Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/iIpDZn7le3EnciaSOr3weFexefs.roa
File: iIpDZn7le3EnciaSOr3weFexefs.roa (raw, json)
Hash identifier: e045xjySRMjrmQH8Hb82ZYiUUSVCQeh0HYo5jayhDmk=
Subject key identifier: 88:8A:43:66:7E:E5:7B:71:27:72:26:92:3A:BD:F0:78:57:B1:79:FB
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B2A2B4F82F59FD2BAAEFB152760A78
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/iIpDZn7le3EnciaSOr3weFexefs.roa
Signing time: Thu 02 Jan 2025 01:47:54 +0000
ROA not before: Thu 02 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213710
IP address blocks: 213.18.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 08:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a2:b4:f8:2f:59:fd:2b:aa:ef:b1:52:76:0a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=888a43667ee57b71277226923abdf07857b179fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:dc:55:53:e0:a8:01:00:f6:c8:4d:e8:81:
c5:7b:7e:ea:c5:2d:1c:7e:77:58:e3:cf:8e:4d:71:
92:95:21:10:8d:62:c5:8c:f5:93:a6:92:b1:28:bb:
91:f2:eb:d9:84:0e:54:68:9b:0b:77:c2:c0:ca:11:
c7:96:50:9b:5b:cd:ce:5c:f4:38:42:47:a9:ae:b8:
41:eb:a1:4d:a7:3d:b5:3c:dc:64:4a:71:7c:3c:c2:
97:ea:29:70:3b:6a:68:e3:20:84:3a:d0:88:1f:83:
06:f9:44:fa:e9:4d:b0:88:85:64:1d:d7:c7:66:47:
c4:f0:05:10:24:54:1d:29:a0:c8:84:53:e6:c4:7d:
34:3c:9c:b0:1f:29:cd:80:66:ed:8b:6d:f9:89:26:
43:f1:03:c9:77:dc:e2:24:85:ac:84:78:06:23:7e:
73:1e:f6:8c:7f:6f:5a:6b:05:77:2b:85:bb:76:bc:
26:46:bc:0f:b9:39:0f:e0:1a:46:49:7f:bc:91:11:
48:3c:5c:2d:b7:ba:eb:ff:18:bc:45:d7:0e:5c:54:
61:d9:66:c0:0e:d2:32:e5:f0:6e:8e:8a:fa:cc:31:
0a:a8:51:7d:c4:d2:57:82:b7:d8:ec:de:7a:c1:9a:
9e:11:39:94:93:c7:b3:96:a7:df:32:e5:37:4b:1f:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:43:66:7E:E5:7B:71:27:72:26:92:3A:BD:F0:78:57:B1:79:FB
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/iIpDZn7le3EnciaSOr3weFexefs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f3:63:7a:15:97:c5:2a:57:37:c5:bd:47:dd:16:15:a5:4c:
ef:e7:1c:f9:b3:f1:bd:cd:cf:9a:01:24:cc:5b:69:fe:f1:39:
77:ec:22:07:a1:4d:01:24:d7:98:bd:2d:c5:5c:bc:4e:04:6d:
9d:9b:8f:f3:2a:af:e9:9c:b1:6a:ca:46:58:85:e3:2e:ea:f1:
c6:e0:74:bd:61:23:fb:8f:36:81:7f:b9:10:6f:ac:d4:36:e1:
88:31:31:88:b4:05:ca:75:7d:8d:00:4b:9b:d4:94:a0:dd:cc:
73:28:42:2b:dd:ae:c5:04:b1:99:7b:65:0f:42:35:b7:18:c7:
55:b0:e1:f7:cd:76:87:0f:2f:b0:93:ca:75:78:bf:a5:36:12:
1e:1c:97:f0:34:fd:81:e1:6e:37:7b:43:b9:49:dd:d9:f2:eb:
ff:da:90:56:39:72:3f:70:35:90:99:eb:78:63:67:92:da:1d:
29:72:f3:6b:f6:f1:d4:76:d5:8d:6a:6d:6f:4f:54:87:65:24:
e7:c4:7f:77:bd:e9:d0:64:cf:5c:26:4c:94:ed:9a:35:94:73:
c1:8b:7e:c2:be:e1:ac:9f:37:f4:f8:1d:30:d5:39:39:27:a9:
c9:b7:1a:22:a0:ab:8b:d4:02:1f:f5:31:8d:5a:62:db:f2:8c:
de:a5:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:48 2025 by rpki-client