Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EIUtg9XS1OT0nWQGJLjWFbGgwck.roa
File: EIUtg9XS1OT0nWQGJLjWFbGgwck.roa (raw, json)
Hash identifier: 6jkaesqZoQNo54Jc4jFWSNLIjQxj212kewwtTApP048=
Subject key identifier: 10:85:2D:83:D5:D2:D4:E4:F4:9D:64:06:24:B8:D6:15:B1:A0:C1:C9
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0193DFA3F2AA8518E36F2AD734C07FCA1962
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EIUtg9XS1OT0nWQGJLjWFbGgwck.roa
Signing time: Thu 19 Dec 2024 15:58:03 +0000
ROA not before: Thu 19 Dec 2024 15:58:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213681
IP address blocks: 213.217.2.0/24 maxlen: 24
213.217.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:a3:f2:aa:85:18:e3:6f:2a:d7:34:c0:7f:ca:19:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Dec 19 15:58:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10852d83d5d2d4e4f49d640624b8d615b1a0c1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:ab:80:f2:70:9b:04:67:f3:78:14:39:17:
24:41:cb:ca:a1:a7:24:87:b5:e3:97:47:59:03:96:
e7:1a:b7:1c:64:01:18:9f:c0:68:66:c3:01:50:c9:
18:b9:c3:6a:b7:4a:4a:f0:e8:b2:93:25:79:f4:9d:
28:01:37:20:08:12:b5:45:38:54:a8:f7:cd:13:e8:
13:cf:d8:47:01:62:be:15:1b:30:9d:fd:70:9f:8a:
19:44:a4:23:db:ab:04:62:26:52:d0:4e:92:dc:f9:
61:da:86:17:f3:62:b0:d9:c8:8e:b4:db:25:98:6d:
f2:26:81:3d:db:8c:da:86:28:34:10:e3:51:44:c9:
22:89:24:97:f9:dd:ad:bc:8b:42:86:f5:06:e3:f9:
b1:16:d4:32:ad:fa:c3:80:42:ee:d6:e0:38:69:eb:
8b:f3:57:2b:e2:30:c2:ac:0b:8f:f5:27:6f:c5:af:
d2:5c:d8:19:41:00:12:c4:88:94:69:20:05:cb:8b:
6f:12:40:67:1a:2d:bb:8b:9a:2d:6e:1e:53:e2:6e:
80:8c:a0:80:14:f0:39:10:aa:c3:df:8d:32:64:fc:
32:81:a9:e0:26:63:9b:70:a0:a6:6a:d9:23:34:bd:
d7:ee:98:c3:13:32:a1:45:25:ec:5d:b3:53:69:3c:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:2D:83:D5:D2:D4:E4:F4:9D:64:06:24:B8:D6:15:B1:A0:C1:C9
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EIUtg9XS1OT0nWQGJLjWFbGgwck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.2.0/23
Signature Algorithm: sha256WithRSAEncryption
78:2b:50:df:49:d7:a5:3e:c8:2b:6b:61:af:40:f3:f5:62:ea:
08:6d:e4:9d:f7:3e:0e:8c:14:e5:ea:0a:56:9a:60:d8:f1:c1:
ae:9e:d2:11:4c:19:54:58:68:2e:24:d4:21:f4:0e:4a:dc:da:
b6:59:bc:b6:ab:e1:f3:e1:34:66:43:6d:6c:ce:cb:c3:24:8e:
1f:ab:58:a7:d9:11:11:37:eb:ab:96:d5:c0:1f:de:ce:56:ff:
da:c8:67:d5:8a:3a:4d:c0:58:78:c5:8a:91:7e:04:05:64:71:
b1:09:53:3f:7a:97:c7:26:09:28:3d:23:b5:29:5a:22:da:7f:
c0:eb:7f:cf:da:ef:c2:3e:2a:63:1c:16:80:84:55:f4:cc:df:
14:61:ac:ba:3b:08:95:5f:5f:ed:87:93:df:94:f7:04:e9:3b:
ad:52:ef:f7:b9:c8:62:d7:2b:ab:e3:cb:73:df:31:13:af:26:
93:c0:ec:ec:4f:57:04:89:4d:43:05:fd:27:63:23:2d:31:c1:
3f:06:9f:f7:e4:9b:84:04:d7:ff:83:09:55:26:6c:f7:e7:cd:
c3:fa:d1:ea:62:31:1e:ea:69:58:c9:e7:28:30:65:50:1e:f8:
75:f9:3e:72:7f:f4:aa:3a:c7:7c:4b:69:86:29:f1:f1:68:a1:
e6:7d:5c:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPfo/KqhRjjbyrXNMB/yhliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjQxMjE5MTU1ODAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDg1MmQ4M2Q1ZDJkNGU0ZjQ5ZDY0MDYyNGI4ZDYxNWIxYTBjMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41SrgPJwmwRn83gUORckQcvKoack
h7Xjl0dZA5bnGrccZAEYn8BoZsMBUMkYucNqt0pK8OiykyV59J0oATcgCBK1RThU
qPfNE+gTz9hHAWK+FRswnf1wn4oZRKQj26sEYiZS0E6S3Plh2oYX82Kw2ciOtNsl
mG3yJoE924zahig0EONRRMkiiSSX+d2tvItChvUG4/mxFtQyrfrDgELu1uA4aeuL
81cr4jDCrAuP9Sdvxa/SXNgZQQASxIiUaSAFy4tvEkBnGi27i5otbh5T4m6AjKCA
FPA5EKrD340yZPwygangJmObcKCmatkjNL3X7pjDEzKhRSXsXbNTaTxADwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCFLYPV0tTk9J1kBiS41hWxoMHJMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvRUlVdGc5WFMxT1QwbldRR0pMaldGYkdnd2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1dkCMA0G
CSqGSIb3DQEBCwUAA4IBAQB4K1DfSdelPsgra2GvQPP1YuoIbeSd9z4OjBTl6gpW
mmDY8cGuntIRTBlUWGguJNQh9A5K3Nq2Wby2q+Hz4TRmQ21szsvDJI4fq1in2RER
N+urltXAH97OVv/ayGfVijpNwFh4xYqRfgQFZHGxCVM/epfHJgkoPSO1KVoi2n/A
63/P2u/CPipjHBaAhFX0zN8UYay6OwiVX1/th5PflPcE6TutUu/3uchi1yur48tz
3zETryaTwOzsT1cEiU1DBf0nYyMtMcE/Bp/35JuEBNf/gwlVJmz3583D+tHqYjEe
6mlYyecoMGVQHvh1+T5yf/SqOsd8S2mGKfHxaKHmfVyl
-----END CERTIFICATE-----
Generated at Sun Apr 13 09:09:41 2025 by rpki-client