Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_3ZX4bVbf5ZXZ_XoGSayHQr77ew.roa
File: _3ZX4bVbf5ZXZ_XoGSayHQr77ew.roa (raw, json)
Hash identifier: 7IO2KgkuWblzHWqsZdfDJzg927CqrG+ZQ89j1Sk0ods=
Subject key identifier: FF:76:57:E1:B5:5B:7F:96:57:67:F5:E8:19:26:B2:1D:0A:FB:ED:EC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EAAC12372963C147403FB0819E05626F8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_3ZX4bVbf5ZXZ_XoGSayHQr77ew.roa
Signing time: Thu 04 Apr 2024 20:16:07 +0000
ROA not before: Thu 04 Apr 2024 20:16:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147291
IP address blocks: 213.218.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:c1:23:72:96:3c:14:74:03:fb:08:19:e0:56:26:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 4 20:16:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff7657e1b55b7f965767f5e81926b21d0afbedec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:bc:34:e3:20:0e:23:0a:2c:34:09:56:6d:
f5:98:ae:51:e1:1d:8b:6e:b4:a2:01:76:a5:84:fd:
ba:b8:57:02:74:63:69:67:72:4d:18:7c:53:41:ad:
5e:96:ff:aa:f6:59:8f:51:bd:c9:10:dc:0a:b9:52:
18:70:62:06:82:8b:ac:1f:50:64:dd:1b:60:4e:b3:
cf:7f:c2:4a:b9:61:09:80:4a:7e:0b:48:06:17:47:
14:49:20:06:45:73:33:59:fa:90:d8:62:9e:59:6f:
5f:51:23:e5:ea:82:d4:f0:22:a1:a0:b0:44:dc:55:
06:7a:8c:66:73:82:05:96:28:b7:54:1d:69:25:ae:
83:b2:b6:32:b3:7e:ce:48:45:5e:05:8c:6c:90:ee:
e2:1b:a8:2e:50:1c:f3:19:2e:13:dd:6a:b5:3b:05:
d5:6c:16:37:f1:dd:15:80:86:c5:c9:01:ce:a3:ca:
45:de:59:f0:d2:d8:fd:2c:a0:47:75:7f:ec:32:3f:
16:09:17:cf:f1:4b:19:6d:26:d9:c9:3e:2d:31:40:
e2:5c:7b:05:9b:be:3e:f7:7c:10:21:c7:1b:1d:82:
4a:e0:1d:91:db:28:38:9f:dc:cb:f4:17:f5:ac:38:
2c:14:e4:c2:a6:ff:d1:0c:7d:0e:0e:ca:ad:47:71:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:57:E1:B5:5B:7F:96:57:67:F5:E8:19:26:B2:1D:0A:FB:ED:EC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_3ZX4bVbf5ZXZ_XoGSayHQr77ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c5:d4:21:d7:bc:68:4a:af:fd:75:37:82:0c:0e:fd:e3:61:
c2:cc:a8:b8:29:bf:30:7d:75:83:30:3e:33:ef:14:7a:cd:5b:
d2:6b:b1:f4:4a:c6:a7:f7:f7:70:f0:a6:cb:ac:56:cf:65:cf:
ab:5b:b5:57:4c:94:82:23:65:44:eb:c1:a6:60:e3:e2:93:d9:
66:80:a1:9e:9b:c2:8b:91:30:14:ff:21:a4:58:fe:4c:58:e3:
a0:c1:24:f5:a0:a3:dc:79:58:6c:32:43:98:2c:07:14:59:81:
56:51:ba:3e:7c:d3:c7:8c:ab:fa:07:f5:d0:59:4f:fc:5b:c9:
92:86:61:88:43:6c:e4:db:d7:ee:7a:eb:6d:8a:ac:66:86:68:
44:48:27:bc:d2:b5:b9:f5:0c:e2:37:13:2b:26:1e:18:42:ce:
e4:67:2d:83:3a:e1:ce:6e:ea:24:91:ac:18:68:04:a6:8b:ce:
ca:6b:e2:29:ec:f7:fd:17:dc:05:89:01:ad:5a:b7:0c:99:1d:
7c:c9:cd:1f:40:b5:b7:84:a8:6a:ca:bb:64:4c:d7:2c:03:2b:
99:b2:04:c9:77:9b:35:80:51:57:15:13:a2:37:6c:5b:ca:5f:
fa:64:56:78:36:00:0c:f5:de:7c:81:42:de:bc:93:25:da:8c:
55:7f:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:03 2025 by rpki-client