Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UF9_aVA7shq1loE20vcO-q-Dt2A.roa
File: UF9_aVA7shq1loE20vcO-q-Dt2A.roa (raw, json)
Hash identifier: s2iCB5b7nJeHrFYWKC+alJEthGR6o0Wz0027D7UGs0Q=
Subject key identifier: 50:5F:7F:69:50:3B:B2:1A:B5:96:81:36:D2:F7:0E:FA:AF:83:B7:60
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193176D083E146DFBAAD91BA07717E3CD2F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UF9_aVA7shq1loE20vcO-q-Dt2A.roa
Signing time: Sun 10 Nov 2024 18:54:01 +0000
ROA not before: Sun 10 Nov 2024 18:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214024
IP address blocks: 213.210.53.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 18:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:17:6d:08:3e:14:6d:fb:aa:d9:1b:a0:77:17:e3:cd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 10 18:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=505f7f69503bb21ab5968136d2f70efaaf83b760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:44:8c:89:51:6f:af:3b:6e:53:b9:10:c2:
35:0f:81:5a:81:01:af:68:21:9f:85:a6:03:5a:83:
92:7e:e6:cd:45:db:b3:27:89:af:8a:87:c8:9f:e9:
04:e8:8a:e5:7c:8a:16:b9:65:82:f8:73:2f:a4:d9:
9c:39:07:36:9e:f8:34:20:31:06:11:bf:ec:25:ce:
80:68:c0:91:27:6a:7e:02:06:07:a9:17:45:89:30:
61:f9:7a:bc:b6:8b:32:26:ef:9a:fc:b0:e5:7f:e4:
86:90:9c:61:62:b2:81:db:c6:a5:2e:57:6e:3a:36:
07:2b:a9:c7:b8:2a:05:29:c8:4c:87:c9:1d:d0:6f:
1e:13:70:27:36:e8:f1:a2:e2:ea:6a:e5:2c:0b:5a:
e6:64:1e:9d:39:37:2d:bd:97:ab:ca:c1:17:5a:8d:
e6:dd:a6:c6:57:96:68:89:ed:87:62:86:33:68:b5:
fd:3f:fd:a2:11:71:c0:e9:a8:6e:cf:8f:af:a1:39:
ce:57:8c:dc:26:86:64:88:62:d8:7d:79:c8:80:fa:
c1:bb:38:37:0e:1e:fe:e1:30:82:7e:98:64:70:38:
57:b1:01:e6:9a:25:b1:d7:54:a4:7b:3b:c1:5f:a0:
f6:be:bf:bd:27:6d:9b:b5:a0:62:02:14:e2:ac:99:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:7F:69:50:3B:B2:1A:B5:96:81:36:D2:F7:0E:FA:AF:83:B7:60
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UF9_aVA7shq1loE20vcO-q-Dt2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.53.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f9:be:4c:6d:21:e3:a8:8c:a8:de:c3:dc:75:0f:99:ce:da:
86:bc:ea:d9:c6:f5:ba:eb:78:a1:b1:47:0c:0b:6f:ba:f5:4a:
da:e6:ac:36:b6:34:d5:4a:5c:e8:b5:25:fe:78:49:bf:6c:7e:
69:4b:0d:dd:73:a1:5a:90:76:cf:3c:aa:27:c7:ed:72:71:c8:
9a:ee:76:35:8d:25:b1:e2:25:31:81:f1:b4:61:ca:94:00:9a:
a7:ad:90:d8:4f:53:9f:eb:26:90:1f:fe:77:8d:1b:d6:c8:cd:
9d:db:21:33:32:61:38:b2:cf:95:fe:81:6f:12:79:7d:da:b3:
80:00:64:3d:72:d9:02:1f:d3:c7:7e:a3:92:6e:79:08:88:a7:
f2:62:72:a1:2d:87:2b:2f:61:4e:85:6a:f9:93:75:4f:da:d7:
b1:94:00:7e:40:5c:7d:af:a4:ce:f1:16:a9:7e:27:9b:ac:a4:
ed:ff:e1:a3:d7:42:ca:da:7a:56:75:51:ad:bf:ab:89:0b:cb:
1b:2d:84:4d:88:87:c1:d9:63:b1:a2:8a:02:4c:57:5b:06:5f:
73:4c:b8:34:ff:dd:50:f4:9f:43:4c:8e:bd:74:89:6f:e2:d0:
f8:bb:d9:81:d0:e9:98:0c:d4:5f:2e:97:57:7c:de:e9:2d:c2:
c7:70:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:54:53 2025 by rpki-client