Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/0PbOLPuld875u4Tn7j2qaENHHBQ.roa
File: 0PbOLPuld875u4Tn7j2qaENHHBQ.roa (raw, json)
Hash identifier: Noj3DbMg20AOY0NtezxNQmgBY2SbLjU0/kp3nE3th1k=
Subject key identifier: D0:F6:CE:2C:FB:A5:77:CE:F9:BB:84:E7:EE:3D:AA:68:43:47:1C:14
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0193E32D6778351FB1D3D14864BD4DB43BC4
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/0PbOLPuld875u4Tn7j2qaENHHBQ.roa
Signing time: Fri 20 Dec 2024 08:27:03 +0000
ROA not before: Fri 20 Dec 2024 08:27:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 213.18.244.0/24 maxlen: 24
217.180.17.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 10:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:2d:67:78:35:1f:b1:d3:d1:48:64:bd:4d:b4:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 20 08:27:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f6ce2cfba577cef9bb84e7ee3daa6843471c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:f6:e9:24:8a:1e:fa:44:d2:80:83:18:ca:
11:33:b5:e9:87:0b:75:d8:54:0e:ff:ae:28:c8:78:
cb:ea:b5:89:86:14:c4:dd:4f:f7:c4:5b:8f:16:41:
0d:c6:c4:68:0c:89:4c:f3:ac:81:c4:79:ca:57:cb:
46:65:18:36:46:32:e3:99:50:10:57:ba:e6:b5:50:
c4:44:fc:49:09:55:55:b0:9a:c2:eb:38:5d:bb:ae:
12:bf:7e:61:ff:3d:14:b0:30:f6:d1:a1:99:4c:54:
a5:34:7d:32:c8:4b:af:f2:2f:ad:e4:7d:93:ae:c3:
8d:33:e2:e9:ee:74:ff:cf:4e:b2:6e:33:53:5f:12:
a2:b4:5f:c4:c1:a7:d3:a0:ca:0d:a9:76:cf:c5:0c:
de:71:90:ef:c7:3c:c8:a1:28:01:c5:a1:ac:87:49:
7f:11:31:3e:14:3b:d5:7a:64:49:4b:5e:4d:46:48:
18:e2:56:34:0e:1b:08:db:c5:58:7b:8c:cc:46:15:
11:ed:68:13:4a:2a:e4:5d:9c:41:a9:42:52:49:2b:
d5:8f:71:30:b5:69:5a:27:74:2e:4e:4e:02:db:02:
3c:70:55:66:af:17:49:d5:31:93:ce:9b:b3:ee:00:
d4:a6:81:49:e2:0b:c2:14:be:e6:f5:c6:99:05:f3:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F6:CE:2C:FB:A5:77:CE:F9:BB:84:E7:EE:3D:AA:68:43:47:1C:14
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/0PbOLPuld875u4Tn7j2qaENHHBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.244.0/24
217.180.17.0/24
217.180.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5b:86:3d:f5:b6:58:d0:9a:51:57:00:df:47:bf:d6:2c:37:
8c:e1:d1:f6:f9:60:47:7d:73:5f:e4:2b:5d:41:ba:ad:bf:db:
86:3f:00:1b:1e:f5:b4:85:f3:76:f9:f8:bd:e4:f3:11:75:51:
9d:8f:ec:70:30:6c:7d:47:13:4b:06:c6:0f:72:3d:87:8a:9c:
e5:ba:b3:c8:6f:44:42:22:7c:46:0e:a7:1b:6b:dc:f2:cd:c8:
87:72:36:1f:37:67:2c:08:6a:9b:46:e9:1e:b3:fc:a5:ae:14:
ae:43:d5:0b:30:c7:f3:d5:64:8d:df:37:79:a3:aa:dc:00:3f:
93:7b:8e:15:2b:14:2d:0a:a2:34:22:3c:e4:7d:22:c6:f2:c8:
02:02:bb:9b:4f:78:6e:17:57:a0:5e:0d:89:7e:dd:46:5a:a1:
36:08:7c:73:35:48:f3:9e:1f:b7:34:a7:1d:e1:44:c0:00:6b:
c8:fb:b1:bb:34:9d:51:1a:d9:a1:9a:33:66:91:f5:bf:43:13:
f6:7a:09:5e:a8:4a:99:43:2d:c0:b0:18:5a:ea:f1:d1:fe:80:
19:9c:28:d1:ac:ab:fc:c6:0d:46:18:3c:e6:8d:39:08:ba:90:
28:8a:5b:5e:f6:02:fe:d9:29:99:8d:c5:cc:38:8a:5d:48:9c:
64:06:fa:c7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZPjLWd4NR+x09FIZL1NtDvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQxMjIwMDgyNzAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGY2Y2UyY2ZiYTU3N2NlZjliYjg0ZTdlZTNkYWE2ODQzNDcxYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJH26SSKHvpE0oCDGMoRM7Xphwt1
2FQO/64oyHjL6rWJhhTE3U/3xFuPFkENxsRoDIlM86yBxHnKV8tGZRg2RjLjmVAQ
V7rmtVDERPxJCVVVsJrC6zhdu64Sv35h/z0UsDD20aGZTFSlNH0yyEuv8i+t5H2T
rsONM+Lp7nT/z06ybjNTXxKitF/EwafToMoNqXbPxQzecZDvxzzIoSgBxaGsh0l/
ETE+FDvVemRJS15NRkgY4lY0DhsI28VYe4zMRhUR7WgTSirkXZxBqUJSSSvVj3Ew
tWlaJ3QuTk4C2wI8cFVmrxdJ1TGTzpuz7gDUpoFJ4gvCFL7m9caZBfN64QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFND2ziz7pXfO+buE5+49qmhDRxwUMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvMFBiT0xQdWxkODc1dTRUbjdqMnFhRU5ISEJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1RL0AwQA
2bQRAwQA2bQuMA0GCSqGSIb3DQEBCwUAA4IBAQAcW4Y99bZY0JpRVwDfR7/WLDeM
4dH2+WBHfXNf5CtdQbqtv9uGPwAbHvW0hfN2+fi95PMRdVGdj+xwMGx9RxNLBsYP
cj2HipzlurPIb0RCInxGDqcba9zyzciHcjYfN2csCGqbRukes/ylrhSuQ9ULMMfz
1WSN3zd5o6rcAD+Te44VKxQtCqI0IjzkfSLG8sgCArubT3huF1egXg2Jft1GWqE2
CHxzNUjznh+3NKcd4UTAAGvI+7G7NJ1RGtmhmjNmkfW/QxP2egleqEqZQy3AsBha
6vHR/oAZnCjRrKv8xg1GGDzmjTkIupAoilte9gL+2SmZjcXMOIpdSJxkBvrH
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:21 2025 by rpki-client