Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/5JIqKWSDMJUtpOeVYRABQeWLeag.roa
File: 5JIqKWSDMJUtpOeVYRABQeWLeag.roa (raw, json)
Hash identifier: q4JayoAudt8tzih/910g6tzN6p9IfrdEz2hTFUO+t0M=
Subject key identifier: E4:92:2A:29:64:83:30:95:2D:A4:E7:95:61:10:01:41:E5:8B:79:A8
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01905DF950DBF6B2F9F7728621896CD5D84A
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/5JIqKWSDMJUtpOeVYRABQeWLeag.roa
Signing time: Fri 28 Jun 2024 08:32:18 +0000
ROA not before: Fri 28 Jun 2024 08:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20546
IP address blocks: 213.216.11.0/24 maxlen: 24
213.216.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:f9:50:db:f6:b2:f9:f7:72:86:21:89:6c:d5:d8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jun 28 08:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4922a29648330952da4e79561100141e58b79a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:4e:1c:f8:58:f0:ae:7d:e6:53:f2:0e:f9:
1e:81:3b:0a:fd:be:30:c2:5e:40:66:b5:21:74:2a:
3e:78:af:78:92:71:f7:02:4f:86:72:b8:12:f7:7b:
b5:1b:b3:45:e2:fb:7d:e1:60:aa:d2:4e:80:49:3c:
6a:cc:b8:05:15:85:5d:df:3e:aa:0d:af:2e:c0:3a:
77:a7:3d:27:55:16:2f:a6:77:d6:0d:33:f3:28:ac:
3f:48:cd:a4:79:96:d1:49:ba:04:69:3f:7f:64:e0:
67:23:01:1d:af:7b:1b:52:86:8f:6c:a2:c2:58:ba:
38:b0:f9:18:e1:14:95:c2:5e:5d:91:e0:12:0c:c5:
26:b2:bb:53:a3:d0:02:06:0d:14:05:2f:8f:b1:06:
ef:8c:9f:2b:0f:3a:66:43:4c:ed:16:76:8c:b3:a0:
3b:f2:28:62:0f:6a:46:1d:62:81:fe:17:2b:b7:38:
6c:5e:74:53:bd:61:b6:43:03:f0:4d:3e:3e:08:87:
a1:0a:99:94:c1:88:78:88:15:24:cf:74:d6:8f:28:
6e:ce:fd:4d:2f:74:bb:8b:b1:93:45:c5:c5:88:21:
67:d5:2e:5d:79:f7:c7:06:91:de:77:f2:4e:a4:63:
8a:f8:e4:0d:7a:7d:02:70:f4:cd:d8:e2:45:13:9d:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:2A:29:64:83:30:95:2D:A4:E7:95:61:10:01:41:E5:8B:79:A8
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/5JIqKWSDMJUtpOeVYRABQeWLeag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.216.11.0/24
213.216.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d4:57:5a:43:26:4a:77:89:c0:24:4b:19:b9:f2:f7:a2:73:
8d:9a:4f:36:63:10:be:da:8b:69:28:ff:c5:9c:ce:e7:bd:a8:
d9:ff:f4:37:e5:de:fa:2f:f1:93:8a:7c:ca:74:3f:fc:58:8e:
58:88:2c:0e:5f:24:37:08:e4:30:a3:7e:48:72:15:a0:bd:31:
f2:77:fa:ec:01:95:f4:9e:b0:6c:95:2a:56:b0:37:10:e1:2b:
2c:6e:f2:b0:1f:0a:e7:45:7c:5c:4c:77:ee:21:b5:91:4a:f3:
81:a0:9f:e0:d6:31:6d:92:34:a0:83:7b:99:e0:d4:fc:f9:53:
a9:7f:dc:4e:ff:57:15:db:e5:c7:63:d6:25:0d:57:de:10:34:
23:1c:60:46:1c:4d:28:1c:6f:a9:31:ca:2e:a5:da:d5:99:a7:
2d:8d:3f:e5:50:fb:36:13:70:19:cb:c4:21:39:23:26:ab:a1:
f0:bf:2e:f9:a7:a9:26:c9:a6:61:bc:e2:35:b3:2d:de:44:25:
33:4f:61:3b:ff:2f:59:c8:d6:36:98:3b:d3:89:cf:94:6d:ae:
a6:c1:d3:79:e1:ec:51:5b:23:35:e4:77:2d:42:2b:e2:b6:4a:
a2:96:ef:17:9f:1b:10:53:4b:8b:ff:80:84:3e:20:b5:5a:b9:
e3:57:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:55 2025 by rpki-client