Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/qtGI7hraBiU5qKu4BTDnSbyIiJg.roa
File: qtGI7hraBiU5qKu4BTDnSbyIiJg.roa (raw, json)
Hash identifier: wHzBZZEMMPANMJwBoBK9v5iiHtuha7IyeHXvqrKcq14=
Subject key identifier: AA:D1:88:EE:1A:DA:06:25:39:A8:AB:B8:05:30:E7:49:BC:88:88:98
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01919E2A5FD615BAA3E5743328EB49D09D02
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/qtGI7hraBiU5qKu4BTDnSbyIiJg.roa
Signing time: Thu 29 Aug 2024 12:44:22 +0000
ROA not before: Thu 29 Aug 2024 12:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 213.182.207.0/24 maxlen: 24
213.182.211.0/24 maxlen: 24
213.182.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 13:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:2a:5f:d6:15:ba:a3:e5:74:33:28:eb:49:d0:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 29 12:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aad188ee1ada062539a8abb80530e749bc888898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:61:fb:18:e7:c7:86:1b:8d:b8:f1:a8:e6:
5c:27:14:e5:76:2d:82:07:3e:5c:bc:7e:eb:d3:6b:
b7:95:41:e3:b5:5a:38:94:4f:bd:b8:10:8b:6b:e7:
3e:07:8e:bc:e0:28:dd:25:59:22:57:cb:70:a0:2a:
2e:16:36:d7:f1:01:64:38:ef:8a:dd:1c:48:8e:6e:
6f:b1:0c:ec:76:56:80:53:04:50:6e:f6:3f:10:b8:
45:23:e5:fc:16:36:30:b4:e6:de:13:86:35:af:bc:
83:28:b4:02:25:41:26:5d:e3:3a:8c:ea:cf:11:5b:
09:fd:cc:e8:c6:bd:36:db:a5:b2:59:8c:f0:70:08:
90:3c:f9:2a:0d:ff:0e:74:ff:3a:ac:8f:ea:97:46:
c6:9d:f7:86:0f:39:59:9b:0c:3b:01:e7:9f:da:7a:
11:87:6f:ce:5b:89:3c:4b:0b:a2:dd:ec:64:9a:d4:
b1:5b:14:ac:05:35:b5:df:b1:6c:87:71:18:65:e1:
61:09:89:c0:70:fe:6e:1c:50:5f:07:b0:1d:c8:df:
d6:14:7f:20:a2:7a:23:c3:29:ca:1c:45:7c:c5:51:
03:be:56:d3:3b:92:49:5b:d5:dc:4f:a9:7b:8d:5c:
bc:74:e2:db:51:02:f5:42:46:f6:27:d0:ee:2c:cb:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:88:EE:1A:DA:06:25:39:A8:AB:B8:05:30:E7:49:BC:88:88:98
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/qtGI7hraBiU5qKu4BTDnSbyIiJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.207.0/24
213.182.211.0/24
213.182.216.0/24
Signature Algorithm: sha256WithRSAEncryption
52:01:91:24:85:c0:a0:b0:9b:b4:79:34:d4:f7:bb:cc:3f:52:
b1:2c:46:1f:00:5f:b2:be:5e:d9:2c:11:18:ea:a7:60:3c:56:
bc:e1:d5:d9:69:d7:35:67:d0:cd:84:2d:fa:c6:67:29:14:13:
e2:52:64:9b:08:c5:a1:5a:5c:85:3b:df:ca:a4:73:a2:48:d4:
db:3d:02:db:bf:e8:83:22:1c:41:7f:5a:74:94:4d:0e:ab:37:
73:17:be:58:3c:80:fc:40:82:5f:7b:2e:c0:d4:7f:b4:46:c8:
ba:f3:7e:a3:32:4e:68:f0:08:63:a2:50:90:2a:aa:4f:42:f1:
67:96:8b:90:b5:ff:e1:c0:3d:10:15:ab:ad:ac:97:4f:83:d7:
f3:5d:04:a5:dc:c6:77:93:02:24:5c:ee:c2:cc:47:51:5e:07:
4f:80:a4:b6:9e:15:75:12:fb:cf:32:ea:19:ed:4c:61:36:6f:
40:bc:fe:3d:d9:cc:c1:51:1e:2d:3c:b5:5a:c2:06:71:1b:4d:
6a:82:97:d9:27:5f:30:53:52:5b:c2:5d:f3:b9:67:a3:81:0a:
52:ef:6b:f2:82:a3:52:fc:38:41:9e:33:51:0d:12:69:14:80:
a7:f3:7c:f5:9c:39:ce:bc:9e:82:76:a2:94:5f:9b:27:63:86:
07:aa:95:e3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZGeKl/WFbqj5XQzKOtJ0J0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjQwODI5MTI0NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWQxODhlZTFhZGEwNjI1MzlhOGFiYjgwNTMwZTc0OWJjODg4ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuNh+xjnx4YbjbjxqOZcJxTldi2C
Bz5cvH7r02u3lUHjtVo4lE+9uBCLa+c+B4684CjdJVkiV8twoCouFjbX8QFkOO+K
3RxIjm5vsQzsdlaAUwRQbvY/ELhFI+X8FjYwtObeE4Y1r7yDKLQCJUEmXeM6jOrP
EVsJ/czoxr0226WyWYzwcAiQPPkqDf8OdP86rI/ql0bGnfeGDzlZmww7Aeef2noR
h2/OW4k8Swui3exkmtSxWxSsBTW137Fsh3EYZeFhCYnAcP5uHFBfB7AdyN/WFH8g
onojwynKHEV8xVEDvlbTO5JJW9XcT6l7jVy8dOLbUQL1Qkb2J9DuLMsdPwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKrRiO4a2gYlOairuAUw50m8iIiYMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvcXRHSTdocmFCaVU1cUt1NEJURG5TYnlJaUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1bbPAwQA
1bbTAwQA1bbYMA0GCSqGSIb3DQEBCwUAA4IBAQBSAZEkhcCgsJu0eTTU97vMP1Kx
LEYfAF+yvl7ZLBEY6qdgPFa84dXZadc1Z9DNhC36xmcpFBPiUmSbCMWhWlyFO9/K
pHOiSNTbPQLbv+iDIhxBf1p0lE0OqzdzF75YPID8QIJfey7A1H+0Rsi6836jMk5o
8AhjolCQKqpPQvFnlouQtf/hwD0QFautrJdPg9fzXQSl3MZ3kwIkXO7CzEdRXgdP
gKS2nhV1EvvPMuoZ7UxhNm9AvP492czBUR4tPLVawgZxG01qgpfZJ18wU1Jbwl3z
uWejgQpS72vygqNS/DhBnjNRDRJpFICn83z1nDnOvJ6CdqKUX5snY4YHqpXj
-----END CERTIFICATE-----
Generated at Fri Aug 30 17:43:33 2024 by rpki-client on console-ams.rpki-client.org