Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7DO7y9IGDptI7j-1eQYw5JElmsw.roa
File: 7DO7y9IGDptI7j-1eQYw5JElmsw.roa (raw, json)
Hash identifier: JeOLDt8rmhToMAKWE9SCN4paZacJSH32/3EQ7eQO83A=
Subject key identifier: EC:33:BB:CB:D2:06:0E:9B:48:EE:3F:B5:79:06:30:E4:91:25:9A:CC
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01912CB8A73FF6977AA090A0F2371A5253EF
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7DO7y9IGDptI7j-1eQYw5JElmsw.roa
Signing time: Wed 07 Aug 2024 12:03:04 +0000
ROA not before: Wed 07 Aug 2024 12:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.198.0/24 maxlen: 24
213.182.200.0/24 maxlen: 24
213.182.203.0/24 maxlen: 24
213.182.204.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.209.0/24 maxlen: 24
213.182.217.0/24 maxlen: 24
213.182.219.0/24 maxlen: 24
213.182.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:b8:a7:3f:f6:97:7a:a0:90:a0:f2:37:1a:52:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 7 12:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec33bbcbd2060e9b48ee3fb5790630e491259acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:0f:d0:5d:d4:42:08:f7:27:43:5d:4a:ec:
ef:b7:88:f7:a2:9b:85:a9:40:cc:dc:ea:27:b7:a7:
93:a1:61:d6:68:d2:a8:f3:ca:73:cb:7f:9e:3e:b8:
4a:5d:f2:3b:09:0e:1c:ef:22:55:13:77:72:6b:e1:
21:54:76:c2:b6:26:7a:cc:16:a5:ec:2f:57:f8:5c:
a4:a9:2d:64:7a:19:07:7e:8f:3a:32:a4:ec:ba:63:
97:6b:4d:95:93:58:c5:39:43:7a:5c:df:98:23:b2:
61:ed:b9:8e:68:c3:1e:0a:57:8a:14:03:ca:10:f6:
4f:43:3c:c9:a7:ff:e0:ec:33:90:71:79:9d:8f:21:
13:67:c4:57:f0:ad:e2:62:00:8f:69:a4:83:cb:59:
18:3f:58:ad:37:ff:18:bf:e3:23:86:03:1d:94:a1:
ec:a5:78:70:ee:55:fc:26:47:84:53:23:58:2d:db:
26:a3:d9:d5:0b:dd:e1:86:d9:14:dc:b4:48:f4:6a:
2a:17:df:0c:a8:35:4d:4d:8b:6f:f6:ab:04:cc:6a:
40:2d:31:fa:50:39:05:bc:26:dc:7b:34:db:64:95:
d1:fe:67:2e:d7:ed:a2:b5:10:95:43:6a:68:ff:24:
b4:6b:62:48:5b:70:a0:44:39:8e:12:88:2b:d7:d3:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:BB:CB:D2:06:0E:9B:48:EE:3F:B5:79:06:30:E4:91:25:9A:CC
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/7DO7y9IGDptI7j-1eQYw5JElmsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.196.0-213.182.198.255
213.182.200.0/24
213.182.203.0-213.182.204.255
213.182.206.0/24
213.182.208.0/23
213.182.217.0/24
213.182.219.0-213.182.220.255
Signature Algorithm: sha256WithRSAEncryption
67:2e:27:65:9b:a5:1d:d4:64:71:f6:b1:af:8b:4e:78:81:38:
3d:d1:3b:72:93:4c:32:06:af:b9:f6:ce:de:df:65:d6:c8:09:
1f:44:f2:b5:22:a1:86:af:d3:ad:a3:0c:f1:31:b7:bf:eb:a8:
3a:2e:78:6f:2b:7a:85:55:16:51:1d:29:50:1e:5c:2b:59:4c:
2e:ac:01:85:2f:b5:bd:be:f4:fb:fa:f7:b9:e2:df:9e:b3:2f:
60:de:f2:61:39:aa:29:ba:bb:c3:e2:23:7e:16:c7:fa:af:e7:
32:37:39:9e:23:7a:3a:eb:cd:31:24:c3:c7:90:5e:34:d8:06:
e4:dd:32:70:c1:a5:ee:36:44:4a:32:87:b6:4c:1b:a0:51:01:
64:c1:6e:f5:06:e0:d6:46:43:90:3d:83:d6:e1:21:0e:03:44:
f1:e6:ab:7f:6d:12:05:a9:be:67:09:ba:86:df:8d:08:2c:1c:
3e:1d:1f:f7:09:4f:e9:df:ea:67:ec:88:fb:aa:42:0b:83:06:
80:39:87:1b:0f:e1:cf:b9:70:b6:ac:3a:7b:2a:99:3b:38:1b:
2a:89:81:1f:3e:4e:7c:14:ce:39:83:0f:c5:25:39:d5:87:49:
08:1d:67:e5:ed:52:50:d8:29:80:6c:b7:8b:77:50:fe:7f:db:
30:ae:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 18:23:57 2024 by rpki-client on console-ams.rpki-client.org