Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/7CBPhDHSl2zQAyLfGL8OgbF2qtI.roa
File: 7CBPhDHSl2zQAyLfGL8OgbF2qtI.roa (raw, json)
Hash identifier: 82jeQS20fUJ30Mx76IFKR7yj6BzFksheGqOtYMhWStc=
Subject key identifier: EC:20:4F:84:31:D2:97:6C:D0:03:22:DF:18:BF:0E:81:B1:76:AA:D2
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01946E30E8E78141491943213D21D59814F1
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/7CBPhDHSl2zQAyLfGL8OgbF2qtI.roa
Signing time: Thu 16 Jan 2025 08:18:06 +0000
ROA not before: Thu 16 Jan 2025 08:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 213.18.224.0/20 maxlen: 24
217.177.0.0/21 maxlen: 24
217.181.72.0/22 maxlen: 24
217.181.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 07:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:30:e8:e7:81:41:49:19:43:21:3d:21:d5:98:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 16 08:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec204f8431d2976cd00322df18bf0e81b176aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:ef:8f:2f:cf:e6:6f:79:2a:dc:a0:fb:f9:
72:f7:d5:4f:6a:d6:a5:9c:4b:46:b4:b5:47:44:e7:
82:9b:a9:fa:92:75:c0:3c:84:17:ee:6b:08:a2:78:
36:d6:8b:c8:9d:af:29:e9:1b:96:b3:5a:15:00:32:
76:a3:70:ca:51:f2:91:8e:22:7f:f1:c5:ca:7a:7c:
2f:62:96:1f:75:69:9c:19:1e:bd:88:b3:eb:72:34:
bf:26:5d:d3:f8:09:4c:50:45:e4:7c:59:2f:c1:73:
b5:b1:8a:47:2a:ce:67:b2:ae:ab:03:b6:9b:fa:36:
65:1a:f9:59:41:e0:1c:66:32:82:41:25:3e:3a:11:
96:fa:2c:73:5f:1c:98:5c:08:75:09:0b:5a:10:61:
c4:e9:6e:9e:95:f0:0b:d1:89:0f:66:68:43:2d:12:
e4:4b:6f:74:6c:c9:f4:16:c9:82:b6:59:e0:48:10:
9b:65:1f:51:13:5f:31:d6:aa:b5:63:12:3c:93:82:
f4:fa:98:ef:a8:da:df:fa:90:ba:c7:81:8e:88:06:
c2:ed:2e:15:99:86:d8:4d:db:f4:68:a8:7d:2a:55:
3a:38:ee:98:75:ac:ae:fd:75:ac:1e:8d:c8:2e:32:
ee:11:6f:13:37:11:84:4f:69:f9:3e:bb:c6:82:0a:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:4F:84:31:D2:97:6C:D0:03:22:DF:18:BF:0E:81:B1:76:AA:D2
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/7CBPhDHSl2zQAyLfGL8OgbF2qtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.224.0/20
217.177.0.0/21
217.181.72.0/22
217.181.80.0/22
Signature Algorithm: sha256WithRSAEncryption
66:27:f5:79:38:03:e6:47:2f:4e:d8:cf:1b:f6:5e:4b:3f:86:
ba:cc:8b:8c:b3:9d:39:0d:58:24:7b:32:5a:d1:56:fc:79:bb:
08:4d:7b:04:00:d5:76:24:ee:54:31:d6:95:33:84:01:7b:75:
5c:d5:03:9a:63:67:50:f5:08:7a:9a:82:4d:63:98:b5:56:de:
d2:cb:91:66:f2:f9:37:8d:e3:b1:c6:1e:5a:89:a7:ef:3f:62:
e2:1c:df:92:24:62:4e:45:8b:df:c2:51:13:b8:cb:a7:fc:a9:
b8:4f:45:2d:13:67:21:9b:53:55:82:74:d5:f4:43:d6:06:2d:
6b:9f:af:29:32:93:97:76:3e:5d:aa:fc:21:86:98:d6:b3:9c:
e8:c6:a5:f5:57:27:5d:bb:61:07:ac:e3:18:4f:d1:21:b7:47:
60:21:24:19:de:8d:b8:d4:f1:38:e5:26:31:ec:74:92:45:3a:
e0:4a:b4:5a:42:88:45:34:5f:e5:90:7c:d1:d2:27:39:35:33:
0f:fd:f8:e9:e6:44:ea:76:24:ff:79:97:29:c3:3d:e7:10:91:
34:d2:7c:f4:36:f3:87:8b:26:21:14:de:41:70:db:d2:79:cc:
99:19:b7:2a:19:32:ac:8f:3d:22:4b:5b:c2:92:2e:16:77:ed:
87:04:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:59:58 2025 by rpki-client