Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/DGbhLHutFQXb6ndyDZDKAcZfPBg.roa
File: DGbhLHutFQXb6ndyDZDKAcZfPBg.roa (raw, json)
Hash identifier: M1Vz4wAueEThTY0qkBYxfaEFMSD7YBOoDqdHYSGh7kI=
Subject key identifier: 0C:66:E1:2C:7B:AD:15:05:DB:EA:77:72:0D:90:CA:01:C6:5F:3C:18
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01901CDD7704C23EC482CB82D20D98D26ADE
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/DGbhLHutFQXb6ndyDZDKAcZfPBg.roa
Signing time: Sat 15 Jun 2024 17:06:34 +0000
ROA not before: Sat 15 Jun 2024 17:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 213.182.193.0/24 maxlen: 24
213.182.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:dd:77:04:c2:3e:c4:82:cb:82:d2:0d:98:d2:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jun 15 17:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c66e12c7bad1505dbea77720d90ca01c65f3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:46:30:48:9a:f8:da:bf:70:b5:5f:29:5e:
e8:f3:74:83:ba:c9:3d:ba:c9:4c:72:2f:78:51:6d:
8a:03:7e:ff:88:26:4a:7f:27:b1:b4:c3:02:3a:bd:
91:2f:20:81:96:dd:d9:c7:c7:1a:0e:57:f0:a2:76:
6d:e8:92:84:d0:19:fe:c0:d3:4d:6d:de:a8:0b:84:
18:8e:a0:5a:1d:76:88:fd:fa:fe:08:a6:cc:45:8e:
28:5a:22:7e:2e:49:e3:be:a2:c9:ae:5f:ca:66:06:
a0:84:04:79:58:0d:34:cf:08:3c:21:c7:04:4f:d9:
39:49:05:4b:d6:e3:32:91:d5:d2:bd:cd:01:cf:0e:
31:1a:dd:6e:bb:af:2c:42:7f:62:48:40:92:12:6d:
17:e6:f7:7c:4f:a6:67:38:6a:ae:0a:24:50:81:5a:
09:26:76:e3:fc:11:fe:00:ab:b9:d1:89:a3:9e:0b:
c3:68:f8:b5:ee:a6:83:36:98:70:ef:08:6a:9f:bb:
8e:e4:3a:ab:c7:36:1f:7c:7a:a8:e7:6f:a1:c6:27:
da:21:d7:9a:21:28:08:50:4e:28:eb:21:b2:ac:24:
47:b6:67:7a:d3:b4:a0:ab:10:88:e4:bb:90:b0:bd:
1e:08:b5:07:11:30:36:a5:12:34:c1:e0:c2:e6:84:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:E1:2C:7B:AD:15:05:DB:EA:77:72:0D:90:CA:01:C6:5F:3C:18
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/DGbhLHutFQXb6ndyDZDKAcZfPBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.193.0-213.182.194.255
Signature Algorithm: sha256WithRSAEncryption
51:f1:a1:d6:79:f9:61:3f:9a:e7:50:e1:fc:60:fc:9a:cd:50:
f7:7b:e9:d5:75:61:3c:b5:48:f8:57:ff:e9:fd:4c:f2:20:c3:
9f:e5:e8:5e:dd:07:e4:e7:6c:06:e6:0e:bd:d6:b8:83:46:58:
7a:2e:b8:85:2c:b9:3b:1c:95:eb:ba:f5:bc:de:87:b1:6b:c0:
37:24:43:e6:27:b3:2e:54:de:89:15:c9:24:39:ae:48:5c:fc:
bb:da:8e:33:0d:09:a3:85:8c:a2:a3:b1:31:67:1b:72:e0:01:
a6:29:61:1e:a3:70:db:eb:cd:a9:2e:22:33:75:06:8f:0c:ba:
20:fb:82:2d:26:63:aa:93:9e:42:ed:46:d2:42:5d:56:0c:f0:
35:d9:0d:40:89:90:0d:e8:09:49:36:b0:24:9f:54:f6:fa:fa:
d1:da:54:fb:fd:fb:46:b5:eb:ee:5b:4c:6a:8f:0b:0b:ee:84:
cf:a3:f6:fa:f5:46:28:1b:4a:e8:bb:4d:90:e3:b3:ca:8f:27:
b4:39:aa:51:bf:9b:7e:0a:8b:4a:b0:24:b9:c9:02:63:55:c5:
f3:44:8a:bd:ee:b4:2a:30:72:7e:ea:57:92:25:e4:2f:cc:db:
10:1b:e9:03:ed:f3:d2:51:dc:da:d0:1b:06:07:2f:bc:58:9f:
73:be:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:15 2025 by rpki-client