Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/s9DK_Gzsvkooi1TX1K42E3QZCes.roa
File: s9DK_Gzsvkooi1TX1K42E3QZCes.roa (raw, json)
Hash identifier: y2saMoLr0cOv1gG2noKWFba0T3ZQppmaNAzmE5bCxD8=
Subject key identifier: B3:D0:CA:FC:6C:EC:BE:4A:28:8B:54:D7:D4:AE:36:13:74:19:09:EB
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0190CAFBD04F49751A470AAD2D4EB25D86BC
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/s9DK_Gzsvkooi1TX1K42E3QZCes.roa
Signing time: Fri 19 Jul 2024 12:33:38 +0000
ROA not before: Fri 19 Jul 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 213.182.204.0/24 maxlen: 24
213.182.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 14:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:fb:d0:4f:49:75:1a:47:0a:ad:2d:4e:b2:5d:86:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jul 19 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d0cafc6cecbe4a288b54d7d4ae3613741909eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:dc:06:f6:59:4b:8e:9d:49:74:b9:40:66:
b3:21:bc:5c:8a:bb:2b:2b:87:4c:48:25:34:4e:0e:
d4:2d:bc:0f:f1:32:ad:57:a7:d9:80:e7:2f:be:33:
0c:3c:12:7e:08:d8:0d:5f:d0:62:e9:78:25:9e:0c:
7b:3e:03:7e:bc:53:68:af:af:67:00:4d:be:f4:c1:
51:be:9b:df:33:9d:71:e3:83:f1:d3:bb:b7:65:19:
83:28:3d:90:30:41:35:9c:ba:13:55:63:36:9b:80:
58:37:43:bf:a8:14:4d:4c:22:67:f4:7d:b1:3f:ad:
01:61:b1:e9:d4:b1:78:58:0e:22:44:5b:bf:de:a6:
d1:c4:ec:1c:73:45:78:86:bb:d8:fd:06:a7:c7:6f:
b2:67:92:83:f7:17:d0:bd:9b:d8:6d:ea:aa:7b:95:
87:9a:92:34:45:c9:23:11:d8:97:46:d3:a9:58:11:
da:cb:b7:4f:a9:dc:02:92:20:64:d4:8e:17:14:0c:
c4:e9:c1:85:a5:1e:56:b5:92:e5:7a:3e:f5:a6:f3:
d8:82:9e:9e:f2:0e:11:74:7f:52:72:29:fe:8a:df:
cc:1e:4a:c3:d5:44:03:c5:2b:cd:bd:89:d4:ec:b9:
2c:01:b5:a3:12:79:6e:7b:86:9b:38:e3:f0:4d:a1:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:CA:FC:6C:EC:BE:4A:28:8B:54:D7:D4:AE:36:13:74:19:09:EB
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/s9DK_Gzsvkooi1TX1K42E3QZCes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.204.0/24
213.182.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5c:ce:3b:a5:f5:8d:f3:8f:89:a7:4e:5d:aa:ea:08:0a:75:
f4:4a:c9:df:ad:94:cb:f3:7f:0e:3d:b9:81:11:1e:49:36:b8:
1e:e2:e7:a2:a2:b2:1d:92:09:6b:1a:5e:0c:bf:02:68:31:fb:
90:3c:fd:a0:ef:f1:9d:96:7c:92:26:c9:9f:a9:42:1c:df:3d:
83:cc:f3:1b:dc:35:2b:f9:74:ed:c0:87:b7:9d:06:ec:17:07:
23:33:3d:7c:78:a5:8f:bb:60:f3:17:12:1f:52:ad:b0:82:67:
c6:c5:14:c3:93:43:0e:07:fb:49:00:d7:ce:7d:91:0d:2b:00:
6f:a5:fd:a3:2a:83:bc:ad:d6:18:3c:eb:63:f2:c1:89:30:da:
5b:6c:d7:58:39:a3:0b:9d:87:ee:ff:86:e8:c4:57:3b:49:47:
6d:06:70:0c:32:0b:8e:0e:75:52:e1:af:7e:af:b4:6e:d7:b7:
2f:47:f8:43:a9:51:4a:78:2f:8f:ea:8a:44:cf:7c:9d:ea:fa:
0a:59:61:a0:c8:80:29:e1:b0:68:61:08:69:d4:5f:de:1f:75:
dd:c2:dd:e7:68:ff:e2:d7:83:9d:3f:7e:87:c3:77:41:d0:9e:
79:03:0e:1d:f1:81:d2:38:d6:d0:0a:c6:e0:1a:15:fc:c4:a8:
34:46:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 18:15:04 2024 by rpki-client on console-fra.rpki-client.org