Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/IkrRZfkMA4m90hQrw0Be2K0XATk.roa
File: IkrRZfkMA4m90hQrw0Be2K0XATk.roa (raw, json)
Hash identifier: cckAN9YMjQSxvt9I7oEDbqCYfTU/C3btSsBorcPO0rM=
Subject key identifier: 22:4A:D1:65:F9:0C:03:89:BD:D2:14:2B:C3:40:5E:D8:AD:17:01:39
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019206278F25ED4A5BFF18ACA429575D703A
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/IkrRZfkMA4m90hQrw0Be2K0XATk.roa
Signing time: Wed 18 Sep 2024 17:21:48 +0000
ROA not before: Wed 18 Sep 2024 17:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213176
IP address blocks: 209.35.224.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
209.35.226.0/24 maxlen: 24
209.35.227.0/24 maxlen: 24
209.35.228.0/24 maxlen: 24
209.35.229.0/24 maxlen: 24
209.35.230.0/24 maxlen: 24
209.35.231.0/24 maxlen: 24
209.35.233.0/24 maxlen: 24
212.59.64.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 11:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:27:8f:25:ed:4a:5b:ff:18:ac:a4:29:57:5d:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Sep 18 17:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=224ad165f90c0389bdd2142bc3405ed8ad170139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:11:97:2c:3c:6d:5f:17:d5:c3:ba:cc:03:
29:19:e9:c7:8a:01:24:33:46:8f:fa:2d:46:6c:be:
f0:ae:e5:6e:db:6f:e6:51:7c:07:45:b2:6e:e4:38:
cf:74:a7:4c:5b:c2:65:98:42:b5:85:99:9d:33:a9:
1a:e6:4a:c7:74:c6:2f:ae:0b:99:ac:f6:db:a3:90:
49:56:b9:22:e1:ec:bb:10:83:50:8f:18:b9:17:47:
3f:75:cf:52:39:16:59:e9:78:48:56:25:9b:56:ad:
c7:17:eb:0d:b7:34:e0:c6:f0:6d:e4:4a:d4:c2:4f:
06:cc:8a:33:78:e8:bc:bb:38:61:81:2c:85:a7:80:
ed:88:f9:3c:d0:79:85:1c:01:b1:cb:bd:83:eb:2a:
bc:11:fc:c1:9c:55:57:09:c4:89:05:25:91:12:32:
6e:9d:68:a4:e8:fd:73:60:20:0e:c3:66:88:67:4f:
f9:29:e1:97:4e:88:4e:3e:33:57:20:fe:49:8f:e0:
af:72:f8:c0:a1:f2:4f:cf:e0:5b:d5:90:e5:e3:ff:
33:82:9e:49:7c:b2:99:3c:f9:da:e5:fd:2f:56:cf:
2a:1a:bf:0d:98:7d:4e:e4:f4:10:fa:25:ed:14:a2:
12:ef:09:96:14:41:51:7f:be:d9:d7:82:fe:2c:c8:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:D1:65:F9:0C:03:89:BD:D2:14:2B:C3:40:5E:D8:AD:17:01:39
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/IkrRZfkMA4m90hQrw0Be2K0XATk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.35.224.0/21
209.35.233.0/24
212.59.64.0/21
Signature Algorithm: sha256WithRSAEncryption
93:a6:30:1b:c0:c3:f7:8b:3a:81:a7:7f:e6:ca:45:9b:28:db:
93:f4:39:88:a2:2c:b8:fa:07:cd:76:3e:94:dd:34:95:f3:e4:
22:d1:51:d6:85:c0:e9:da:38:72:78:e1:b6:b0:af:2e:53:b2:
9b:cd:18:c8:4f:a9:d0:d3:6b:53:8f:9a:d8:f0:a5:08:0a:ae:
79:64:7e:b3:23:c2:29:d6:da:ad:98:01:33:ee:c4:84:59:eb:
5c:dc:5d:05:68:7c:b5:2c:65:61:df:b3:b5:ab:7d:7b:9a:bf:
24:0c:5c:a7:1c:ce:91:94:4b:39:dc:35:0e:8b:c4:a3:a1:a2:
e0:c3:7a:79:6f:62:c4:91:cd:8d:e0:e1:66:58:e7:0a:ba:3c:
39:3e:38:57:05:a6:ee:dd:6e:42:0b:83:94:f3:7c:13:af:ab:
71:02:96:00:db:4d:fa:f6:f0:ee:70:04:3a:7b:52:da:e0:76:
4b:81:89:e9:30:ac:21:1d:a2:24:f4:35:44:df:96:24:9a:40:
be:2c:3e:17:96:58:07:fd:57:80:a0:10:32:9f:2d:5b:6e:fa:
ca:73:c1:6d:36:d4:1e:c5:a7:d6:71:52:fd:bc:50:f9:3a:d8:
f2:e4:c2:77:19:64:5f:4e:0f:f6:a8:06:7b:bc:83:91:0b:e4:
83:c6:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:02 2025 by rpki-client