Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/kCnpKYTvrUpouwb4hWFSt755AvQ.roa
File: kCnpKYTvrUpouwb4hWFSt755AvQ.roa (raw, json)
Hash identifier: whdS+wknjaoSr+nEFNTsrO/PE09pH/RkU39uwalEYi4=
Subject key identifier: 90:29:E9:29:84:EF:AD:4A:68:BB:06:F8:85:61:52:B7:BE:79:02:F4
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0190C0F49B3FAE35CD5F2376110AE4BE14DF
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/kCnpKYTvrUpouwb4hWFSt755AvQ.roa
Signing time: Wed 17 Jul 2024 13:49:34 +0000
ROA not before: Wed 17 Jul 2024 13:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13115
IP address blocks: 213.145.64.0/21 maxlen: 21
213.145.64.0/23 maxlen: 23
213.145.80.0/21 maxlen: 21
213.145.80.0/23 maxlen: 23
2001:41f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Jul 2024 16:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:f4:9b:3f:ae:35:cd:5f:23:76:11:0a:e4:be:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 17 13:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9029e92984efad4a68bb06f8856152b7be7902f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:6e:23:fe:12:86:25:53:b7:72:2e:95:00:
87:b1:7d:12:44:84:20:25:a6:a8:ee:ac:ec:c8:50:
9f:f7:5c:45:35:34:9b:be:bd:92:f0:f9:34:74:4d:
36:3b:cc:11:78:28:1d:1d:31:19:e4:31:f3:68:df:
a7:d1:10:21:af:f9:97:0e:4f:3a:33:f1:44:eb:99:
45:cb:87:08:24:c6:ac:4a:de:32:d6:ac:56:10:71:
04:b1:f9:a3:28:0b:51:86:59:20:55:f3:4d:5b:47:
ff:cd:f8:e6:7e:ba:0c:31:fb:8a:6b:88:7b:72:0d:
1a:58:28:7b:67:40:ca:19:24:13:92:60:f7:32:8f:
b0:31:97:db:e1:cc:b9:bb:71:6c:c7:09:f9:85:5e:
24:4d:6c:db:bd:19:93:f9:b9:6c:1a:a1:36:a4:80:
0f:4b:5f:f0:81:f1:64:b0:61:f2:f7:81:ca:6d:cb:
7f:98:84:45:99:38:67:50:b3:14:20:77:b2:6b:f9:
71:d8:10:66:cb:69:07:8e:0e:10:57:4e:84:93:68:
70:73:6d:69:64:8a:54:60:2b:f5:42:c4:93:32:22:
30:7c:1d:49:a8:1e:5c:a3:72:7e:be:aa:02:7b:75:
12:93:6f:80:7a:f0:f5:53:3f:2c:04:41:d5:3a:27:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:E9:29:84:EF:AD:4A:68:BB:06:F8:85:61:52:B7:BE:79:02:F4
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/kCnpKYTvrUpouwb4hWFSt755AvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.64.0/21
213.145.80.0/21
IPv6:
2001:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
e5:2b:d8:34:ed:0f:f7:a3:46:d2:c5:c5:dc:2e:72:1d:75:c6:
f1:0f:de:34:5a:e9:25:2b:a6:66:15:10:25:40:ba:13:5e:cf:
4f:8b:4e:46:37:33:01:ca:0c:bf:f2:7c:cc:75:40:42:a3:aa:
9d:1e:b0:16:2d:c3:76:b6:fa:eb:57:48:f3:58:ae:03:fa:ec:
0f:4b:55:34:ff:bd:6c:23:be:d6:5a:05:a9:a8:eb:28:20:f3:
ae:03:d0:d6:d3:58:44:a5:70:9f:03:e9:12:5e:d0:49:ac:87:
fa:43:06:5e:fb:88:d9:17:c9:3a:91:3d:d9:c6:20:ef:ea:ef:
04:00:a3:cd:c1:7a:07:62:03:d6:47:1b:23:37:e7:fb:45:97:
79:06:d1:05:30:9e:73:ee:e2:14:31:99:57:9a:3a:7e:f6:57:
97:ab:d4:42:42:34:7d:3b:ac:e3:d2:b5:a2:2c:18:36:cb:58:
e0:21:be:07:02:98:87:c0:37:4a:6b:35:ab:c0:37:56:50:f6:
ae:53:5d:21:94:f5:5b:02:af:12:51:b0:80:76:04:b4:16:3b:
54:57:bf:e7:85:da:73:d8:bb:b7:41:f9:e1:76:aa:9c:48:b9:
15:43:5a:b9:30:02:4c:6d:7a:9b:d9:81:22:40:dd:f6:1f:d3:
5d:6a:ee:1d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZDA9Js/rjXNXyN2EQrkvhTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQwNzE3MTM0OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDI5ZTkyOTg0ZWZhZDRhNjhiYjA2Zjg4NTYxNTJiN2JlNzkwMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYVuI/4ShiVTt3IulQCHsX0SRIQg
Jaao7qzsyFCf91xFNTSbvr2S8Pk0dE02O8wReCgdHTEZ5DHzaN+n0RAhr/mXDk86
M/FE65lFy4cIJMasSt4y1qxWEHEEsfmjKAtRhlkgVfNNW0f/zfjmfroMMfuKa4h7
cg0aWCh7Z0DKGSQTkmD3Mo+wMZfb4cy5u3Fsxwn5hV4kTWzbvRmT+blsGqE2pIAP
S1/wgfFksGHy94HKbct/mIRFmThnULMUIHeya/lx2BBmy2kHjg4QV06Ek2hwc21p
ZIpUYCv1QsSTMiIwfB1JqB5co3J+vqoCe3USk2+AevD1Uz8sBEHVOic83wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJAp6SmE761KaLsG+IVhUre+eQL0MB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEva0NucEtZVHZyVXBvdXdiNGhXRlN0NzU1QXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQD1ZFAAwQD
1ZFQMA0EAgACMAcDBQAgAUH4MA0GCSqGSIb3DQEBCwUAA4IBAQDlK9g07Q/3o0bS
xcXcLnIddcbxD940WuklK6ZmFRAlQLoTXs9Pi05GNzMBygy/8nzMdUBCo6qdHrAW
LcN2tvrrV0jzWK4D+uwPS1U0/71sI77WWgWpqOsoIPOuA9DW01hEpXCfA+kSXtBJ
rIf6QwZe+4jZF8k6kT3ZxiDv6u8EAKPNwXoHYgPWRxsjN+f7RZd5BtEFMJ5z7uIU
MZlXmjp+9leXq9RCQjR9O6zj0rWiLBg2y1jgIb4HApiHwDdKazWrwDdWUPauU10h
lPVbAq8SUbCAdgS0FjtUV7/nhdpz2Lu3QfnhdqqcSLkVQ1q5MAJMbXqb2YEiQN32
H9Ndau4d
-----END CERTIFICATE-----
Generated at Wed Jul 17 20:18:46 2024 by rpki-client on console-ams.rpki-client.org