Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/BEaEvQyhhk_IfTpb6BSQ3F9TqvM.roa
File: BEaEvQyhhk_IfTpb6BSQ3F9TqvM.roa (raw, json)
Hash identifier: d6ZcOodCEoOwOanJ9MXRUY1fiutZ51ZhWVuJE6T2uA8=
Subject key identifier: 04:46:84:BD:0C:A1:86:4F:C8:7D:3A:5B:E8:14:90:DC:5F:53:AA:F3
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0195135B8FED65047DDC57ACE00CCBB421C3
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/BEaEvQyhhk_IfTpb6BSQ3F9TqvM.roa
Signing time: Mon 17 Feb 2025 10:02:02 +0000
ROA not before: Mon 17 Feb 2025 10:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28785
IP address blocks: 213.222.192.0/21 maxlen: 21
213.222.192.0/22 maxlen: 22
213.222.192.0/24 maxlen: 24
213.222.196.0/23 maxlen: 23
213.222.196.0/24 maxlen: 24
213.222.200.0/21 maxlen: 21
213.222.201.0/24 maxlen: 24
213.222.204.0/24 maxlen: 24
213.222.205.0/24 maxlen: 24
213.222.206.0/24 maxlen: 24
213.222.207.0/24 maxlen: 24
213.222.208.0/21 maxlen: 24
213.222.208.0/24 maxlen: 24
213.222.209.0/24 maxlen: 24
213.222.210.0/24 maxlen: 24
213.222.211.0/24 maxlen: 24
213.222.212.0/24 maxlen: 24
213.222.216.0/24 maxlen: 24
213.222.217.0/24 maxlen: 24
2a03:7580::/32 maxlen: 32
2a03:7580::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 17 Feb 2025 13:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:5b:8f:ed:65:04:7d:dc:57:ac:e0:0c:cb:b4:21:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Feb 17 10:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044684bd0ca1864fc87d3a5be81490dc5f53aaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:66:ef:40:03:70:e1:6f:d1:06:eb:28:88:
76:ab:b2:a8:76:31:ed:e5:ce:55:82:47:8a:fc:44:
71:16:ca:74:59:14:75:a3:e0:c5:eb:d4:af:04:69:
bf:b9:3a:e8:4b:95:4c:b4:a6:db:0d:15:fa:c3:15:
92:ad:b2:07:bd:3b:29:d5:ed:d2:54:e9:94:ff:19:
6b:43:5c:f0:f1:14:b9:3c:5f:92:a7:e5:49:86:7c:
28:7d:1e:18:fe:7d:11:76:98:d4:2c:65:92:3b:40:
e8:15:f7:86:e9:43:28:f8:48:a5:e6:06:43:52:91:
ab:fe:50:7a:3f:25:b6:24:ab:b0:62:99:87:90:58:
a3:27:1e:0d:e0:6e:f8:1d:22:3b:a6:df:e7:82:e4:
dd:40:bd:c2:40:93:a1:c8:c7:e6:76:3a:e7:32:c4:
c0:83:df:7a:a3:50:8d:21:a5:f9:72:2d:fa:b0:5b:
0e:f3:32:10:dd:18:a9:c6:fa:09:41:ef:84:39:3b:
6b:4a:2e:38:7c:d7:95:8d:98:db:70:e8:b3:82:7f:
55:81:07:3d:44:a4:3c:d4:4a:94:fd:2f:c6:f1:fc:
59:59:b1:d2:40:49:2a:21:b7:5c:97:2b:74:81:fb:
f4:e3:a6:d5:95:4e:1b:cb:ad:53:b2:05:a7:f5:3f:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:84:BD:0C:A1:86:4F:C8:7D:3A:5B:E8:14:90:DC:5F:53:AA:F3
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/BEaEvQyhhk_IfTpb6BSQ3F9TqvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.192.0-213.222.217.255
IPv6:
2a03:7580::/32
Signature Algorithm: sha256WithRSAEncryption
b1:90:55:c1:79:da:54:e5:40:16:8c:33:01:b1:0a:1c:4c:83:
37:43:8e:05:f7:c3:76:28:54:71:e8:b3:c8:c9:40:52:d6:96:
b1:de:de:be:49:c8:2d:e4:17:17:80:41:c1:d4:00:e0:a1:c8:
ae:a2:8c:71:64:21:8a:7e:20:67:99:51:38:03:57:35:10:0b:
89:57:4a:c0:58:19:43:8a:c8:03:50:64:28:a6:c7:86:69:18:
27:e8:4c:aa:01:bb:d0:6d:d7:11:ed:f1:bb:7d:e7:0b:98:f0:
cd:1e:45:7d:a6:7c:de:42:be:cb:3a:3b:fe:28:12:11:51:f0:
bf:7e:6f:85:3c:b6:07:e7:fe:9a:84:d7:5b:3c:73:e0:42:5b:
cb:43:56:2a:15:ff:3b:64:b4:fc:b2:04:ff:5b:92:45:ee:4d:
4c:df:dc:a6:02:99:b5:58:6d:cb:38:55:07:4b:17:b8:eb:2a:
75:f1:06:99:20:15:d2:47:90:15:00:5f:c6:c6:cd:63:34:a1:
81:7c:99:2f:1c:d5:69:68:9f:7e:af:3c:69:15:57:8c:02:c7:
21:9f:7f:8d:e4:60:02:50:c0:e2:a2:41:ff:5e:e8:1d:81:5d:
8e:50:dd:64:b8:c5:c9:9c:5a:d3:b6:a6:9a:70:24:fe:86:19:
8a:20:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:18 2025 by rpki-client