Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/X20ndZcJf4v4z8CYi51ftedyeGk.roa
File: X20ndZcJf4v4z8CYi51ftedyeGk.roa (raw, json)
Hash identifier: FcOtaVzDC0uhUrt+VknbJGfT3WV7fT1W9gngZNLVqWs=
Subject key identifier: 5F:6D:27:75:97:09:7F:8B:F8:CF:C0:98:8B:9D:5F:B5:E7:72:78:69
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 0193A17BC0FD722C15DF96F377CF4EA70BFD
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/X20ndZcJf4v4z8CYi51ftedyeGk.roa
Signing time: Sat 07 Dec 2024 14:17:42 +0000
ROA not before: Sat 07 Dec 2024 14:17:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1914
IP address blocks: 213.165.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Dec 2024 17:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:7b:c0:fd:72:2c:15:df:96:f3:77:cf:4e:a7:0b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Dec 7 14:17:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f6d277597097f8bf8cfc0988b9d5fb5e7727869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:d1:76:69:d7:56:d2:bd:f1:f6:f6:d3:71:
23:34:8e:00:47:2a:b5:88:9f:18:c8:87:f8:dd:da:
0f:d3:e6:73:8a:ce:25:cf:a3:d5:6f:a0:62:3f:74:
9d:6f:64:84:06:ba:9b:3b:3d:af:4d:4b:65:31:eb:
24:68:a8:56:c2:07:2b:d4:a4:70:72:91:6d:79:ad:
cc:bb:9d:b7:4a:ac:ea:d4:b7:04:16:1a:da:76:b3:
09:5b:40:54:7c:cf:02:95:37:7b:58:2a:1b:04:90:
47:c3:10:ff:d0:b9:dc:5a:07:1b:82:d7:e2:05:38:
25:a0:82:c5:f1:0e:79:20:fd:d4:e7:a3:09:52:2b:
8d:72:0f:24:b2:80:b3:3d:a3:75:c9:cf:cb:a1:b5:
ae:6f:bb:af:7d:78:d2:58:ef:c2:f6:ec:f5:30:d6:
08:3c:1a:5b:8e:46:4a:9c:d9:15:5d:59:42:c1:f0:
e9:a3:11:84:cd:1c:c5:8c:be:fc:d7:71:83:86:c6:
03:86:bd:d5:a2:52:b6:8b:56:ca:4c:9a:8b:e1:3b:
ee:6f:1d:83:31:7f:b1:9f:c8:ec:89:26:9d:45:b2:
cb:f9:28:d5:a0:83:ae:08:56:0f:1c:3d:25:1c:4c:
2c:c8:a4:b5:12:84:f1:7c:d2:be:0a:e9:49:db:da:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6D:27:75:97:09:7F:8B:F8:CF:C0:98:8B:9D:5F:B5:E7:72:78:69
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/X20ndZcJf4v4z8CYi51ftedyeGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.32.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c7:df:2a:70:88:99:7f:c5:13:e9:a8:b5:1f:4a:07:58:9e:
c0:86:01:33:0e:2b:a5:19:e0:ea:cf:12:f8:8f:f1:dc:d2:ec:
6d:b2:4b:e0:8e:8c:f7:07:45:e0:ef:d7:a7:2e:d9:40:ff:91:
5f:14:06:36:7d:7c:0b:01:ea:99:7c:86:04:88:91:2f:e8:cb:
b9:b5:b9:f4:72:57:09:8d:2e:f3:27:98:5d:31:ae:c8:3d:d4:
4d:1d:12:a6:0c:29:50:b1:2d:c2:de:6b:4d:c3:47:cb:22:c6:
c5:b1:6a:c5:88:81:38:62:41:e2:40:0e:25:85:02:4b:93:fb:
cf:68:fa:39:b1:17:5f:9f:03:4b:71:a1:57:1a:1c:cb:23:a4:
44:e5:ee:f0:24:6e:ac:0e:63:3a:2e:4c:69:14:12:03:4d:2f:
80:19:00:0f:c2:4d:6b:d5:b9:48:d8:b9:39:8c:12:6a:c4:a0:
21:3b:55:f2:30:e0:43:1d:59:a7:18:5e:b7:e1:14:e0:16:fb:
e2:4a:03:1e:6e:04:08:ba:af:ee:93:60:3a:1a:14:85:a1:9a:
de:c2:11:c5:c8:8d:4d:5c:fd:18:dd:6b:ec:26:0f:8d:ef:f6:
2c:00:53:b8:50:e8:9e:3f:91:4e:fe:e3:d9:bf:39:2c:ae:f9:
f4:dc:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:28 2025 by rpki-client