Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/7LSyhdkL7Kf_CP-4D852caceFIE.roa
File: 7LSyhdkL7Kf_CP-4D852caceFIE.roa (raw, json)
Hash identifier: G/reEsGRlkDKjbOh8CWNTBvHHgTajdT8KWF4F/0l40Q=
Subject key identifier: EC:B4:B2:85:D9:0B:EC:A7:FF:08:FF:B8:0F:CE:76:71:A7:1E:14:81
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0193A1554D2044D669A55CA32B5E37FBA551
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/7LSyhdkL7Kf_CP-4D852caceFIE.roa
Signing time: Sat 07 Dec 2024 13:35:42 +0000
ROA not before: Sat 07 Dec 2024 13:35:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214061
IP address blocks: 83.142.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:55:4d:20:44:d6:69:a5:5c:a3:2b:5e:37:fb:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Dec 7 13:35:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecb4b285d90beca7ff08ffb80fce7671a71e1481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:28:dc:c3:1a:a9:c6:32:ad:43:6b:3a:ab:
d8:c1:50:f4:d3:31:21:35:86:98:af:96:b0:92:7c:
b6:c0:98:8e:d3:7a:3d:e5:2c:11:36:cc:5a:f2:ba:
01:3a:11:01:a2:b9:66:52:92:20:80:37:ec:f9:cc:
58:1f:4c:92:f1:8c:11:df:5b:26:01:56:d4:95:3a:
7c:ed:54:a0:96:bb:94:06:4a:52:98:ea:21:43:91:
15:96:99:96:4a:d1:29:90:02:34:cf:71:91:c3:1e:
e2:d8:97:3c:89:99:5a:f5:12:1c:d4:73:54:31:b3:
7e:11:3d:30:03:8f:f8:40:df:03:2d:b5:60:64:03:
67:69:c2:c4:bd:2f:ba:ee:42:b6:f2:9b:55:07:50:
8f:ad:ab:4f:3b:19:5d:ac:e3:43:b8:40:57:58:df:
a3:67:99:bb:3f:b9:62:e0:14:ac:24:b1:88:37:ab:
0f:11:51:29:60:ed:d1:73:da:05:2f:1e:db:4c:fc:
59:93:f8:04:65:1c:c8:93:18:fe:a0:c0:90:27:67:
49:21:58:e6:19:44:d1:73:c2:ac:f1:3c:0d:39:27:
3e:d4:c0:60:ce:ba:48:aa:9c:05:bb:fa:8c:06:96:
97:13:73:ea:0d:37:3d:44:04:19:20:10:ae:77:0a:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:B2:85:D9:0B:EC:A7:FF:08:FF:B8:0F:CE:76:71:A7:1E:14:81
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/7LSyhdkL7Kf_CP-4D852caceFIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7d:e7:02:b0:9f:18:a1:76:a9:2f:b8:18:2e:f0:30:c3:ae:
ae:ff:c5:ee:f5:5e:a8:ec:5f:6a:73:f3:a0:40:95:fc:d6:0f:
08:c1:ae:af:e8:83:a7:d7:51:b3:ec:21:39:ef:94:fe:6c:c0:
f6:11:3d:ab:2e:77:01:a5:b1:b3:a0:3e:11:bc:cb:a7:9e:6e:
b2:9f:03:4a:23:45:b9:ad:ca:03:34:f0:b0:23:8b:b4:73:0d:
f2:94:01:53:55:a5:73:5f:30:9e:69:47:20:fa:24:83:46:e0:
f7:76:7f:b9:ac:d7:b5:9a:20:7c:70:e5:4a:bc:21:7e:28:2b:
aa:c7:8b:95:cb:c6:26:f8:1e:a4:a9:01:dd:ae:8d:87:57:e1:
6b:99:27:45:ad:04:04:25:5b:1b:5a:d1:23:61:8d:ec:72:10:
65:ba:da:53:60:58:f6:c6:49:d5:1b:c5:55:9b:a1:e8:02:e9:
5b:cf:0d:23:8f:44:75:88:ed:52:cf:97:1c:67:ed:11:b4:70:
40:d2:eb:b0:e7:a4:f6:20:f8:da:2e:b6:a8:af:b5:e6:83:d5:
4a:56:d9:87:d8:7b:9f:fe:10:41:f0:c7:8c:7b:4c:15:fb:1d:
2b:1e:8d:66:b6:1c:c1:be:41:39:fe:0c:13:cc:97:4f:40:bf:
08:47:4b:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOhVU0gRNZppVyjK143+6VRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjQxMjA3MTMzNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2I0YjI4NWQ5MGJlY2E3ZmYwOGZmYjgwZmNlNzY3MWE3MWUxNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0co3MMaqcYyrUNrOqvYwVD00zEh
NYaYr5awkny2wJiO03o95SwRNsxa8roBOhEBorlmUpIggDfs+cxYH0yS8YwR31sm
AVbUlTp87VSglruUBkpSmOohQ5EVlpmWStEpkAI0z3GRwx7i2Jc8iZla9RIc1HNU
MbN+ET0wA4/4QN8DLbVgZANnacLEvS+67kK28ptVB1CPratPOxldrONDuEBXWN+j
Z5m7P7li4BSsJLGIN6sPEVEpYO3Rc9oFLx7bTPxZk/gEZRzIkxj+oMCQJ2dJIVjm
GUTRc8Ks8TwNOSc+1MBgzrpIqpwFu/qMBpaXE3PqDTc9RAQZIBCudwqzqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOy0soXZC+yn/wj/uA/OdnGnHhSBMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvN0xTeWhka0w3S2ZfQ1AtNEQ4NTJjYWNlRklFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU47VMA0G
CSqGSIb3DQEBCwUAA4IBAQAsfecCsJ8YoXapL7gYLvAww66u/8Xu9V6o7F9qc/Og
QJX81g8Iwa6v6IOn11Gz7CE575T+bMD2ET2rLncBpbGzoD4RvMunnm6ynwNKI0W5
rcoDNPCwI4u0cw3ylAFTVaVzXzCeaUcg+iSDRuD3dn+5rNe1miB8cOVKvCF+KCuq
x4uVy8Ym+B6kqQHdro2HV+FrmSdFrQQEJVsbWtEjYY3schBlutpTYFj2xknVG8VV
m6HoAulbzw0jj0R1iO1Sz5ccZ+0RtHBA0uuw56T2IPjaLraor7Xmg9VKVtmH2Huf
/hBB8MeMe0wV+x0rHo1mthzBvkE5/gwTzJdPQL8IR0uP
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:01:25 2025 by rpki-client