Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dG01PG5Nb4_fx09mSRtl7duUzwY.roa
File: dG01PG5Nb4_fx09mSRtl7duUzwY.roa (raw, json)
Hash identifier: Y7r+ltCmdaSQuceRsIYSf3aCKQv5k603sbcnKBlgav8=
Subject key identifier: 74:6D:35:3C:6E:4D:6F:8F:DF:C7:4F:66:49:1B:65:ED:DB:94:CF:06
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019686A5BCDD229A3EA89025C2C6C8DCF956
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dG01PG5Nb4_fx09mSRtl7duUzwY.roa
Signing time: Wed 30 Apr 2025 12:22:10 +0000
ROA not before: Wed 30 Apr 2025 12:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 20:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:a5:bc:dd:22:9a:3e:a8:90:25:c2:c6:c8:dc:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 12:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746d353c6e4d6f8fdfc74f66491b65eddb94cf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:06:cd:66:c2:20:bb:e8:75:ef:64:f4:8a:
99:cd:c7:a0:d0:80:52:b5:62:65:d3:81:0f:2d:b7:
2b:79:37:ae:f9:8b:9a:af:11:85:a3:34:51:d4:8d:
48:aa:48:41:e2:92:d3:b5:27:5a:bc:6b:18:0f:b0:
71:ea:69:20:cd:ce:b1:7a:5d:50:02:47:3d:f3:c4:
13:1b:a1:3e:03:d8:8b:0b:67:fb:75:11:d9:7c:50:
58:73:3b:a1:ba:97:74:5e:b2:bc:e0:e7:3f:e0:38:
f4:b3:c7:db:5f:78:1e:3d:07:9b:b9:ab:ba:fc:20:
9a:c7:f0:93:04:23:ed:37:f0:c6:c2:fd:1c:48:98:
6a:4a:a1:64:39:3e:9a:fd:06:4e:6a:98:46:d7:25:
e3:bf:79:94:9a:2f:c6:2a:e7:dc:29:aa:61:84:0c:
e6:34:c0:e8:c7:13:49:36:d6:e9:d8:d6:26:b8:bc:
73:f3:56:da:8d:97:c7:0e:d9:0c:01:c4:44:fb:6a:
04:0f:e2:48:69:eb:aa:55:d4:15:c4:54:f6:e2:94:
15:46:5a:6a:df:ab:07:f9:96:d2:ef:88:42:04:4b:
ff:51:91:ac:9d:77:7e:d8:43:6d:ef:17:c3:b1:e1:
d1:d8:ff:f2:ff:18:5c:b2:67:9f:24:c2:06:e3:e1:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6D:35:3C:6E:4D:6F:8F:DF:C7:4F:66:49:1B:65:ED:DB:94:CF:06
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dG01PG5Nb4_fx09mSRtl7duUzwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.52.0/23
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:93:5b:d6:72:8b:93:c9:66:42:a2:5d:d6:3f:c5:3d:3a:20:
1d:a6:5f:25:52:90:ba:9c:46:dd:9e:11:f4:65:09:2c:18:ad:
b8:5f:a0:94:41:fe:d4:71:ff:a5:81:47:0e:99:86:84:09:d3:
68:1f:a2:75:39:af:f6:3a:d7:11:10:a9:ee:09:03:d8:2d:e2:
c2:e8:bf:e3:ea:09:df:6c:3a:c0:71:f2:f5:c7:3c:71:75:ec:
c9:fa:7c:22:55:44:31:46:a7:09:7c:28:92:97:e3:27:55:2b:
80:08:26:45:68:91:ba:9b:f4:e6:24:ec:84:3d:fa:24:68:71:
73:34:7e:79:f3:21:78:54:4c:8d:1e:4a:07:5e:7e:35:02:5f:
84:3d:f3:65:cf:7a:a9:df:84:68:c3:be:98:5f:ac:8d:6b:88:
a8:18:3b:d7:26:27:9b:fe:19:c9:c3:7b:13:4d:3b:47:51:6c:
b1:50:86:dc:e1:d3:3b:b3:22:b6:00:eb:24:63:17:a7:1f:af:
2b:2a:bd:82:d5:7c:13:05:48:81:78:b5:24:70:17:ca:1a:2e:
16:92:e9:c6:3c:4b:b0:ef:8b:41:67:97:a2:d6:b8:f5:c9:17:
7b:d1:3c:b5:09:b1:65:2c:68:cf:e0:a6:fa:fb:71:73:9e:78:
07:aa:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:45 2025 by rpki-client