.202.72.0/24 maxlen: 24
46.202.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 14:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:29:42:a1:af:52:9f:81:7e:9f:27:e1:66:55:fc:f5:2d:4c:66:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Dec 3 12:16:38 2024 GMT
Not After : Dec 2 12:21:38 2025 GMT
Subject: CN=442D83971252D2B1C3E72A21912FF404D37445AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:7e:70:2a:80:e6:f1:0c:d4:21:ee:51:0e:
4d:3b:76:31:db:ea:35:d3:2d:e9:ec:aa:29:c5:89:
fe:eb:27:fd:ca:c0:fa:b2:58:3e:01:1d:5b:25:e4:
bd:bc:fc:dd:0d:c4:d9:ff:83:b2:bc:d5:8f:06:95:
a7:5f:9e:5c:11:a6:51:5a:3d:d6:89:58:f9:f3:82:
02:70:5a:46:03:a4:2c:24:62:e6:9b:3d:af:da:68:
5d:7e:c4:30:39:73:94:e9:eb:7e:a3:8a:09:2d:28:
c8:59:a4:e0:fe:85:0f:fd:ff:95:50:f9:53:26:24:
b2:01:a6:79:cf:e7:73:8b:eb:02:45:ac:08:23:6f:
26:e4:f9:4b:f7:6a:de:93:97:63:53:da:13:17:8e:
c0:06:5a:36:7c:fb:27:24:45:28:e5:be:e2:6c:f2:
5d:dc:3d:41:4a:ed:d8:23:14:b5:3f:86:0d:6b:12:
e9:01:20:e3:ff:36:2d:15:5c:d4:03:e1:53:d5:08:
98:40:1b:8e:6e:a1:5f:9f:40:9f:3b:47:4e:62:39:
bd:8b:c0:b3:b5:dd:fa:79:ea:1d:87:d6:80:e6:09:
99:ce:7d:38:cc:2d:98:34:55:64:15:5f:7f:ee:76:
4a:33:75:c0:3b:f9:6b:f7:d0:65:2c:b7:71:08:e7:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2D:83:97:12:52:D2:B1:C3:E7:2A:21:91:2F:F4:04:D3:74:45:AC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS12876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.72.0/24
46.202.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:0d:37:56:ea:9e:e9:bb:31:ad:da:35:bb:42:b4:f8:f0:2a:
3f:bb:c5:81:b0:53:26:1a:9b:94:ae:82:eb:ca:a1:10:de:70:
d5:eb:98:da:74:f8:a8:8f:89:9b:a3:5f:5f:ad:2e:9c:f4:f2:
fa:55:47:c4:78:c6:2a:48:01:5c:a2:7e:cf:f7:84:23:42:23:
2d:6d:02:cc:e4:db:c9:0d:2e:89:ed:6a:1e:e6:ac:a2:2c:79:
ed:00:68:4f:72:17:02:29:6c:cf:c7:46:eb:28:59:ce:cb:e8:
b4:e2:f3:63:d1:97:58:fa:2c:ba:af:e6:21:05:e0:30:d3:fb:
ff:dc:ae:a1:71:70:52:30:92:b5:2c:d9:49:a3:52:ef:8e:50:
ba:35:8e:6d:c0:9c:42:fd:8d:52:4f:82:83:da:83:c2:b1:5b:
42:07:af:a2:40:fc:01:b7:01:89:e1:01:0c:01:fd:37:4d:3e:
6b:a2:6e:70:c7:cf:ba:d5:f0:73:c6:3a:41:52:fa:bc:17:06:
cd:ca:ec:6d:6d:08:a2:7a:23:43:53:11:23:fb:21:4b:43:3c:
a1:b1:09:55:a9:71:ef:c9:cc:5b:2a:c3:f2:cf:67:01:b5:6a:
9b:d1:07:65:c5:b2:fe:c3:83:c2:6a:52:f9:df:8c:04:b7:8e:
e8:3d:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:06 2025 by rpki-client