Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Iy8lfvzoHk0ZUIMWEjaEUj8CO-0.roa
File: Iy8lfvzoHk0ZUIMWEjaEUj8CO-0.roa (raw, json)
Hash identifier: 25P44rP6BWxyJwrXzPhf4j8IeBVxoButFmkr2ciqksI=
Subject key identifier: 23:2F:25:7E:FC:E8:1E:4D:19:50:83:16:12:36:84:52:3F:02:3B:ED
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019243AE4B9D3AF2511A1FD0F139DC797F63
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Iy8lfvzoHk0ZUIMWEjaEUj8CO-0.roa
Signing time: Mon 30 Sep 2024 16:05:49 +0000
ROA not before: Mon 30 Sep 2024 16:05:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 195.216.164.0/22 maxlen: 22
213.182.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 08:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:ae:4b:9d:3a:f2:51:1a:1f:d0:f1:39:dc:79:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Sep 30 16:05:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=232f257efce81e4d19508316123684523f023bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:2c:0e:86:c1:3c:6b:a4:20:88:5e:10:00:
d6:6f:7b:c4:a1:29:cc:cd:52:7e:9b:9e:bb:de:50:
d0:5f:3b:e1:b8:01:f3:1f:f1:2a:eb:b4:50:41:cc:
e1:47:34:ab:5c:30:a9:d0:4d:5f:12:3c:b9:7d:81:
42:ac:36:56:ac:33:35:ed:9b:ed:57:a3:38:85:32:
4e:fa:08:98:c8:c9:af:c7:4d:a9:8e:04:02:a4:01:
c1:d6:a3:ba:3b:ae:2c:53:d6:8a:49:30:09:57:ea:
b7:78:9c:e9:b5:4a:75:19:2f:e5:01:1c:23:0b:dd:
2f:87:2c:7c:aa:fb:0c:ed:28:3e:bc:b9:89:35:e5:
2d:21:27:79:fb:d2:5d:10:7e:11:f1:29:d9:29:c3:
ef:0d:87:f4:10:04:c8:93:51:c8:60:23:68:e5:24:
74:13:7b:9c:c0:15:e6:d2:b6:0d:c5:8c:5d:8a:2f:
95:99:c4:ce:63:1e:44:fb:2b:65:b9:9d:76:67:67:
47:82:07:b3:d2:44:f6:23:b6:0d:b3:e7:dd:3a:40:
76:c8:b0:52:20:5c:3e:0f:bb:67:e3:58:47:c7:42:
6a:53:01:19:af:90:c1:26:52:6d:fc:4f:bf:c1:ff:
24:84:24:03:ad:0a:a6:1d:5e:c4:60:e9:b6:16:a5:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2F:25:7E:FC:E8:1E:4D:19:50:83:16:12:36:84:52:3F:02:3B:ED
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Iy8lfvzoHk0ZUIMWEjaEUj8CO-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.164.0/22
213.182.195.0/24
Signature Algorithm: sha256WithRSAEncryption
65:51:df:1f:14:e0:7f:6f:0b:68:52:e9:9e:93:f8:96:2c:dc:
84:7a:96:9b:7c:b0:fb:f8:9c:3d:96:c0:4d:cf:bb:a1:29:b3:
a2:9b:be:fb:98:a6:34:c9:64:27:f5:8e:5f:7f:67:4c:11:36:
68:eb:c0:7c:60:cd:38:71:aa:5f:6c:82:cd:1e:a9:08:c8:25:
2b:54:1c:3f:f8:72:56:a6:a6:b0:d8:4d:03:e6:44:3a:a0:92:
31:5f:50:86:1f:c5:5d:39:d7:d9:c7:18:bc:d5:6a:92:21:78:
5e:b2:b4:6f:80:08:8c:60:03:3e:c4:0a:ae:ba:72:0f:66:37:
a2:90:e9:33:0e:47:e6:9f:29:e4:fc:46:b2:86:e8:90:9d:72:
de:e0:fa:2b:5a:40:6d:68:35:c4:ed:c9:cc:a5:02:6d:e9:3b:
de:5c:0a:7b:9d:37:2e:a4:bd:ac:62:b2:47:f2:d6:70:27:3e:
3f:bb:9f:c9:d2:b9:82:1c:a8:96:e9:23:b1:3d:0a:e8:d6:56:
30:86:af:c1:40:93:fc:dd:0b:d8:cd:ba:d0:27:72:0a:ab:01:
30:da:46:64:6c:b2:7f:fd:d9:3e:f4:42:9d:b7:f1:f6:a9:06:
e5:ea:e5:5a:e4:6b:3b:bf:0a:c1:17:0e:ec:cd:3c:12:10:04:
3a:05:e6:1f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJDrkudOvJRGh/Q8TnceX9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjQwOTMwMTYwNTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzJmMjU3ZWZjZTgxZTRkMTk1MDgzMTYxMjM2ODQ1MjNmMDIzYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPQsDobBPGukIIheEADWb3vEoSnM
zVJ+m5673lDQXzvhuAHzH/Eq67RQQczhRzSrXDCp0E1fEjy5fYFCrDZWrDM17Zvt
V6M4hTJO+giYyMmvx02pjgQCpAHB1qO6O64sU9aKSTAJV+q3eJzptUp1GS/lARwj
C90vhyx8qvsM7Sg+vLmJNeUtISd5+9JdEH4R8SnZKcPvDYf0EATIk1HIYCNo5SR0
E3ucwBXm0rYNxYxdii+VmcTOYx5E+ytluZ12Z2dHggez0kT2I7YNs+fdOkB2yLBS
IFw+D7tn41hHx0JqUwEZr5DBJlJt/E+/wf8khCQDrQqmHV7EYOm2FqXq8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCMvJX786B5NGVCDFhI2hFI/AjvtMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvSXk4bGZ2em9IazBaVUlNV0VqYUVVajhDTy0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw9ikAwQA
1bbDMA0GCSqGSIb3DQEBCwUAA4IBAQBlUd8fFOB/bwtoUumek/iWLNyEepabfLD7
+Jw9lsBNz7uhKbOim777mKY0yWQn9Y5ff2dMETZo68B8YM04capfbILNHqkIyCUr
VBw/+HJWpqaw2E0D5kQ6oJIxX1CGH8VdOdfZxxi81WqSIXhesrRvgAiMYAM+xAqu
unIPZjeikOkzDkfmnynk/EayhuiQnXLe4PorWkBtaDXE7cnMpQJt6TveXAp7nTcu
pL2sYrJH8tZwJz4/u5/J0rmCHKiW6SOxPQro1lYwhq/BQJP83QvYzbrQJ3IKqwEw
2kZkbLJ//dk+9EKdt/H2qQbl6uVa5Gs7vwrBFw7szTwSEAQ6BeYf
-----END CERTIFICATE-----
Generated at Tue Nov 5 10:21:31 2024 by rpki-client on console-fra.rpki-client.org