Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/_AyedcwdEWzN5mjBy1tdIDXjIgI.roa
File: _AyedcwdEWzN5mjBy1tdIDXjIgI.roa (raw, json)
Hash identifier: ZEve5dvAPOiE452plCOcP0mYasQWNeoureun2+2V4fw=
Subject key identifier: FC:0C:9E:75:CC:1D:11:6C:CD:E6:68:C1:CB:5B:5D:20:35:E3:22:02
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0196A52DD5F2253DB92F8B3D5BA51CCD6246
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/_AyedcwdEWzN5mjBy1tdIDXjIgI.roa
Signing time: Tue 06 May 2025 10:39:26 +0000
ROA not before: Tue 06 May 2025 10:39:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 212.102.227.0/24 maxlen: 24
212.102.228.0/24 maxlen: 24
212.102.230.0/24 maxlen: 24
212.102.252.0/24 maxlen: 24
212.102.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 05:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:2d:d5:f2:25:3d:b9:2f:8b:3d:5b:a5:1c:cd:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: May 6 10:39:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc0c9e75cc1d116ccde668c1cb5b5d2035e32202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:fa:93:f0:c7:f6:a8:1a:d7:b6:1d:07:a9:
17:cf:9c:ac:d9:45:8e:f6:69:16:94:b6:5a:88:f2:
ff:ca:66:4a:7e:82:d0:83:a7:9f:82:05:d5:8a:e3:
a0:b8:74:4c:00:e6:17:3c:5e:55:d2:ab:59:67:a3:
c1:d5:1b:b4:ef:a8:71:2a:70:55:bd:13:d3:38:65:
69:6e:f2:f4:44:73:26:42:f6:7c:4c:93:08:34:ac:
60:3c:40:28:fb:e8:fb:ff:60:c1:53:ee:eb:dd:02:
bc:f2:6a:72:37:99:07:32:0f:84:73:0f:eb:f0:7d:
50:aa:74:2e:2f:ff:d2:86:39:0b:3f:9b:56:eb:d0:
ea:41:68:cb:f7:1a:9f:af:5a:3f:99:05:92:6c:10:
83:83:a8:3b:3c:68:bc:0a:61:9e:54:9f:aa:44:6d:
49:66:2e:d4:fb:bc:9c:14:26:43:dd:1f:e7:29:bb:
90:da:32:14:00:12:86:92:85:b9:25:ad:86:2e:ff:
38:a1:87:45:71:40:53:a2:3c:26:d6:b0:06:f3:6a:
b0:35:2f:d4:64:fc:88:26:7b:02:7c:de:74:cc:f5:
89:53:92:9c:29:b6:e4:8e:02:25:f4:40:ee:e7:85:
65:cf:0d:4e:49:0a:8e:3c:09:6c:89:33:c0:cb:68:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:9E:75:CC:1D:11:6C:CD:E6:68:C1:CB:5B:5D:20:35:E3:22:02
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/_AyedcwdEWzN5mjBy1tdIDXjIgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.227.0-212.102.228.255
212.102.230.0/24
212.102.252.0/23
Signature Algorithm: sha256WithRSAEncryption
09:72:40:b5:3c:2a:2d:80:52:31:8a:12:6f:48:a4:bd:9e:f3:
42:ae:23:46:bc:7f:9f:68:0c:3f:77:81:c0:3d:8f:37:55:d1:
26:77:1e:c7:a5:72:55:26:0a:d4:03:15:c7:b6:70:7e:f9:36:
f3:ae:25:a0:4e:20:88:86:53:a0:6a:fd:a8:6b:1a:a1:da:6b:
79:4a:55:3c:4f:33:73:d0:ae:99:50:64:83:07:96:98:90:08:
e4:70:ec:01:c3:69:6a:9f:0f:95:bd:dc:2d:81:30:a2:9f:70:
6f:9f:c3:99:db:41:16:fd:9c:3b:d4:d7:cf:42:3b:66:39:f8:
8e:06:7a:d9:72:68:f1:53:ff:a7:97:f8:9e:25:48:ea:dd:7b:
f5:97:c2:de:45:d1:26:c5:7e:df:87:f1:ac:1e:8a:5b:01:04:
82:44:25:75:c1:72:c6:b7:83:98:43:9b:c1:76:1e:7f:a6:89:
36:f7:46:c3:fb:00:52:11:43:f4:44:54:38:52:46:fc:79:e6:
e5:36:8d:7d:0c:98:26:80:ba:0e:3b:e1:7d:3e:74:ae:1c:b1:
17:cd:1d:11:f9:b0:7b:13:4f:d3:3b:ae:9d:c3:f4:97:90:22:
a8:b4:2e:9d:c5:4c:e9:2d:9e:3d:5f:77:2e:43:55:9d:7d:fd:
b9:87:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:16:45 2025 by rpki-client