Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/j90uX51hPYupXuzHXmNsZzpXcNo.roa
File: j90uX51hPYupXuzHXmNsZzpXcNo.roa (raw, json)
Hash identifier: Ik36n5IU7BYdHUeUce7+IuEWhenAVIJ4XJ2p/stPJ28=
Subject key identifier: 8F:DD:2E:5F:9D:61:3D:8B:A9:5E:EC:C7:5E:63:6C:67:3A:57:70:DA
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01958FAA30C15AD98CF088C8A107F67ED786
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/j90uX51hPYupXuzHXmNsZzpXcNo.roa
Signing time: Thu 13 Mar 2025 13:20:50 +0000
ROA not before: Thu 13 Mar 2025 13:20:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214504
IP address blocks: 213.182.212.0/24 maxlen: 24
213.182.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Mar 2025 15:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:aa:30:c1:5a:d9:8c:f0:88:c8:a1:07:f6:7e:d7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Mar 13 13:20:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fdd2e5f9d613d8ba95eecc75e636c673a5770da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:83:ba:bc:fa:58:71:81:d8:04:c9:8c:24:
c2:75:e2:70:0f:8a:53:c5:56:aa:2a:dc:fb:67:95:
c0:5c:34:dc:3e:0a:8a:53:d3:f8:2f:d8:93:5c:91:
ef:0d:a8:de:5c:4b:56:a7:40:70:33:70:48:6c:c7:
cb:46:ab:3b:d9:1d:1a:01:0c:61:06:b6:03:a1:a3:
45:d8:e7:56:20:2d:9c:d7:53:3b:49:9c:3c:32:de:
7d:5e:9e:74:4f:a7:20:bb:01:56:ba:65:1e:9e:fb:
c5:4c:e1:ba:d3:6c:7d:9f:be:10:9b:cb:fe:85:d9:
ad:9a:1b:a2:02:c2:35:61:20:f7:7c:43:34:78:3a:
52:d6:ec:38:29:0d:3a:92:95:cc:df:28:dc:ed:d1:
98:41:3d:98:44:68:47:cf:ca:90:59:92:ad:80:45:
91:8c:23:01:e0:ef:68:ec:42:2b:ec:3a:3e:0a:0c:
f2:9e:89:e1:50:d6:65:4d:0a:b5:35:2e:1e:1b:42:
73:6a:e7:d0:a0:5f:f0:8e:df:06:d0:10:c6:b8:01:
eb:82:b4:d8:9e:27:61:58:31:b6:58:ee:35:9c:2c:
00:36:43:2d:6d:15:88:e1:af:ea:d4:26:eb:22:03:
56:b5:d9:fa:87:d2:50:6d:9f:9f:80:f8:e1:51:3f:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:2E:5F:9D:61:3D:8B:A9:5E:EC:C7:5E:63:6C:67:3A:57:70:DA
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/j90uX51hPYupXuzHXmNsZzpXcNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.212.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:51:d6:c9:e4:df:9f:21:e2:46:09:34:89:19:9a:db:fb:38:
87:e8:34:81:96:8f:f6:81:1f:e0:8f:e2:66:59:d3:34:ab:67:
24:4b:ec:67:b7:8b:6d:b9:e0:f6:ce:cf:7b:41:13:06:c4:0c:
81:22:01:9f:b8:45:03:d7:d5:7e:05:66:f0:0c:8c:15:b6:c6:
24:0a:64:79:25:dc:17:de:ea:ad:30:53:a5:c0:6a:5e:88:35:
02:f3:cb:68:37:6f:bb:46:f6:a3:d8:3d:7a:ec:a1:7e:0f:0f:
95:f6:3f:0a:91:6a:88:f1:bf:af:7c:8e:14:4f:8f:ea:23:3c:
49:75:b9:a3:c3:b6:96:96:f4:0d:e9:54:9a:44:1a:87:cd:ac:
0d:4c:ef:bb:84:48:b3:b3:7e:6e:19:f3:39:cc:a1:da:f8:02:
3d:80:d8:11:22:c1:83:d5:88:55:3f:e4:2d:6a:87:6a:52:01:
05:9a:2b:cb:0c:3f:c4:6d:b0:24:f6:db:9f:32:5b:f0:04:79:
00:ae:c0:38:05:08:a1:95:e5:3b:c0:24:df:4a:1f:3a:4a:e9:
b5:bb:93:3d:64:49:13:1a:49:ab:2b:5d:e5:e3:b7:dd:33:c6:
c8:90:ae:7d:ff:b9:a9:1b:cb:48:85:44:58:da:eb:43:5e:69:
87:2a:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:13:36 2025 by rpki-client