Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/I0ymYTgaCAwwgbabRvuBynfobYU.roa
File: I0ymYTgaCAwwgbabRvuBynfobYU.roa (raw, json)
Hash identifier: 3b0izEh6NMzQuxwTwFj8d8Qos0mpHQG+tGK7GIMlht0=
Subject key identifier: 23:4C:A6:61:38:1A:08:0C:30:81:B6:9B:46:FB:81:CA:77:E8:6D:85
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 018CC726FCD1050E3CF9291E1BB00994A2BF
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/I0ymYTgaCAwwgbabRvuBynfobYU.roa
Signing time: Mon 01 Jan 2024 22:31:10 +0000
ROA not before: Mon 01 Jan 2024 22:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209786
IP address blocks: 213.139.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:fc:d1:05:0e:3c:f9:29:1e:1b:b0:09:94:a2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Jan 1 22:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=234ca661381a080c3081b69b46fb81ca77e86d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:37:ff:3a:9c:35:a3:6f:39:34:74:76:d7:
ba:bf:d0:42:f6:dd:92:26:e4:e5:5e:ca:64:66:9c:
da:8e:11:a7:5a:57:34:aa:f4:af:46:0e:cf:9f:43:
72:43:93:52:c3:ba:0d:7a:96:b5:05:77:1c:13:95:
0b:c5:1e:77:81:7f:1c:d4:12:47:cc:12:a5:e6:0f:
bf:ec:f7:46:38:54:ad:41:e8:d6:c1:97:52:eb:85:
e3:ca:35:71:63:27:85:d9:e1:74:18:06:ac:48:13:
ae:7a:73:7a:61:4b:ff:d1:64:c5:45:9c:cb:78:e0:
8e:6b:87:53:30:6d:47:00:33:04:37:57:7f:a1:b8:
46:04:86:49:69:7e:2f:7a:29:6c:b2:1f:90:0b:68:
b0:87:64:73:01:60:47:1b:e2:a8:90:a5:6f:a6:1c:
4b:cf:1e:1b:78:0d:38:0d:2f:4a:cd:09:c9:e2:ca:
16:3d:a1:ab:89:ef:1e:c8:66:23:01:ca:fc:3d:2a:
a4:28:50:1c:e4:11:41:ea:9d:16:17:31:e6:51:6d:
05:9d:2d:6b:c9:2a:66:71:93:4d:c2:95:d2:62:f1:
82:7c:3c:74:7e:27:14:b3:57:98:ec:cd:83:0b:76:
e7:7e:87:3b:6c:8e:e6:ce:f9:ec:79:1a:10:c0:92:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:A6:61:38:1A:08:0C:30:81:B6:9B:46:FB:81:CA:77:E8:6D:85
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/I0ymYTgaCAwwgbabRvuBynfobYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:d2:a1:37:86:17:18:9a:ee:90:c6:d0:0d:6f:ca:07:ac:0f:
ad:62:bf:53:5d:a6:2c:dc:39:c7:5f:3a:4b:09:67:52:25:52:
ef:9b:d3:3e:37:0a:f6:24:68:12:b3:99:a6:6b:40:df:f2:6d:
8c:e6:07:a2:50:e6:d5:1c:2b:6e:57:43:8b:f6:84:32:16:a2:
d1:5c:83:38:e9:ee:2a:40:c3:a6:4d:ae:c3:00:44:4e:0e:75:
74:a9:ac:13:80:31:ef:5d:36:ba:59:dd:d6:61:f8:4e:ee:b3:
ee:3d:eb:f1:a9:99:ba:85:27:cd:07:42:03:3b:ae:3f:92:d2:
24:ca:5f:b8:e8:11:d2:f7:ed:18:14:12:85:aa:60:26:7f:9e:
06:5d:73:4e:c2:70:a4:75:95:60:02:4d:cd:71:29:9f:59:fd:
7c:0b:eb:60:1f:55:ab:2c:45:4a:aa:1f:df:2c:73:23:83:00:
27:07:c8:51:0c:c9:a0:13:83:17:54:40:5e:fb:5d:fa:00:7e:
9f:51:45:56:ab:bf:46:29:93:1a:43:fc:a1:f9:77:04:77:e9:
ef:64:c5:03:d5:62:fa:0a:3b:84:d2:6f:f0:c4:90:f8:52:39:
d1:32:10:bc:51:e7:01:4c:db:52:0a:5a:70:3b:e9:64:a1:50:
f2:6a:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:40 2025 by rpki-client