Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/CJiyEtyEDyGVMbNEUq8bMdZUzQw.roa
File: CJiyEtyEDyGVMbNEUq8bMdZUzQw.roa (raw, json)
Hash identifier: Ti9oLT+MIN9FN8TUOfMgWIxCRp/qRQp4YoyYz4k/6KM=
Subject key identifier: 08:98:B2:12:DC:84:0F:21:95:31:B3:44:52:AF:1B:31:D6:54:CD:0C
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0190E53D17F23596036BD0C0CFD3AF04DE5B
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/CJiyEtyEDyGVMbNEUq8bMdZUzQw.roa
Signing time: Wed 24 Jul 2024 14:55:04 +0000
ROA not before: Wed 24 Jul 2024 14:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 213.182.204.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 09:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e5:3d:17:f2:35:96:03:6b:d0:c0:cf:d3:af:04:de:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jul 24 14:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0898b212dc840f219531b34452af1b31d654cd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:51:57:a9:32:b4:3b:54:d3:7f:67:4e:cb:
02:c8:96:75:67:91:1e:ec:3a:d6:e5:cd:cc:7f:75:
46:e3:ca:28:a8:5d:0e:e0:77:f0:df:0f:87:53:af:
65:93:30:be:8c:4e:80:ab:25:8b:38:9e:1f:35:47:
c2:da:f3:7f:40:23:73:63:cf:bc:e3:43:9e:f2:fb:
6d:cc:cb:72:7a:07:db:16:6b:ad:87:c7:6f:f2:6c:
5f:b9:c1:be:4a:a8:27:5e:15:e6:37:15:fd:9a:e4:
b2:dc:1d:36:35:f9:a7:d7:24:c9:59:e5:7a:74:33:
b1:eb:b3:ad:cb:35:33:e9:63:a5:50:a4:e6:a2:98:
c8:6f:02:d8:fe:cc:20:b5:f6:8a:6a:b6:4a:06:55:
e9:5b:a9:ce:6d:bf:0a:d6:15:2a:e5:2b:e4:42:cb:
b7:df:43:5a:70:46:17:dd:48:77:8f:7c:a5:b8:57:
63:d3:6b:c3:37:88:e7:9d:23:68:78:52:d8:e4:ba:
b4:8c:97:e2:a2:a0:12:84:b9:a3:7f:02:3e:76:07:
5b:8e:07:5a:7a:9c:e5:a6:7d:34:fe:f6:7e:32:db:
04:98:1d:77:4f:d3:b0:42:9c:98:e5:c6:6c:45:36:
07:5e:bd:9b:a5:e6:52:31:3a:6c:99:14:fe:93:1f:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:98:B2:12:DC:84:0F:21:95:31:B3:44:52:AF:1B:31:D6:54:CD:0C
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/CJiyEtyEDyGVMbNEUq8bMdZUzQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.204.0/24
213.182.208.0/23
Signature Algorithm: sha256WithRSAEncryption
47:d8:56:89:89:2b:93:75:cc:c8:7f:45:1e:92:50:2e:64:d3:
26:de:08:71:77:9f:72:54:7c:83:80:f9:c2:05:18:46:e3:b3:
f3:d9:2c:ba:01:f9:5d:ce:88:42:d5:fc:76:a4:05:e1:9c:e0:
67:59:33:5a:04:2a:49:ad:88:32:fd:71:e6:a6:0d:46:05:f9:
bf:19:58:f3:8a:6a:df:fc:ea:47:d3:f8:ea:4e:af:b3:c8:8c:
0c:fe:b4:83:1e:2d:04:ea:c4:a9:1a:0f:17:76:6a:5f:48:04:
74:3f:a4:10:73:d5:c8:97:0b:3e:33:22:06:b9:f8:66:c2:b1:
60:b7:89:b0:dc:fb:ef:45:c5:74:8d:26:76:36:93:49:48:19:
39:0e:1b:33:70:cc:fc:ec:07:22:03:be:a5:1b:d3:9f:32:c4:
b4:50:70:71:38:8c:10:8e:bf:e1:38:0c:82:fd:a8:32:0e:b2:
d9:c3:88:6f:73:c2:27:96:e7:ed:d6:a0:56:26:9d:f3:35:ab:
ee:df:73:f0:a6:4a:e6:c5:de:8c:17:1d:a0:4b:0b:49:78:c0:
67:76:3b:5b:f6:b9:3c:f3:ef:26:43:04:95:f3:a8:f8:a2:f5:
ce:3a:0d:0e:de:e4:f3:5d:e0:a2:17:3b:47:44:0c:b8:bd:0a:
ad:75:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:14 2024 by rpki-client on console-fra.rpki-client.org