Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/K9DR2zXi5gZ3CQu5QUNzO6rDcoU.roa
File: K9DR2zXi5gZ3CQu5QUNzO6rDcoU.roa (raw, json)
Hash identifier: Ws8c0pAOsXUF0dJBvU0N35eynHoBPc70bsgimdLyjoo=
Subject key identifier: 2B:D0:D1:DB:35:E2:E6:06:77:09:0B:B9:41:43:73:3B:AA:C3:72:85
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 0191C7657C180C6F8F8FB8E29927ACB14C42
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/K9DR2zXi5gZ3CQu5QUNzO6rDcoU.roa
Signing time: Fri 06 Sep 2024 12:53:22 +0000
ROA not before: Fri 06 Sep 2024 12:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210312
IP address blocks: 147.189.216.0/21 maxlen: 21
147.189.216.0/24 maxlen: 24
193.5.16.0/22 maxlen: 22
193.5.19.0/24 maxlen: 24
2a0d:3dc0::/29 maxlen: 29
2a0d:3dc2::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Oct 2024 11:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:65:7c:18:0c:6f:8f:8f:b8:e2:99:27:ac:b1:4c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Sep 6 12:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bd0d1db35e2e60677090bb94143733baac37285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:72:37:2b:5f:31:0a:44:1f:04:87:a8:de:be:
bc:fa:eb:96:32:7f:6b:15:73:34:1e:b5:53:7e:aa:
2d:4d:4a:2b:c9:0d:fb:9a:c0:bd:42:c2:6a:cf:e8:
f8:de:94:5f:69:d7:54:99:e7:0f:8d:01:b3:9e:37:
64:9f:f8:24:e4:82:74:0b:10:b2:56:55:c0:6d:3c:
12:1d:a3:d8:21:ab:89:ec:6b:4f:c1:2a:55:d6:c9:
17:c5:f0:aa:fc:8d:bf:09:9c:73:f3:f4:2f:37:a7:
88:ae:c0:0f:47:9a:8f:88:3a:16:54:9f:d2:d9:ca:
0a:73:62:ed:3f:1e:e1:48:65:72:f8:8f:b2:ee:fa:
cd:57:d7:76:0f:d4:d1:56:b1:e1:32:c5:1f:2b:33:
63:b2:19:b3:48:e9:2e:d5:1b:3d:01:e9:3e:8a:5f:
5d:2d:0d:ad:ee:db:1c:7c:8d:1d:a1:e3:0a:96:82:
d7:fc:c3:14:18:42:4f:0d:e7:ba:47:89:4c:d2:01:
f9:e0:1f:0a:e4:fa:11:82:c3:7b:0a:2a:28:79:e7:
5a:3f:ac:3a:90:90:70:f1:16:26:f5:e3:2d:6a:f1:
d9:e8:75:af:6b:e1:9c:1e:fe:bc:46:5c:2b:de:70:
d9:50:75:96:b3:13:3a:e2:d4:a5:ef:67:75:b6:0e:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:D1:DB:35:E2:E6:06:77:09:0B:B9:41:43:73:3B:AA:C3:72:85
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/K9DR2zXi5gZ3CQu5QUNzO6rDcoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:d5:33:1a:0f:6f:d4:a7:6d:66:bd:1f:01:e0:10:73:38:f2:
40:c8:a5:df:54:89:38:ed:a8:68:31:26:a8:c1:c0:3e:dd:86:
9e:31:33:1c:5c:de:a2:ae:b6:55:a2:d2:f7:61:54:67:51:1c:
c1:7c:3a:69:77:89:d1:09:81:cd:fa:46:34:31:4f:2a:16:2a:
33:37:26:7a:d7:14:c5:43:8f:05:71:e9:82:dc:0e:4d:3b:09:
40:23:5a:0d:9d:60:68:78:8f:f4:7b:58:fa:8a:8b:7d:40:9d:
36:26:81:90:70:e5:4d:ae:6a:de:a1:25:be:bd:a2:00:d1:1c:
d7:23:fc:29:99:87:b1:92:a0:e0:3a:42:4f:7e:1e:e6:ae:cc:
9c:82:38:ef:81:d7:97:3d:4f:8f:5b:71:d3:03:cc:44:f1:e7:
ad:53:c8:47:8d:9a:40:6c:6c:9d:a4:8b:9b:84:c5:a8:fb:3a:
76:e6:a3:09:80:b2:a5:4a:60:a6:4a:55:cf:59:33:9e:05:3f:
ad:e2:0b:5f:02:1d:17:ab:02:2b:8e:18:ea:da:de:00:cb:52:
d6:71:3e:5c:2a:2c:27:91:3c:3a:3e:a8:44:6a:a5:99:42:9c:
42:98:b8:00:08:95:8f:15:aa:72:6c:c5:7d:c0:38:d2:20:5a:
30:35:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 14:05:13 2024 by rpki-client on console-fra.rpki-client.org