Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/zWXHcWowDzr7w5aCM0DFeuUOQ7Y.roa
File: zWXHcWowDzr7w5aCM0DFeuUOQ7Y.roa (raw, json)
Hash identifier: 4Q6p2TdAeF4sP5ubjO7Qd9BHyB4BVHqPQHKumwR7w9A=
Subject key identifier: CD:65:C7:71:6A:30:0F:3A:FB:C3:96:82:33:40:C5:7A:E5:0E:43:B6
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194F464039BFA86D7856FDDDC35BADFECF5
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/zWXHcWowDzr7w5aCM0DFeuUOQ7Y.roa
Signing time: Tue 11 Feb 2025 09:43:02 +0000
ROA not before: Tue 11 Feb 2025 09:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 213.18.208.0/22 maxlen: 24
217.177.8.0/22 maxlen: 24
217.177.40.0/22 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.177.80.0/22 maxlen: 24
217.177.84.0/22 maxlen: 24
217.180.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:64:03:9b:fa:86:d7:85:6f:dd:dc:35:ba:df:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 11 09:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd65c7716a300f3afbc396823340c57ae50e43b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:b3:8b:af:5f:b2:c8:df:3f:9e:70:99:6c:
e6:d4:70:a8:68:62:0a:fe:1a:9b:40:64:60:9a:91:
15:50:5f:ba:0b:83:57:8b:94:c2:a4:af:b6:5f:d7:
3c:88:1d:66:6a:7a:08:17:6a:74:b0:6c:e5:89:91:
57:32:2b:9c:53:8c:99:8e:e1:b4:6a:7e:8c:f6:97:
48:1b:83:16:e1:ed:26:3a:73:d0:9f:bb:4e:1b:4d:
c4:9d:db:ca:27:6e:cd:4d:54:8b:3a:e7:eb:93:2e:
d3:3c:f3:6b:fc:aa:16:76:4b:05:8f:2d:3c:4c:c2:
50:89:4d:bb:c0:10:4d:f1:e1:a1:ef:f0:7e:02:32:
d4:a7:8b:3c:bb:6f:c0:94:53:1f:83:02:ea:8d:d3:
6b:6a:cc:ea:54:65:45:cc:49:e8:e8:be:99:f7:07:
70:e1:0c:4e:aa:c8:7f:17:f1:d8:b9:ef:8b:68:c0:
32:15:2a:10:04:05:57:a6:59:0a:df:71:c1:ae:05:
22:2a:c9:a7:2d:0c:b6:f8:15:ab:71:8e:72:24:43:
d2:b3:0d:6b:a7:12:54:1b:87:9d:6a:d6:88:0d:24:
ef:4b:74:f7:78:0d:9f:cb:4e:fb:ed:85:76:45:ef:
f7:56:49:c6:8d:41:6e:b7:91:6b:fa:44:07:bb:4b:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:C7:71:6A:30:0F:3A:FB:C3:96:82:33:40:C5:7A:E5:0E:43:B6
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/zWXHcWowDzr7w5aCM0DFeuUOQ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.208.0/22
217.177.8.0/22
217.177.40.0-217.177.55.255
217.177.80.0/21
217.180.40.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:1e:6c:89:a2:3c:19:88:c9:05:20:72:66:38:a5:3a:f9:8a:
0f:2b:20:22:d3:44:8e:76:40:96:db:d4:ef:7a:a2:fb:a7:ac:
bd:a7:82:17:76:03:fd:a3:97:39:bd:a2:9d:9b:d2:4a:59:3c:
23:e1:b4:5f:27:da:54:1d:15:38:1b:a5:17:5e:eb:f4:f9:03:
ca:5c:07:fb:8d:07:17:2f:58:ab:4b:67:45:e3:1d:65:db:b9:
1f:1d:e4:e5:d3:ac:5a:7c:c0:11:ad:7e:90:53:03:f9:77:64:
ff:34:0c:75:7d:4b:5f:92:1d:98:c6:46:cf:d4:c2:9e:df:3f:
94:4b:cb:28:af:6c:b1:6d:81:1d:f4:58:21:64:38:41:ca:36:
95:c8:c4:95:ba:62:3b:6c:44:40:7f:ab:9e:e0:1e:af:58:7d:
c9:c6:db:34:e1:da:22:31:b3:26:39:4e:01:dc:b3:fc:90:aa:
ed:34:09:d5:6a:ce:59:0d:16:ea:20:4d:f3:d3:b6:1f:00:b5:
e7:98:12:c0:c2:48:ee:b2:47:01:7b:c7:7c:b0:86:c5:f0:81:
a2:2c:d9:86:5d:72:bc:c0:5c:c7:8f:55:fc:a9:d3:1e:96:f9:
c2:0d:7a:fa:6c:24:40:0b:80:ad:62:66:5b:b3:a4:14:97:18:
86:ea:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:53 2025 by rpki-client