Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/b3wbaqpTHCn8qNKfGxiAHee3W4E.roa
File: b3wbaqpTHCn8qNKfGxiAHee3W4E.roa (raw, json)
Hash identifier: 8q2735B98CTYeQKzqzExGxA5U0M+aaSYpw9Dy9deFdo=
Subject key identifier: 6F:7C:1B:6A:AA:53:1C:29:FC:A8:D2:9F:1B:18:80:1D:E7:B7:5B:81
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7274CB42EB71787E1E18E2A027D4C99
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/b3wbaqpTHCn8qNKfGxiAHee3W4E.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 213.238.165.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.160.0/24 maxlen: 24
213.238.168.0/24 maxlen: 24
213.238.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4c:b4:2e:b7:17:87:e1:e1:8e:2a:02:7d:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f7c1b6aaa531c29fca8d29f1b18801de7b75b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:91:4a:4a:42:16:8f:8c:38:de:13:f5:ba:
6f:fa:5a:a6:25:7d:d4:6d:83:c2:80:13:cf:18:4f:
45:6d:dd:e2:08:7a:66:4c:ba:bb:72:bc:70:d1:ab:
29:05:20:1d:4b:7f:73:db:c8:fc:bb:ad:5e:e3:a0:
3f:a3:35:e3:bb:c0:df:06:a7:b6:b2:c6:66:19:fa:
b6:fd:84:a6:27:92:c7:56:36:40:d0:5b:5d:08:5a:
1b:cf:bb:bc:7b:9e:71:e7:f1:72:e1:d8:26:15:94:
e1:8c:8f:22:48:77:c7:7c:e3:3b:ab:10:cc:9a:d1:
0b:ed:0f:78:b1:e1:2f:97:af:c5:24:db:e8:a7:e5:
4f:a8:2e:78:ae:ad:4b:c7:08:eb:b5:a9:02:58:7a:
c3:be:7d:aa:e7:3a:d0:bd:c0:76:f0:f3:c4:44:5d:
40:01:b4:47:91:ea:ac:ff:4e:a0:2d:a7:1e:1f:13:
5a:f2:a6:4f:bd:d3:2e:c9:dd:7a:0c:59:78:6c:c3:
f2:62:a5:27:b0:17:ea:9c:e7:f9:6c:3c:aa:3e:c2:
b5:a0:8a:9b:0a:73:d6:90:17:7a:4c:4e:6b:71:8f:
bf:90:fd:95:96:4f:1c:66:91:0b:61:13:3e:5c:5d:
2e:19:d6:8e:4d:a1:87:59:48:53:00:61:c4:e0:70:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:1B:6A:AA:53:1C:29:FC:A8:D2:9F:1B:18:80:1D:E7:B7:5B:81
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/b3wbaqpTHCn8qNKfGxiAHee3W4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
213.238.168.0/24
213.238.187.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6c:8b:32:58:fc:a0:05:56:f9:5f:51:cc:6b:4b:82:e5:04:
c4:a0:1c:3f:c4:14:cd:d8:3a:83:c9:d3:c2:76:63:87:85:7b:
d3:a0:2d:32:56:e6:2f:53:fe:5a:d5:1e:aa:8c:7d:ca:ec:8e:
69:72:87:16:f5:a4:f9:8e:0e:88:dd:85:13:6b:0e:17:ff:fd:
1e:b8:45:8b:63:d9:3b:e9:b3:86:d4:25:51:ad:16:58:ae:82:
84:5d:08:35:3c:ac:14:3e:92:19:a0:3e:cf:7d:6e:a1:c5:cc:
47:fb:7e:bd:7b:c7:ad:fd:72:25:19:4f:2b:52:88:9f:08:5c:
08:5d:7d:aa:dd:24:1e:ab:2c:89:49:dd:d2:b5:4a:76:66:a6:
04:1d:28:4b:a6:c5:b1:bd:25:2f:eb:69:76:aa:42:1e:4a:d1:
4a:54:16:de:7d:50:de:f9:95:48:fa:e4:a3:1e:c0:df:17:72:
0c:e3:38:aa:f1:42:b5:5a:2d:e9:6a:62:b1:15:67:f0:52:e2:
9d:3a:1b:2c:2f:0e:09:7c:d5:52:c2:1f:58:0e:21:71:a3:df:
77:89:6f:f1:05:f6:b3:98:87:ff:60:53:c7:ce:f1:93:8f:1c:
f8:d0:8c:2e:14:9d:38:f2:d7:03:d1:87:98:b8:71:00:12:67:
e6:84:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:24 2025 by rpki-client