Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/VzhzhBDT5KxQbnsOl1hLZFB-VVM.roa
File: VzhzhBDT5KxQbnsOl1hLZFB-VVM.roa (raw, json)
Hash identifier: l2etyJ+5LV0L0Wxy0jyLuPdLEP/IVvYKL5ut1rFh+S8=
Subject key identifier: 57:38:73:84:10:D3:E4:AC:50:6E:7B:0E:97:58:4B:64:50:7E:55:53
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 0191B86A5789888FDBA9CE8FFEA1D38C0C8D
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/VzhzhBDT5KxQbnsOl1hLZFB-VVM.roa
Signing time: Tue 03 Sep 2024 15:04:22 +0000
ROA not before: Tue 03 Sep 2024 15:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.190.14.0/24 maxlen: 24
213.190.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 12:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:6a:57:89:88:8f:db:a9:ce:8f:fe:a1:d3:8c:0c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Sep 3 15:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5738738410d3e4ac506e7b0e97584b64507e5553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:3c:3a:d8:fe:a1:a3:7a:f3:ab:1f:97:06:
94:cc:ff:be:57:a0:4a:7f:d6:f4:ce:d0:df:b1:91:
e7:8f:2a:f0:8d:5f:a7:34:6f:64:6a:c2:a3:1a:46:
af:1c:3e:35:84:b4:8c:a7:0e:25:54:69:d1:a0:e1:
e9:7a:d9:b1:05:55:e0:87:51:3c:b1:eb:8e:4a:3b:
66:19:99:cb:1e:64:f4:a5:f5:c6:6a:cd:ed:df:25:
8b:6a:15:f4:fc:0e:24:7d:68:da:13:eb:fe:19:4b:
a5:79:8c:c7:a0:af:9e:2d:62:e7:2a:09:58:6b:50:
cd:9d:53:9c:e0:ae:53:8c:58:50:f5:2d:ab:ab:38:
3b:88:e3:0c:f8:05:e3:a3:c3:07:c3:45:1b:fd:aa:
88:14:07:30:16:75:2b:ff:08:1e:a4:87:35:f5:db:
e0:ce:28:23:1c:bc:88:8b:94:01:a3:2a:ca:fa:aa:
05:f1:0a:d4:48:4b:d3:f5:40:83:29:a2:ef:15:aa:
81:5d:1b:4d:e3:71:75:64:92:58:ba:28:49:5e:07:
d5:f5:41:cf:9e:89:fa:31:44:81:83:e5:b4:f6:c0:
28:10:13:ac:23:1d:be:f2:d3:d6:65:aa:cc:fe:0d:
4e:6f:17:9d:41:b5:df:96:f4:ca:57:7c:14:61:91:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:73:84:10:D3:E4:AC:50:6E:7B:0E:97:58:4B:64:50:7E:55:53
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/VzhzhBDT5KxQbnsOl1hLZFB-VVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.14.0/23
Signature Algorithm: sha256WithRSAEncryption
51:58:45:79:3a:af:ad:8d:7a:6c:a2:0d:6f:01:67:34:57:62:
78:ef:f8:87:47:59:f5:6e:bb:c1:d5:fd:5f:87:8b:fc:2a:37:
49:56:94:ef:a0:a6:53:70:30:fc:03:a6:35:f8:ee:f6:7d:08:
00:97:e1:43:61:ba:a8:81:ff:a7:aa:f3:38:58:54:3f:7d:d2:
08:c6:05:52:6b:65:be:54:82:ac:63:c7:84:f1:02:bc:eb:33:
52:a1:71:60:56:45:23:f6:e3:ad:2a:ea:2d:a8:43:3b:77:3e:
b9:4c:ae:9b:67:8c:24:37:e4:e9:94:1c:df:05:8e:12:a3:2b:
90:37:82:ce:95:7b:dc:f6:b0:c6:73:ff:02:0b:03:65:84:09:
4c:9b:43:4a:54:71:88:14:58:d9:ec:57:3a:3a:6f:1b:e4:5d:
0d:9b:40:48:62:e8:03:e7:da:14:ed:44:f6:e3:5c:0d:22:af:
5e:61:c8:e1:4c:d7:93:b7:3b:a6:d4:c2:3e:25:e8:55:c4:77:
e0:37:ff:c7:5a:7d:5e:70:92:a3:d2:2e:39:d6:0c:9c:00:4e:
60:29:aa:20:59:1f:9b:e4:94:74:cc:f0:b4:af:99:6d:29:be:
c4:81:36:cd:b7:2c:27:b6:3c:73:9b:cd:7c:4e:a1:df:6f:14:
41:b5:b8:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG4aleJiI/bqc6P/qHTjAyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlhMTc3YmI1ZGZiNmVhYmU0Y2FkNzlkZWY4ZjhiMDA1
ZGY2NTYwHhcNMjQwOTAzMTUwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzM4NzM4NDEwZDNlNGFjNTA2ZTdiMGU5NzU4NGI2NDUwN2U1NTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXg8Otj+oaN686sflwaUzP++V6BK
f9b0ztDfsZHnjyrwjV+nNG9kasKjGkavHD41hLSMpw4lVGnRoOHpetmxBVXgh1E8
seuOSjtmGZnLHmT0pfXGas3t3yWLahX0/A4kfWjaE+v+GUuleYzHoK+eLWLnKglY
a1DNnVOc4K5TjFhQ9S2rqzg7iOMM+AXjo8MHw0Ub/aqIFAcwFnUr/wgepIc19dvg
zigjHLyIi5QBoyrK+qoF8QrUSEvT9UCDKaLvFaqBXRtN43F1ZJJYuihJXgfV9UHP
non6MUSBg+W09sAoEBOsIx2+8tPWZarM/g1ObxedQbXflvTKV3wUYZEe6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFc4c4QQ0+SsUG57DpdYS2RQflVTMB8GA1UdIwQY
MBaAFDvZoXe7Xftuq+TK153vj4sAXfZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUt
ZTM4MDMwYjY5ZDVhLzEvVnpoemhCRFQ1S3hRYm5zT2wxaExaRkItVlZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUtZTM4MDMwYjY5ZDVh
LzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1b4OMA0G
CSqGSIb3DQEBCwUAA4IBAQBRWEV5Oq+tjXpsog1vAWc0V2J47/iHR1n1brvB1f1f
h4v8KjdJVpTvoKZTcDD8A6Y1+O72fQgAl+FDYbqogf+nqvM4WFQ/fdIIxgVSa2W+
VIKsY8eE8QK86zNSoXFgVkUj9uOtKuotqEM7dz65TK6bZ4wkN+TplBzfBY4SoyuQ
N4LOlXvc9rDGc/8CCwNlhAlMm0NKVHGIFFjZ7Fc6Om8b5F0Nm0BIYugD59oU7UT2
41wNIq9eYcjhTNeTtzum1MI+JehVxHfgN//HWn1ecJKj0i451gycAE5gKaogWR+b
5JR0zPC0r5ltKb7EgTbNtywntjxzm818TqHfbxRBtbhz
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:43:20 2025 by rpki-client