Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Z7C_jxB-qIjSGHTZxjjUoO83C7w.roa
File: Z7C_jxB-qIjSGHTZxjjUoO83C7w.roa (raw, json)
Hash identifier: wrPdzRFFOZz8dfh2/hoSBoLdCefSLB5wY3EiVYstv5g=
Subject key identifier: 67:B0:BF:8F:10:7E:A8:88:D2:18:74:D9:C6:38:D4:A0:EF:37:0B:BC
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018D9C6DAB29E491D92D6BEAC8BA2BF78496
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Z7C_jxB-qIjSGHTZxjjUoO83C7w.roa
Signing time: Mon 12 Feb 2024 08:27:29 +0000
ROA not before: Mon 12 Feb 2024 08:27:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47169
IP address blocks: 84.21.4.0/24 maxlen: 24
87.229.16.0/22 maxlen: 22
87.229.38.0/24 maxlen: 24
87.229.39.0/24 maxlen: 24
87.229.42.0/23 maxlen: 24
87.229.52.0/24 maxlen: 24
87.229.106.0/24 maxlen: 24
87.229.107.0/24 maxlen: 24
213.181.196.0/24 maxlen: 24
213.181.197.0/24 maxlen: 24
213.181.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 13:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:6d:ab:29:e4:91:d9:2d:6b:ea:c8:ba:2b:f7:84:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 12 08:27:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b0bf8f107ea888d21874d9c638d4a0ef370bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:47:2c:29:bb:1e:bb:23:d5:37:27:1e:81:
7d:c8:b4:f3:07:92:27:e4:a4:e6:a9:bb:38:79:91:
1c:f6:cd:93:51:d3:01:75:71:fb:1f:c0:d1:20:56:
7b:3e:a9:c0:af:72:cb:b8:43:75:e6:0e:74:ad:06:
03:c5:ff:a6:66:e1:da:3f:eb:4b:20:bb:7a:25:83:
eb:a0:34:66:56:d3:53:61:0d:fb:ad:a9:52:5b:01:
a2:80:5f:40:fe:15:b4:83:bc:fc:8e:99:51:91:ae:
ad:ea:ea:02:d8:c0:ab:47:d6:ff:2c:72:a5:5b:16:
b0:3d:0f:37:0f:39:af:3b:de:a5:28:bc:1c:fd:49:
f6:4e:55:75:d9:ec:a0:63:51:c5:87:44:5e:67:a6:
24:21:76:83:89:c5:23:dd:b0:7d:a8:6c:a4:25:15:
3a:fc:91:17:19:50:ed:51:75:e7:a5:af:61:a6:60:
30:e2:05:e3:b2:52:b1:3d:b0:ec:79:80:0a:4c:e2:
86:6a:c5:6b:d5:82:88:f6:12:5a:de:a6:44:84:05:
a9:80:54:9e:23:b8:35:80:25:39:51:50:58:43:8a:
ff:ce:c1:67:de:74:52:5e:ce:ba:cd:49:e7:97:d5:
c3:d3:04:cc:61:bb:e1:ab:09:c2:1f:bc:1d:70:4e:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B0:BF:8F:10:7E:A8:88:D2:18:74:D9:C6:38:D4:A0:EF:37:0B:BC
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Z7C_jxB-qIjSGHTZxjjUoO83C7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.4.0/24
87.229.16.0/22
87.229.38.0/23
87.229.42.0/23
87.229.52.0/24
87.229.106.0/23
213.181.196.0-213.181.198.255
Signature Algorithm: sha256WithRSAEncryption
07:ea:b1:23:4f:3b:8a:2d:8a:d0:7e:1f:ef:41:48:d7:c5:44:
59:66:ce:f2:43:14:16:ae:ff:9d:d3:43:35:eb:34:ca:ef:7a:
75:83:45:b2:31:29:57:ba:7f:90:74:0b:4f:e5:35:dd:b8:b6:
55:a4:97:68:e0:e5:37:30:bd:6c:8e:fb:9a:ef:91:af:df:7a:
2e:44:7c:ce:cd:a5:9d:cc:ce:72:b3:d4:e9:0a:b2:38:db:82:
e4:85:54:83:06:12:6a:e0:82:af:e5:7a:91:e2:d2:f5:49:be:
8d:4d:b9:ba:ac:af:15:a5:1f:f6:96:99:5d:b1:02:ee:f4:43:
39:98:e7:0e:f3:1b:03:bf:f2:11:ed:14:80:08:e1:b4:1c:f8:
32:2b:6d:52:b4:99:e2:74:c4:33:ed:81:de:88:9d:9c:c2:a5:
64:59:51:ca:0c:94:75:fb:54:30:78:d4:7e:7c:33:4d:77:dc:
a8:0c:30:33:55:50:5e:b0:75:5c:f5:c7:54:cb:95:e5:30:ff:
21:f3:6b:2d:54:3c:ce:69:3d:de:a0:88:00:4e:e7:8a:74:92:
7e:eb:ac:d1:df:21:ba:7d:88:41:f4:56:ed:1f:6b:87:79:d8:
6c:c1:13:b7:2f:be:18:6c:d6:71:2e:a9:85:f5:56:a7:46:50:
39:d8:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:25 2024 by rpki-client on console-fra.rpki-client.org