Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n5RQOvX3OkzfUVj_FpQWwGVTxTQ.roa
File: n5RQOvX3OkzfUVj_FpQWwGVTxTQ.roa (raw, json)
Hash identifier: mGJhLtBY7jBvUmhFNaHLpflvImNrPwY5iKwmTF3A/jA=
Subject key identifier: 9F:94:50:3A:F5:F7:3A:4C:DF:51:58:FF:16:94:16:C0:65:53:C5:34
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E95D3208EE874BBA0645F6F2A957EEEB7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n5RQOvX3OkzfUVj_FpQWwGVTxTQ.roa
Signing time: Sun 31 Mar 2024 18:43:45 +0000
ROA not before: Sun 31 Mar 2024 18:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 213.130.150.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.218.208.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
213.218.210.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.212.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
213.218.233.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
213.218.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 08:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:d3:20:8e:e8:74:bb:a0:64:5f:6f:2a:95:7e:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 31 18:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f94503af5f73a4cdf5158ff169416c06553c534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:61:b0:17:62:aa:3d:c1:0e:4b:f3:d2:d8:
2e:59:0c:73:a4:9f:35:c9:b8:cc:28:23:12:fe:30:
df:16:e1:5e:7b:6a:16:d0:b1:ef:9f:a5:c8:97:5e:
14:20:3f:1d:80:d2:4f:2d:8c:59:8b:f2:d4:47:5c:
35:48:81:29:62:74:ba:9b:83:68:12:ee:88:36:17:
a8:10:69:90:fb:d2:fb:89:0f:8b:7d:93:0a:e1:07:
cf:46:29:c0:d5:a7:56:e6:7c:00:56:f0:bb:e1:c9:
18:bb:c6:9a:ff:52:c7:79:20:bd:6a:74:be:6d:ac:
ae:b6:12:50:1a:92:56:6f:d4:65:48:0c:9f:28:44:
ca:35:92:ec:72:23:af:45:30:6d:26:0f:4a:ad:4d:
6d:0e:d9:93:d9:33:de:f8:46:0d:05:3b:d3:b6:8e:
33:50:09:e2:9d:16:12:8b:96:92:d4:4a:fe:65:24:
8f:1e:12:69:9e:8b:48:f4:eb:96:71:da:7e:bc:29:
c0:9b:e6:f0:9e:26:dc:53:4c:6d:bf:eb:ce:a5:0a:
00:15:10:be:26:77:8c:a5:13:ec:51:00:4e:76:05:
af:f0:35:f7:d6:fb:3f:16:de:1c:47:c8:57:e0:93:
6d:e6:29:ed:e7:bb:70:fc:f9:f2:71:3d:32:67:24:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:50:3A:F5:F7:3A:4C:DF:51:58:FF:16:94:16:C0:65:53:C5:34
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n5RQOvX3OkzfUVj_FpQWwGVTxTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.150.0/23
213.218.208.0/21
213.218.232.0/22
Signature Algorithm: sha256WithRSAEncryption
10:fe:a6:9d:49:d3:cf:30:51:1e:f2:18:c8:eb:7c:9d:76:d0:
91:8b:e0:0e:22:c4:fa:6f:2f:2c:79:00:fc:82:2f:fa:93:4d:
93:ff:41:77:55:21:08:2a:5d:ea:ce:96:b6:d9:b6:e0:34:b1:
26:f4:7d:34:31:62:e0:1b:50:29:89:6e:f1:c5:d4:f9:17:89:
e7:0c:45:a9:46:d5:28:b0:32:52:29:77:7a:86:9f:07:51:9a:
da:f5:b0:0f:c7:38:c9:94:92:42:bc:88:4e:64:76:48:59:72:
6e:d1:26:4a:ac:95:cd:da:46:d1:34:74:b1:33:a9:88:81:6d:
1a:52:5f:5a:4e:9d:b5:2e:70:97:ab:49:91:ca:72:c5:d2:cd:
5c:8e:be:b2:0b:4e:18:84:e8:13:5d:18:ad:06:5f:49:f1:48:
9f:8f:96:7e:b4:9a:e6:89:35:a7:b4:7b:bd:31:eb:1d:8c:3a:
3f:fb:ab:c1:94:9b:b1:da:71:6b:55:d3:79:5c:5c:7c:89:3d:
b2:4a:12:e8:7f:1b:59:57:a9:05:6b:ac:c6:99:1c:28:a8:3d:
68:b1:01:a7:26:6f:e2:23:72:bc:e5:65:d9:59:01:63:d5:40:
c0:c3:23:09:af:06:70:57:9f:eb:0d:d8:96:db:25:ba:bb:78:
8e:e8:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org