Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fHR__OIva2EEYSDhLvwLPqfRoI8.roa
File: fHR__OIva2EEYSDhLvwLPqfRoI8.roa (raw, json)
Hash identifier: C7tjM44zQbQhcBOcBLCgiGmgAM+tSetggFSjPZ1ZTwk=
Subject key identifier: 7C:74:7F:FC:E2:2F:6B:61:04:61:20:E1:2E:FC:0B:3E:A7:D1:A0:8F
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01917E154FE7F47A1EFA3E7E29685C9EC7A3
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fHR__OIva2EEYSDhLvwLPqfRoI8.roa
Signing time: Fri 23 Aug 2024 07:13:31 +0000
ROA not before: Fri 23 Aug 2024 07:13:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 213.137.82.0/24 maxlen: 24
213.137.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 10:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:15:4f:e7:f4:7a:1e:fa:3e:7e:29:68:5c:9e:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 23 07:13:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c747ffce22f6b61046120e12efc0b3ea7d1a08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0b:cf:2e:33:d7:d2:72:f3:8a:3b:ac:6d:eb:
8c:06:c9:5b:0b:1c:cc:a3:ee:37:7c:37:7e:a4:18:
bd:e4:4b:74:a8:59:e8:bd:90:a7:d9:16:d9:86:4a:
b6:99:db:4e:7a:b8:08:35:8e:1b:51:b0:2b:35:ad:
dd:01:0a:e4:02:f0:0b:ef:89:58:76:74:0e:d1:58:
8a:6d:a6:c5:f1:94:dc:28:04:89:0b:59:0f:90:8f:
e8:e3:bf:86:50:70:bd:27:55:12:3e:47:54:32:c0:
a4:27:7d:8a:de:08:3b:92:3f:46:b6:8f:e0:a8:be:
c3:29:7a:2d:2c:41:5c:50:46:67:f3:5c:42:9d:eb:
06:f2:70:7b:c9:1f:25:55:97:79:f1:ab:75:5f:6f:
d4:1c:ab:40:9f:dc:ae:05:7c:99:be:f2:e0:f8:a5:
7e:32:d9:f1:98:3e:e7:d9:d8:31:b9:49:d2:59:c0:
90:c9:c2:ff:92:b2:cf:34:79:c7:bf:7f:8c:17:c2:
97:cf:e0:18:bb:93:4b:2a:c4:8e:ca:d5:7b:0f:a9:
9b:58:c0:e1:d8:32:f7:68:ea:50:61:47:da:b8:6d:
72:3a:4d:a8:72:52:2c:53:bc:7d:11:d1:95:af:fa:
86:fb:77:45:f8:d8:f3:b0:75:68:6e:33:0f:e9:02:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:74:7F:FC:E2:2F:6B:61:04:61:20:E1:2E:FC:0B:3E:A7:D1:A0:8F
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/fHR__OIva2EEYSDhLvwLPqfRoI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.82.0/23
Signature Algorithm: sha256WithRSAEncryption
23:3c:8d:82:4f:a2:13:e5:35:27:0d:d0:41:87:87:7c:3c:b1:
d0:b6:e6:d6:ab:71:2f:cf:6d:c4:a4:c0:01:6b:22:a2:a9:d9:
0a:dc:56:45:21:a0:3e:0e:28:11:90:b5:06:ef:8d:b6:c6:cc:
ee:95:1b:cb:2e:62:05:db:75:a0:46:2b:7c:7f:02:47:00:58:
15:a0:66:09:0e:1f:9b:ba:9e:ac:d3:33:45:a6:7a:58:2d:21:
9f:70:5b:79:8c:ef:6b:fa:bc:e3:66:29:d9:52:5f:68:0c:fe:
ab:57:70:db:6d:64:0d:ef:74:4f:d2:71:1f:4d:63:c2:25:dd:
ab:7a:28:5f:6f:99:fe:6b:f9:26:d4:e6:33:5b:b4:81:6a:a4:
74:1c:08:a1:e6:ba:90:ec:e7:0f:64:89:da:44:44:a9:20:55:
9f:41:14:7d:59:96:f6:d9:97:60:c4:61:7c:29:6f:d3:e4:0c:
23:4a:8c:db:85:06:b4:34:59:76:4a:73:3f:7f:f7:86:29:99:
87:b6:3e:99:a7:ad:8c:a2:bc:97:76:75:e7:98:74:4c:89:2a:
99:b7:eb:e7:7f:a4:2f:cb:51:d1:e9:dc:f7:f5:ba:c1:e2:3d:
dd:52:93:aa:47:1a:57:4d:82:e3:83:f3:9b:17:70:39:fa:75:
1d:4e:27:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZF+FU/n9Hoe+j5+KWhcnsejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjQwODIzMDcxMzMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzc0N2ZmY2UyMmY2YjYxMDQ2MTIwZTEyZWZjMGIzZWE3ZDFhMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AvPLjPX0nLzijusbeuMBslbCxzM
o+43fDd+pBi95Et0qFnovZCn2RbZhkq2mdtOergINY4bUbArNa3dAQrkAvAL74lY
dnQO0ViKbabF8ZTcKASJC1kPkI/o47+GUHC9J1USPkdUMsCkJ32K3gg7kj9Gto/g
qL7DKXotLEFcUEZn81xCnesG8nB7yR8lVZd58at1X2/UHKtAn9yuBXyZvvLg+KV+
MtnxmD7n2dgxuUnSWcCQycL/krLPNHnHv3+MF8KXz+AYu5NLKsSOytV7D6mbWMDh
2DL3aOpQYUfauG1yOk2oclIsU7x9EdGVr/qG+3dF+NjzsHVobjMP6QKzfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHx0f/ziL2thBGEg4S78Cz6n0aCPMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvZkhSX19PSXZhMkVFWVNEaEx2d0xQcWZSb0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1YlSMA0G
CSqGSIb3DQEBCwUAA4IBAQAjPI2CT6IT5TUnDdBBh4d8PLHQtubWq3Evz23EpMAB
ayKiqdkK3FZFIaA+DigRkLUG7422xszulRvLLmIF23WgRit8fwJHAFgVoGYJDh+b
up6s0zNFpnpYLSGfcFt5jO9r+rzjZinZUl9oDP6rV3DbbWQN73RP0nEfTWPCJd2r
eihfb5n+a/km1OYzW7SBaqR0HAih5rqQ7OcPZInaRESpIFWfQRR9WZb22ZdgxGF8
KW/T5AwjSozbhQa0NFl2SnM/f/eGKZmHtj6Zp62MoryXdnXnmHRMiSqZt+vnf6Qv
y1HR6dz39brB4j3dUpOqRxpXTYLjg/ObF3A5+nUdTidl
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:22 2025 by rpki-client