Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7DNh8CRgCmj0AtAqOUOAYeBDkuA.roa
File: 7DNh8CRgCmj0AtAqOUOAYeBDkuA.roa (raw, json)
Hash identifier: Dfu5Ju12R5Fq2MirwJ8c7ZkMOaAOh2E7NxkNg1OfoTQ=
Subject key identifier: EC:33:61:F0:24:60:0A:68:F4:02:D0:2A:39:43:80:61:E0:43:92:E0
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0190F8A693B611AD304207D7FA99ED0C46D6
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7DNh8CRgCmj0AtAqOUOAYeBDkuA.roa
Signing time: Sun 28 Jul 2024 09:23:04 +0000
ROA not before: Sun 28 Jul 2024 09:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 213.182.196.0/24 maxlen: 24
213.182.200.0/24 maxlen: 24
213.182.203.0/24 maxlen: 24
213.182.204.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 09:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f8:a6:93:b6:11:ad:30:42:07:d7:fa:99:ed:0c:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jul 28 09:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec3361f024600a68f402d02a39438061e04392e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:29:2f:ee:cb:21:6e:df:33:f9:22:81:45:
de:26:75:b8:35:01:03:54:34:e4:4a:51:1e:fe:cf:
18:cb:06:8f:6e:4f:4b:19:c9:1d:6b:4d:03:98:27:
2d:4f:93:17:ff:06:99:89:e5:82:86:0a:b7:02:76:
ba:2e:20:55:98:61:6b:68:c0:69:24:39:30:a3:5c:
13:a4:84:6a:d2:d3:51:2c:ba:23:01:98:07:91:09:
45:15:e6:17:e9:5a:11:1f:da:ed:a7:c3:23:fe:24:
ba:de:06:f7:9d:4e:7b:69:3e:78:3c:75:b4:ce:95:
1e:26:35:39:b4:6e:13:12:e0:b6:28:8b:cf:5e:70:
4a:c0:a2:ea:1d:d1:de:4e:0a:ff:ac:5e:d9:9f:64:
9d:d8:0d:00:4c:1a:4e:47:6d:98:bb:16:63:70:e2:
29:02:9d:2b:b1:1c:01:8e:fe:5e:43:2b:98:2b:22:
af:94:4e:69:9a:6d:5e:93:03:40:d0:be:15:87:d3:
c9:08:b1:f6:18:7a:b4:72:b7:9b:4d:0e:fd:ec:c4:
66:01:b3:42:41:ed:8b:d5:d7:dd:4a:f8:41:8d:85:
65:6d:f4:d5:0f:37:0d:07:4d:40:c6:d1:00:f1:33:
c5:b2:1d:ba:94:fb:e2:cf:42:87:92:8f:cf:e6:1b:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:61:F0:24:60:0A:68:F4:02:D0:2A:39:43:80:61:E0:43:92:E0
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7DNh8CRgCmj0AtAqOUOAYeBDkuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.196.0/24
213.182.200.0/24
213.182.203.0-213.182.204.255
213.182.208.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:a7:7e:6f:5e:3f:35:29:4d:4a:51:38:02:1a:66:cb:1b:d3:
bd:9e:85:c6:44:39:33:8a:db:90:6f:93:bc:d0:b9:be:7f:ef:
29:7a:cf:7a:3c:1a:91:21:38:47:ae:36:76:ec:a5:ca:97:b0:
cd:54:1a:a1:63:74:69:fe:79:8a:09:bc:8c:3e:a8:27:b3:bc:
2d:6f:86:36:12:c1:7f:28:d7:ba:59:3e:67:8a:9c:c9:f0:73:
2a:d9:27:e5:bb:f8:59:0b:37:b7:d7:11:29:47:82:e9:f6:b5:
b9:d7:d3:fe:b7:85:e0:03:b7:96:66:ea:33:3b:cd:53:64:41:
fa:42:47:eb:ae:d5:76:db:09:64:85:3e:a0:16:57:0c:ab:8b:
a0:65:cd:83:1e:4e:a2:97:b8:71:50:8b:58:39:07:2f:db:a4:
d7:45:70:42:49:f9:9c:4d:cc:cc:f0:52:15:d2:64:72:26:8a:
e7:d6:43:6c:17:44:53:f3:32:1d:41:15:e7:bb:65:13:f5:c4:
30:4d:3f:6a:5e:2d:9d:ab:42:1a:e0:9a:cd:71:76:a9:66:32:
50:a3:04:50:72:f2:d1:fd:bc:fc:77:f7:71:0f:40:0f:9c:e2:
0a:97:21:39:e8:2a:fe:64:44:28:6f:f6:bf:28:db:32:df:a2:
3e:57:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org