Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EwrSXeuAuqJ-IZCpQnvKrpspReQ.roa
File: EwrSXeuAuqJ-IZCpQnvKrpspReQ.roa (raw, json)
Hash identifier: reSG5eZi7wRbDYWaQ5KUtvTs4Z4cyyYI6rkmuIXWyaU=
Subject key identifier: 13:0A:D2:5D:EB:80:BA:A2:7E:21:90:A9:42:7B:CA:AE:9B:29:45:E4
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01918E3F5D8C567EADDD95BEF1E31D631FBB
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EwrSXeuAuqJ-IZCpQnvKrpspReQ.roa
Signing time: Mon 26 Aug 2024 10:33:22 +0000
ROA not before: Mon 26 Aug 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 195.216.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 30 Sep 2024 16:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:3f:5d:8c:56:7e:ad:dd:95:be:f1:e3:1d:63:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 26 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=130ad25deb80baa27e2190a9427bcaae9b2945e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:21:d3:1e:e0:16:5f:0e:90:36:2d:0b:2e:
12:0a:e3:9b:21:f1:dc:4e:52:d2:af:21:10:58:bd:
d4:9d:34:40:15:85:5d:cb:8f:c2:c4:a2:87:54:76:
4a:0f:b8:e0:49:36:5a:fb:ae:36:e0:7d:0f:05:24:
c8:55:e2:3a:88:51:75:05:07:c2:ae:04:d7:b9:54:
9c:f8:1d:c5:4d:b6:a5:8d:0a:3e:10:26:11:03:96:
c9:3e:79:7b:40:60:ec:36:22:a8:0d:3b:77:5c:fc:
16:ad:b8:f3:39:85:19:b7:18:f2:34:73:0e:17:ac:
96:f0:42:5e:f3:b9:f0:5d:b8:ed:38:cb:f9:93:47:
f0:ed:e1:e5:48:84:45:f7:d9:98:16:1e:a5:2c:f6:
a6:10:f1:d4:7a:d7:67:28:45:be:c2:f7:91:39:cf:
5f:44:41:53:4d:f2:c0:e2:4d:40:13:cb:5a:a8:00:
a2:c8:e3:f9:c6:c9:7d:d7:fa:18:82:a3:8c:3c:a7:
11:b1:8c:b3:92:d6:51:48:98:a9:fb:38:57:f7:b0:
a7:99:46:2b:af:0b:a3:8a:34:2b:b7:a5:00:27:7b:
d9:d2:00:d2:0a:b9:a0:cb:8f:85:b0:e4:ce:2a:f3:
99:a5:be:48:c5:a0:d9:b5:0a:a6:9b:7a:02:7f:81:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:D2:5D:EB:80:BA:A2:7E:21:90:A9:42:7B:CA:AE:9B:29:45:E4
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EwrSXeuAuqJ-IZCpQnvKrpspReQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.164.0/22
Signature Algorithm: sha256WithRSAEncryption
69:84:05:47:3d:58:8e:51:b3:62:68:57:4b:8b:b4:b7:02:ec:
14:66:ff:78:53:b8:cc:75:e0:cc:35:6a:e8:f8:15:57:29:d0:
c7:08:7a:9d:cc:3a:c3:cf:7d:17:34:a6:1a:df:f0:bb:55:41:
c6:f7:60:c1:86:d5:1e:4d:e3:c7:b1:1b:1e:3a:6a:88:60:c8:
53:ef:54:85:0f:c8:20:fb:61:dc:e5:78:12:3a:b0:0a:87:8f:
93:e1:ec:fe:94:0d:85:7b:f2:3f:35:c8:14:38:a2:e1:a9:34:
d2:08:6f:99:ed:9d:66:d2:f6:b7:f6:c3:2a:6b:a8:0d:13:b9:
aa:ce:50:51:97:2b:cd:bf:b8:94:0e:30:4c:46:10:f0:96:9a:
b3:49:c6:41:c6:f1:c9:b0:04:df:e4:2f:ad:27:a3:b9:c6:8f:
ab:a0:dc:4c:b8:36:c2:91:31:a8:b9:48:46:50:c5:28:44:a4:
ad:49:fc:d1:78:55:2a:9b:aa:78:fd:3a:0d:38:02:80:d3:ae:
42:ed:ec:df:c2:31:4c:9c:00:5f:ee:da:63:28:ce:e0:2a:34:
fb:fe:92:a4:73:18:cf:e1:27:20:25:7d:41:37:3d:11:b3:73:
ee:5c:e5:a6:1c:1e:22:62:e7:ab:fa:8e:ee:95:28:d7:ee:39:
d1:e8:1f:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGOP12MVn6t3ZW+8eMdYx+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjQwODI2MTAzMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzBhZDI1ZGViODBiYWEyN2UyMTkwYTk0MjdiY2FhZTliMjk0NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGoh0x7gFl8OkDYtCy4SCuObIfHc
TlLSryEQWL3UnTRAFYVdy4/CxKKHVHZKD7jgSTZa+6424H0PBSTIVeI6iFF1BQfC
rgTXuVSc+B3FTbaljQo+ECYRA5bJPnl7QGDsNiKoDTt3XPwWrbjzOYUZtxjyNHMO
F6yW8EJe87nwXbjtOMv5k0fw7eHlSIRF99mYFh6lLPamEPHUetdnKEW+wveROc9f
REFTTfLA4k1AE8taqACiyOP5xsl91/oYgqOMPKcRsYyzktZRSJip+zhX97CnmUYr
rwujijQrt6UAJ3vZ0gDSCrmgy4+FsOTOKvOZpb5IxaDZtQqmm3oCf4Fd1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMK0l3rgLqifiGQqUJ7yq6bKUXkMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvRXdyU1hldUF1cUotSVpDcFFudktycHNwUmVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9ikMA0G
CSqGSIb3DQEBCwUAA4IBAQBphAVHPViOUbNiaFdLi7S3AuwUZv94U7jMdeDMNWro
+BVXKdDHCHqdzDrDz30XNKYa3/C7VUHG92DBhtUeTePHsRseOmqIYMhT71SFD8gg
+2Hc5XgSOrAKh4+T4ez+lA2Fe/I/NcgUOKLhqTTSCG+Z7Z1m0va39sMqa6gNE7mq
zlBRlyvNv7iUDjBMRhDwlpqzScZBxvHJsATf5C+tJ6O5xo+roNxMuDbCkTGouUhG
UMUoRKStSfzReFUqm6p4/ToNOAKA065C7ezfwjFMnABf7tpjKM7gKjT7/pKkcxjP
4ScgJX1BNz0Rs3PuXOWmHB4iYuer+o7ulSjX7jnR6B+G
-----END CERTIFICATE-----
Generated at Mon Sep 30 19:44:48 2024 by rpki-client on console-fra.rpki-client.org