Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1x47l-vvrCL4TBtHORDFUvYJnIU.roa
File: 1x47l-vvrCL4TBtHORDFUvYJnIU.roa (raw, json)
Hash identifier: FTUZrHdPtXHdd3K/g61mkLaJlivqCCoOPfyVL5RFMvs=
Subject key identifier: D7:1E:3B:97:EB:EF:AC:22:F8:4C:1B:47:39:10:C5:52:F6:09:9C:85
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01916A07D14FC0D982B410D6199F6EF30DC4
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1x47l-vvrCL4TBtHORDFUvYJnIU.roa
Signing time: Mon 19 Aug 2024 09:46:22 +0000
ROA not before: Mon 19 Aug 2024 09:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.198.0/24 maxlen: 24
213.182.200.0/24 maxlen: 24
213.182.203.0/24 maxlen: 24
213.182.205.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.212.0/24 maxlen: 24
213.182.214.0/24 maxlen: 24
213.182.217.0/24 maxlen: 24
213.182.219.0/24 maxlen: 24
213.182.220.0/24 maxlen: 24
213.182.222.0/24 maxlen: 24
213.182.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 18:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:07:d1:4f:c0:d9:82:b4:10:d6:19:9f:6e:f3:0d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 19 09:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d71e3b97ebefac22f84c1b473910c552f6099c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:e5:10:64:d8:2b:52:0c:77:76:e0:97:9f:
d1:cb:af:8d:2d:0d:d7:ef:fa:85:09:06:4a:23:cb:
fe:80:07:8b:e6:f2:dc:2e:f0:e3:a0:f4:5b:54:63:
85:02:6b:91:0a:95:51:6c:35:a7:15:92:28:6c:55:
36:40:2b:e4:97:e8:9f:6a:a2:0b:73:86:0d:7d:91:
09:5d:3a:d3:ae:c3:87:01:fc:48:66:7a:73:1a:ec:
d0:1b:9a:bd:3b:2e:fb:3c:55:02:c1:26:9f:08:1c:
25:86:f1:b2:48:2a:f6:f9:a2:cf:ad:d3:ad:71:be:
02:8e:e9:1a:32:9b:81:34:76:4a:91:32:24:16:b3:
d4:90:ca:c8:84:14:3c:5e:8b:b1:88:35:fe:fd:76:
ea:c3:6a:c1:57:75:7d:57:eb:41:b4:99:27:60:3c:
3a:e8:7b:97:c0:bb:a5:68:ac:62:8b:36:19:a7:a3:
b8:90:34:cb:ce:9f:bf:3f:8b:28:55:ae:c6:e7:67:
e6:c0:da:81:d1:4a:ef:44:9a:fb:e8:96:69:bc:9f:
b2:ce:28:82:9b:76:c4:0a:66:79:53:41:7a:99:03:
9c:be:87:a9:80:fa:ca:0d:75:63:10:64:26:9d:2e:
d1:2b:56:e2:49:13:ba:c5:8b:60:36:37:0a:5b:ab:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:3B:97:EB:EF:AC:22:F8:4C:1B:47:39:10:C5:52:F6:09:9C:85
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1x47l-vvrCL4TBtHORDFUvYJnIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.196.0-213.182.198.255
213.182.200.0/24
213.182.203.0/24
213.182.205.0-213.182.206.255
213.182.208.0/24
213.182.212.0/24
213.182.214.0/24
213.182.217.0/24
213.182.219.0-213.182.220.255
213.182.222.0/23
Signature Algorithm: sha256WithRSAEncryption
37:c3:a6:55:3c:38:38:25:86:43:85:aa:0a:66:7d:05:90:f8:
1e:5e:15:37:7b:87:5d:0f:45:91:69:ca:bc:8c:36:e1:81:e2:
84:fa:c9:cd:ee:d3:4e:81:c4:93:b6:17:68:9e:c4:7d:b8:d0:
70:cd:bc:7c:24:a6:07:00:86:e1:73:94:aa:4f:b8:b9:8e:0e:
66:05:5b:0c:80:d7:d1:63:c2:41:fd:b8:e3:88:23:71:bc:9e:
a0:9d:20:d6:36:25:d2:65:1b:cf:67:60:75:7c:ae:79:ed:d3:
f2:8d:69:c8:bc:2b:0c:14:b5:5c:5c:bd:f8:76:75:75:26:ba:
6a:aa:45:e0:3b:a9:fd:74:1b:25:fd:1a:e2:68:46:68:3a:70:
0b:ab:11:5f:e4:c9:84:44:11:05:e5:4f:6f:d7:ff:29:43:49:
6c:ce:1d:0b:18:e9:4e:48:29:18:25:0a:96:d3:e2:6f:d0:8b:
a4:f6:46:38:44:8c:43:86:2c:01:4e:a5:1f:08:97:34:b9:1e:
eb:59:25:68:86:eb:93:b7:32:58:34:73:5c:66:78:d2:0f:18:
6e:d7:d7:1c:ca:6e:ef:0a:df:65:c4:4d:b5:37:a2:f1:fc:5d:
93:bc:71:af:8b:93:cc:52:3a:ed:6a:40:c1:60:92:5b:4e:59:
d1:43:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 21:05:13 2024 by rpki-client on console-ams.rpki-client.org