Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4AnaxnAdgqXvBw5L67779EvNrH8.roa
File: 4AnaxnAdgqXvBw5L67779EvNrH8.roa (raw, json)
Hash identifier: yrQvm/jnUM+e8YLC77mTNxj6KTalAJtDxonfgEV6k98=
Subject key identifier: E0:09:DA:C6:70:1D:82:A5:EF:07:0E:4B:EB:BE:FB:F4:4B:CD:AC:7F
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01914A953D3956E27BEB894306FB526CB281
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4AnaxnAdgqXvBw5L67779EvNrH8.roa
Signing time: Tue 13 Aug 2024 07:12:59 +0000
ROA not before: Tue 13 Aug 2024 07:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.198.0/24 maxlen: 24
213.182.200.0/24 maxlen: 24
213.182.203.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.209.0/24 maxlen: 24
213.182.217.0/24 maxlen: 24
213.182.219.0/24 maxlen: 24
213.182.220.0/24 maxlen: 24
213.182.222.0/24 maxlen: 24
213.182.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 13:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:95:3d:39:56:e2:7b:eb:89:43:06:fb:52:6c:b2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 13 07:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e009dac6701d82a5ef070e4bebbefbf44bcdac7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:63:ce:07:55:69:b2:6d:e3:dc:96:1a:01:
4e:a9:a4:f0:86:f9:4e:8e:58:65:0e:98:dc:d1:2b:
98:b5:e4:70:5a:e1:90:e6:93:d9:f4:98:77:a7:24:
b2:65:82:a9:05:ea:83:61:84:9f:f3:3e:74:16:70:
a3:66:a8:6c:cd:0b:4a:54:55:f1:0e:2b:48:a7:1a:
60:20:63:40:2f:19:31:19:ce:76:33:c0:14:43:35:
7e:4a:51:61:10:86:f0:e8:5b:8c:05:48:65:5c:d3:
1e:8f:6f:75:0d:49:95:ff:c6:9f:5f:fa:39:0b:2e:
e2:94:ae:5d:dc:ae:e3:3b:d8:0b:f7:f8:45:c2:64:
90:72:07:e6:d8:58:4f:96:77:5f:0a:5e:02:db:fa:
b8:e0:1b:ee:94:f4:c6:7b:ec:17:21:a8:14:07:47:
8e:99:2f:6f:d2:b9:76:e7:02:80:7a:49:fe:04:73:
b5:10:9a:6f:6b:3b:57:d5:db:29:18:2a:9f:90:54:
33:2b:a8:cf:6b:3c:b4:36:17:f8:eb:d3:2c:60:a0:
b1:c6:d6:ab:da:a4:ed:88:03:c3:14:ef:ec:15:17:
00:ca:b4:61:14:e4:c4:76:2e:b5:bf:e2:cf:64:fa:
a4:46:ab:7b:cc:7a:75:47:a3:d0:4d:c5:f2:87:13:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:09:DA:C6:70:1D:82:A5:EF:07:0E:4B:EB:BE:FB:F4:4B:CD:AC:7F
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4AnaxnAdgqXvBw5L67779EvNrH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.196.0-213.182.198.255
213.182.200.0/24
213.182.203.0/24
213.182.206.0/24
213.182.208.0/23
213.182.217.0/24
213.182.219.0-213.182.220.255
213.182.222.0/23
Signature Algorithm: sha256WithRSAEncryption
62:6e:5d:46:4d:87:bc:b6:6f:30:cb:4e:0f:f1:23:18:e0:8f:
57:ec:e6:cd:bd:a6:e4:a9:38:89:57:ff:a4:9a:a5:e1:b3:51:
63:d5:69:46:0f:ec:f0:66:2a:61:88:18:60:d2:61:76:fb:fb:
d9:7f:a1:b5:85:6b:f5:e7:58:e4:73:2d:96:ec:64:1c:f3:57:
8e:c4:03:41:9d:e5:8c:21:8b:8d:22:ad:83:6d:4e:d1:7b:3d:
56:1d:23:5e:af:30:e6:c4:4b:8d:93:17:db:d5:1b:2f:f2:7c:
ee:da:dd:28:4f:ad:c9:df:94:91:94:34:6a:48:d9:73:a9:e3:
15:ee:fe:71:5c:95:12:6e:50:45:1b:bd:81:41:4d:73:90:28:
92:e9:d9:c1:7d:3f:82:cd:42:0b:ad:8d:82:ef:6f:37:a8:11:
c2:8b:d6:e5:b8:27:e3:09:be:f7:21:ff:f0:4f:e8:e6:6b:2d:
a1:21:0c:1d:56:f6:46:f3:16:86:55:eb:65:ea:e3:a0:a3:ba:
b1:b6:65:7d:7e:c8:e8:77:a5:b5:2b:53:a4:77:91:23:61:01:
d4:1c:ba:7c:89:1b:b6:ff:91:b1:f1:24:e9:ea:8d:cf:90:18:
11:ea:54:56:cf:5d:d3:5a:18:e5:04:7d:44:3b:42:36:f1:ba:
f7:6f:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org