Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/e7-9iejbuJP3hFAHU2hvRwYVwYc.roa
File: e7-9iejbuJP3hFAHU2hvRwYVwYc.roa (raw, json)
Hash identifier: qWi+4YEirkhDYEKZ/9N/SUsdL0t4wAtHVH+LfRneVbM=
Subject key identifier: 7B:BF:BD:89:E8:DB:B8:93:F7:84:50:07:53:68:6F:47:06:15:C1:87
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0192771F97F79DFC80DC6DC800FF3B6E1A26
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/e7-9iejbuJP3hFAHU2hvRwYVwYc.roa
Signing time: Thu 10 Oct 2024 15:50:12 +0000
ROA not before: Thu 10 Oct 2024 15:50:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 62.90.135.0/24 maxlen: 24
147.234.8.0/21 maxlen: 24
147.234.74.0/24 maxlen: 24
147.234.75.0/24 maxlen: 24
147.234.81.0/24 maxlen: 24
147.234.88.0/24 maxlen: 24
147.234.89.0/24 maxlen: 24
194.90.1.0/24 maxlen: 24
199.203.1.0/24 maxlen: 24
212.143.194.0/24 maxlen: 24
212.143.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:1f:97:f7:9d:fc:80:dc:6d:c8:00:ff:3b:6e:1a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Oct 10 15:50:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bbfbd89e8dbb893f784500753686f470615c187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:af:d6:6d:f9:1e:b8:32:81:3d:d6:6d:08:
75:5c:e0:c8:51:95:ae:41:e7:bd:e3:02:22:c9:30:
d0:51:bd:c8:4e:04:25:d9:8a:ac:16:39:6d:b9:41:
fc:c7:64:ca:ce:75:d7:41:25:71:da:50:59:42:c4:
46:ae:19:7b:05:cf:1b:17:dc:d3:0a:fa:e0:56:fa:
a1:a9:db:d3:c4:68:bd:bb:66:3b:e0:8d:8b:0b:67:
6d:94:11:e5:7f:19:70:75:92:87:65:e5:7e:ce:4f:
d5:d4:07:a8:70:1e:f0:20:2d:25:ae:6d:c8:3d:24:
26:9e:dd:c5:dd:21:ba:79:c8:50:34:11:62:f0:d0:
66:1e:f3:15:37:40:10:a9:2d:16:eb:55:38:e3:c3:
a5:6e:71:a5:2a:37:59:ab:6b:c0:44:65:44:b3:b4:
0b:fe:21:56:27:d5:c4:46:38:7b:ad:c1:0a:5d:71:
b3:27:21:67:eb:22:51:fd:a2:41:e8:76:86:dd:0f:
bd:14:b9:e4:b4:3a:65:13:48:ec:47:f7:9a:1d:c2:
88:11:54:85:5e:68:0c:61:d1:c5:f6:4a:ef:a8:ab:
72:76:fd:f4:72:0d:68:9b:ca:c1:f5:c4:90:dd:1c:
7c:d8:5c:f9:03:b7:81:e7:5c:40:ca:42:8e:51:1f:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:BD:89:E8:DB:B8:93:F7:84:50:07:53:68:6F:47:06:15:C1:87
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/e7-9iejbuJP3hFAHU2hvRwYVwYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.90.135.0/24
147.234.8.0/21
147.234.74.0/23
147.234.81.0/24
147.234.88.0/23
194.90.1.0/24
199.203.1.0/24
212.143.194.0/24
212.143.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:93:25:39:19:60:78:fa:0c:80:58:3e:5e:13:66:b0:bd:26:
5c:05:7e:b4:5a:01:a3:ba:1b:2b:6a:c8:03:2e:88:59:48:b4:
41:a1:92:66:53:5c:99:82:34:41:c0:67:29:03:4a:75:6d:1b:
7b:8d:de:6e:15:81:64:3c:13:c5:83:70:d7:9d:b0:bb:11:28:
53:71:39:2a:18:c4:c0:ce:1e:d5:70:ac:58:83:f7:e0:c6:81:
fe:d2:cc:ec:da:0e:36:3d:28:5d:95:48:0c:e2:cf:24:29:c1:
1e:09:10:84:75:18:b7:ae:2a:26:80:9d:1c:9c:1b:01:94:ab:
b5:60:62:60:27:27:66:a8:72:9e:f6:b9:92:bc:2e:16:8f:68:
45:4b:60:12:f1:08:9b:f9:8c:46:fd:29:36:a4:8b:71:46:7d:
48:65:9e:3c:cc:ac:67:c3:3b:fa:f4:b3:0b:32:2c:0f:ad:75:
0c:b8:7c:ff:42:0d:51:51:ba:1f:7f:80:79:53:84:fc:00:b3:
5e:61:5e:18:66:1b:75:63:dd:8c:d1:66:84:c1:29:7f:6d:2f:
2d:2f:95:7b:82:05:7e:3d:84:06:f3:a9:22:a0:b2:41:44:99:
88:c5:49:a3:d1:82:d4:23:10:ea:f8:5f:07:74:3e:5f:62:4f:
65:11:42:fe
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZJ3H5f3nfyA3G3IAP87bhomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjQxMDEwMTU1MDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmJmYmQ4OWU4ZGJiODkzZjc4NDUwMDc1MzY4NmY0NzA2MTVjMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWqv1m35HrgygT3WbQh1XODIUZWu
Qee94wIiyTDQUb3ITgQl2YqsFjltuUH8x2TKznXXQSVx2lBZQsRGrhl7Bc8bF9zT
CvrgVvqhqdvTxGi9u2Y74I2LC2dtlBHlfxlwdZKHZeV+zk/V1AeocB7wIC0lrm3I
PSQmnt3F3SG6echQNBFi8NBmHvMVN0AQqS0W61U448OlbnGlKjdZq2vARGVEs7QL
/iFWJ9XERjh7rcEKXXGzJyFn6yJR/aJB6HaG3Q+9FLnktDplE0jsR/eaHcKIEVSF
XmgMYdHF9krvqKtydv30cg1om8rB9cSQ3Rx82Fz5A7eB51xAykKOUR+QUwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHu/vYno27iT94RQB1Nob0cGFcGHMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvZTctOWllamJ1SlAzaEZBSFUyaHZSd1lWd1ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAPlqHAwQD
k+oIAwQBk+pKAwQAk+pRAwQBk+pYAwQAwloBAwQAx8sBAwQA1I/CAwQA1I/TMA0G
CSqGSIb3DQEBCwUAA4IBAQCukyU5GWB4+gyAWD5eE2awvSZcBX60WgGjuhsrasgD
LohZSLRBoZJmU1yZgjRBwGcpA0p1bRt7jd5uFYFkPBPFg3DXnbC7EShTcTkqGMTA
zh7VcKxYg/fgxoH+0szs2g42PShdlUgM4s8kKcEeCRCEdRi3riomgJ0cnBsBlKu1
YGJgJydmqHKe9rmSvC4Wj2hFS2AS8Qib+YxG/Sk2pItxRn1IZZ48zKxnwzv69LML
MiwPrXUMuHz/Qg1RUboff4B5U4T8ALNeYV4YZht1Y92M0WaEwSl/bS8tL5V7ggV+
PYQG86kioLJBRJmIxUmj0YLUIxDq+F8HdD5fYk9lEUL+
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:17 2025 by rpki-client