Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/b-cerGE1to6aEpfLIvASKnG8hXc.roa
File: b-cerGE1to6aEpfLIvASKnG8hXc.roa (raw, json)
Hash identifier: uz0T8brbeRRL8brWV9i5Jdg+DjaitzcQX5GAw7Y3AnI=
Subject key identifier: 6F:E7:1E:AC:61:35:B6:8E:9A:12:97:CB:22:F0:12:2A:71:BC:85:77
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0193D3866DA91491C7C9B0862F61BC6D1603
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/b-cerGE1to6aEpfLIvASKnG8hXc.roa
Signing time: Tue 17 Dec 2024 07:30:22 +0000
ROA not before: Tue 17 Dec 2024 07:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13174
IP address blocks: 213.87.0.0/19 maxlen: 19
213.87.0.0/21 maxlen: 21
213.87.32.0/21 maxlen: 21
213.87.32.0/23 maxlen: 23
213.87.44.0/22 maxlen: 22
213.87.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 17 Dec 2024 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:86:6d:a9:14:91:c7:c9:b0:86:2f:61:bc:6d:16:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 17 07:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fe71eac6135b68e9a1297cb22f0122a71bc8577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:01:6c:be:63:a9:8d:36:5a:45:b2:e8:4d:
4b:33:50:93:48:9c:36:c1:b1:5a:2c:92:6b:a9:40:
d4:6b:ef:91:dd:83:eb:05:07:6e:85:c8:2b:39:b2:
bb:58:fd:67:35:d0:69:0c:7d:93:f1:fb:b1:56:1a:
ca:cb:5c:56:43:7b:1b:18:54:bd:6c:38:57:6b:47:
cc:96:3e:78:09:0e:16:39:f4:2b:a4:72:b8:46:f0:
40:50:f3:70:12:e6:3c:1b:1d:af:5f:f5:c4:b4:1d:
47:f5:f5:3c:5d:f2:bc:d7:29:bc:67:e2:7b:29:d3:
4a:a6:69:ed:01:6a:38:14:ac:a8:bb:7a:29:db:84:
e9:85:c1:40:26:47:71:66:03:d3:a9:30:01:d4:2a:
63:e5:df:e5:73:07:78:d5:f3:25:04:d2:f4:86:e5:
36:da:2b:32:0b:7c:60:52:66:7d:cb:a3:e6:25:f8:
d7:36:44:3d:5a:0a:57:7a:9b:8d:64:52:53:ea:48:
b6:51:3e:f3:94:c5:b6:c2:bb:a1:e6:a2:96:44:13:
68:6d:61:c1:2b:88:3a:59:3c:aa:07:23:0d:91:0e:
98:4b:5c:d2:00:2c:17:b5:ed:8d:57:02:72:56:02:
f3:1a:67:59:2d:90:5a:11:44:b5:dc:70:d3:21:8a:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:1E:AC:61:35:B6:8E:9A:12:97:CB:22:F0:12:2A:71:BC:85:77
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/b-cerGE1to6aEpfLIvASKnG8hXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.0.0-213.87.39.255
213.87.44.0-213.87.55.255
Signature Algorithm: sha256WithRSAEncryption
02:20:9d:2c:60:4a:e4:59:9b:a6:fc:3e:0e:a1:16:fd:34:ff:
0e:48:dc:ab:41:d0:a6:16:76:a6:f3:7c:fb:ab:ad:93:fc:f9:
01:23:10:12:16:36:24:2f:6e:b2:6f:aa:b2:c6:c6:5b:ff:6d:
e3:84:8b:ff:fa:ce:69:af:c0:f8:82:c1:76:36:7a:0c:39:ea:
a8:23:94:9b:1a:c8:60:67:0a:b5:53:5d:e2:03:ae:3c:0d:24:
7c:d8:1c:6a:6d:4d:27:81:66:8e:35:dd:4c:3c:3e:86:37:f0:
1f:b5:cb:23:c6:f6:79:09:6d:46:ce:4f:dc:dd:97:6a:3a:45:
fd:8a:8a:dd:cd:8e:3b:be:2f:7d:1a:e2:68:5a:f5:30:2d:5a:
b5:5b:21:99:c0:b8:ce:50:f4:fc:cb:99:82:42:07:4e:40:ac:
cf:28:ba:28:ba:b2:58:88:9e:a1:f0:3b:15:4e:30:53:ef:64:
40:eb:36:64:33:39:26:4d:53:1c:90:dd:d6:67:e2:57:0e:2a:
e4:3a:6b:87:da:3e:f7:33:72:d7:70:53:3b:b6:6d:c5:75:bb:
1a:a6:57:3b:2d:62:94:a7:57:13:64:b1:55:1f:05:04:3d:aa:
aa:b3:32:30:87:61:41:e7:f6:0f:7a:30:7d:b2:17:e0:3a:28:
9b:99:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:13:43 2025 by rpki-client