Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/eI9bqfP3XaLBsP9TBhCGIHGqfCk.roa
File: eI9bqfP3XaLBsP9TBhCGIHGqfCk.roa (raw, json)
Hash identifier: X8IvdQtU+0XAlebj6rzDIFTF0az19vhtfoMMIh2jBsY=
Subject key identifier: 78:8F:5B:A9:F3:F7:5D:A2:C1:B0:FF:53:06:10:86:20:71:AA:7C:29
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018B6155D25AAF641DCF0393EDEBAF536956
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/eI9bqfP3XaLBsP9TBhCGIHGqfCk.roa
Signing time: Tue 24 Oct 2023 10:58:16 +0000
ROA not before: Tue 24 Oct 2023 10:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5400
IP address blocks: 213.9.138.0/24 maxlen: 24
212.163.169.0/24 maxlen: 24
213.9.148.0/24 maxlen: 24
212.49.181.0/24 maxlen: 24
212.49.190.0/24 maxlen: 24
213.9.232.0/24 maxlen: 24
212.163.40.0/24 maxlen: 24
212.49.131.0/24 maxlen: 24
212.163.55.0/24 maxlen: 24
212.49.142.0/24 maxlen: 24
212.49.167.0/24 maxlen: 24
213.9.173.0/24 maxlen: 24
213.9.177.0/24 maxlen: 24
212.163.206.0/24 maxlen: 24
212.163.3.0/24 maxlen: 24
213.9.188.0/24 maxlen: 24
212.163.6.0/24 maxlen: 24
212.163.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:55:d2:5a:af:64:1d:cf:03:93:ed:eb:af:53:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Oct 24 10:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=788f5ba9f3f75da2c1b0ff530610862071aa7c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:90:68:ff:0e:20:d0:0b:45:aa:7b:7a:fa:
c9:3f:ce:8e:14:0e:27:a6:e5:4a:79:bd:e0:42:bf:
fc:4c:16:39:57:41:72:87:a2:14:cb:f0:cb:cc:a3:
d1:51:cd:2a:74:b6:31:8f:ea:25:53:0b:35:bd:f3:
81:df:83:ec:e8:fa:f0:b2:c6:91:dd:75:ad:8b:7a:
a2:1a:c4:15:93:c6:7a:30:c9:82:51:d0:f8:9b:ac:
80:37:c9:e8:6f:77:ad:81:66:ad:a8:bd:47:5c:96:
4c:83:26:ab:45:4f:4c:85:c2:30:d1:ce:4c:5b:19:
fd:0b:5e:fd:50:53:f0:13:e6:3c:65:0c:c3:ad:28:
b8:d7:d0:46:16:c3:d7:62:a0:4b:72:a0:3f:b7:49:
b1:2e:f3:d5:32:6c:c4:81:d2:60:a7:f7:3f:d4:d4:
25:5d:c8:4e:de:26:4d:ec:af:90:49:42:6d:8e:c3:
51:c2:df:6c:3e:20:55:85:f9:d3:f4:e5:9c:dc:21:
22:38:d0:19:da:83:16:95:08:aa:0a:6e:9f:e0:b0:
68:00:e2:14:30:07:b3:5e:85:4f:85:90:e0:25:72:
88:34:76:d7:84:8f:50:1d:db:8e:7e:7b:97:6c:1d:
6f:e5:19:89:3b:2e:37:02:13:98:a7:14:c3:a1:33:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:5B:A9:F3:F7:5D:A2:C1:B0:FF:53:06:10:86:20:71:AA:7C:29
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/eI9bqfP3XaLBsP9TBhCGIHGqfCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.131.0/24
212.49.142.0/24
212.49.167.0/24
212.49.181.0/24
212.49.190.0/24
212.163.3.0/24
212.163.6.0/24
212.163.24.0/24
212.163.40.0/24
212.163.55.0/24
212.163.169.0/24
212.163.206.0/24
213.9.138.0/24
213.9.148.0/24
213.9.173.0/24
213.9.177.0/24
213.9.188.0/24
213.9.232.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a7:7e:1b:5f:d0:f2:6a:87:a0:70:97:92:3e:2e:6a:8c:89:
34:6a:c9:f3:58:06:66:88:ee:6d:9f:a5:86:5b:cc:66:67:b4:
30:1e:28:40:de:29:d8:e0:78:63:37:93:89:1b:fb:bc:f3:52:
76:81:f8:17:5e:ed:7d:d3:ea:b3:1b:3b:a6:79:b4:32:97:91:
c7:59:a3:23:b6:d7:0c:93:a9:ed:1d:03:72:a2:07:d1:16:cf:
2c:de:a4:4f:b8:fe:3a:f6:35:a4:3e:59:cf:ef:cd:30:69:50:
94:b2:07:e5:17:d7:24:4d:72:5b:00:ba:e6:2a:ce:9c:fd:11:
af:a7:b8:80:41:5c:6a:80:4c:27:12:bc:57:0c:f5:a2:23:c4:
8b:d0:13:f2:eb:08:49:4d:a0:a6:35:87:bf:30:e6:09:ad:87:
98:6c:e1:40:1d:5b:34:48:01:8d:a0:1d:26:e1:c7:50:08:70:
51:bb:53:01:e4:2d:64:96:56:61:70:80:64:dd:12:e3:1e:b7:
c6:4a:1c:49:0a:4b:ec:81:10:82:01:a1:ec:81:7c:c9:5b:73:
03:92:39:86:3d:9c:f4:9c:1b:76:bd:a4:e1:ab:2a:50:8c:48:
6a:9c:48:a8:4d:1e:8a:c3:29:92:77:e1:f2:9e:0f:9c:0e:d2:
67:ea:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org