Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/NZrV83zDHvt9414-t3bf7gMhzsA.roa
File: NZrV83zDHvt9414-t3bf7gMhzsA.roa (raw, json)
Hash identifier: MNxrpXCxPZEzqeoJxOZl0qVm5Tdzx/UBtqFkFJQVblQ=
Subject key identifier: 35:9A:D5:F3:7C:C3:1E:FB:7D:E3:5E:3E:B7:76:DF:EE:03:21:CE:C0
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0190ACCD9D2C96EFB62C7E7F19F7B830A05D
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/NZrV83zDHvt9414-t3bf7gMhzsA.roa
Signing time: Sat 13 Jul 2024 15:54:34 +0000
ROA not before: Sat 13 Jul 2024 15:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 213.182.212.0/23 maxlen: 23
213.182.214.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 12 Aug 2024 10:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ac:cd:9d:2c:96:ef:b6:2c:7e:7f:19:f7:b8:30:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jul 13 15:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=359ad5f37cc31efb7de35e3eb776dfee0321cec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:7c:b9:99:8e:3e:b3:8a:35:8a:6f:08:48:
bd:11:39:86:f4:fb:88:5b:7a:a2:8d:9c:e7:85:50:
5b:d7:3d:5c:37:11:da:9e:5b:a3:49:f1:f7:33:6f:
99:2b:53:18:5c:b4:e8:f5:ce:7d:87:81:75:71:2a:
e8:de:d2:af:13:82:3b:be:11:cd:15:8b:c7:e3:4d:
d0:d3:ca:55:61:72:b5:d2:c9:4f:c4:93:c8:dc:65:
d5:86:ba:8a:56:f7:be:78:e7:e7:ef:d3:4f:a7:8d:
ec:b5:63:aa:4e:6d:d8:cb:55:e3:50:a1:fc:6f:ed:
71:b5:b9:c0:95:43:8d:b7:31:c8:9f:2b:eb:d2:fc:
17:93:9d:f3:53:43:43:f8:5c:6f:c6:d0:b7:48:08:
9f:a6:d0:d7:02:e6:3f:b0:4d:ac:57:79:fc:60:9c:
a6:98:5c:a5:3a:4e:f5:38:c3:99:15:af:f5:e6:b5:
71:45:03:ec:cc:15:14:5b:8f:f2:f0:82:63:f0:41:
d6:38:50:6a:b1:2e:3a:8d:ed:c6:6f:46:e8:fd:21:
c7:a0:fe:12:06:dd:f8:46:b9:da:22:98:30:bd:fb:
eb:88:b2:1b:98:e2:46:29:2f:57:cf:73:92:78:f3:
fc:5a:53:29:fd:a0:75:53:2e:19:19:cf:9c:57:ec:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:D5:F3:7C:C3:1E:FB:7D:E3:5E:3E:B7:76:DF:EE:03:21:CE:C0
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/NZrV83zDHvt9414-t3bf7gMhzsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.212.0/22
Signature Algorithm: sha256WithRSAEncryption
67:4b:79:25:98:b4:5e:7a:d7:52:b9:d8:c8:a5:0b:86:ba:66:
e2:72:32:c4:fd:12:6d:d5:4f:3a:2b:da:52:3c:64:44:e2:43:
05:e2:4f:85:21:55:2b:fa:00:0e:72:05:37:8b:7d:6b:1c:ae:
36:2a:d5:94:3b:ff:24:e8:14:99:64:8a:7b:21:c9:e8:78:19:
25:e8:58:cf:6d:c9:68:81:ed:8e:c3:34:03:ef:2f:07:59:98:
6d:4e:ce:4e:09:3c:9a:88:e7:67:4d:55:e9:5b:c8:32:08:4c:
85:c5:9f:c6:a4:ad:98:23:b8:ad:27:47:58:b4:07:13:29:3d:
fa:cd:06:1c:5c:7e:c8:ee:83:8e:73:08:05:0c:72:f3:80:fd:
44:43:9d:36:50:7c:69:1e:42:79:1e:05:3d:ae:df:b0:ad:84:
77:5a:8f:26:87:20:c4:32:2e:78:b4:a7:61:d0:5b:cf:1c:49:
23:f9:3b:f3:d4:72:71:6e:b7:81:6d:14:44:8a:37:36:f2:09:
a1:0a:59:51:b6:80:92:73:c3:e3:68:98:54:e6:75:51:91:0d:
f8:36:d9:04:1a:08:2d:5f:d6:32:81:89:9c:fe:f5:a9:d9:ab:
6e:c8:10:1e:9b:0d:ec:0c:86:bc:82:6d:09:a0:2f:a6:41:13:
0f:61:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 14:38:24 2024 by rpki-client on console-ams.rpki-client.org