Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/Ivl1l_N8pvfY3FRlTbzdcrUn48U.roa
File: Ivl1l_N8pvfY3FRlTbzdcrUn48U.roa (raw, json)
Hash identifier: fakLLgLmYfcNLbB5IGKIUgOWxebVPg+grzbX2kEyemU=
Subject key identifier: 22:F9:75:97:F3:7C:A6:F7:D8:DC:54:65:4D:BC:DD:72:B5:27:E3:C5
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 018E9575BE052CB8AE02D8644461504BBE95
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/Ivl1l_N8pvfY3FRlTbzdcrUn48U.roa
Signing time: Sun 31 Mar 2024 17:01:45 +0000
ROA not before: Sun 31 Mar 2024 17:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50141
IP address blocks: 213.5.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 23 Aug 2024 12:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:75:be:05:2c:b8:ae:02:d8:64:44:61:50:4b:be:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Mar 31 17:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22f97597f37ca6f7d8dc54654dbcdd72b527e3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:bd:ca:7b:24:62:2a:c5:79:06:63:26:0e:
ae:54:1f:85:55:69:18:30:a7:ef:55:42:a3:3f:d6:
5f:99:ce:94:68:97:1c:24:7e:ed:8c:dd:7f:52:83:
45:bc:d1:22:32:dd:03:af:9b:2d:15:24:da:cf:c0:
c7:7f:84:c5:f9:c9:38:7e:21:a3:6c:fd:7e:9a:bb:
a5:3b:43:de:33:91:14:d7:04:f5:0e:57:2b:c2:8b:
22:da:56:68:a7:db:5a:39:e3:39:41:94:5a:53:3f:
84:22:dd:8b:2a:5e:c2:07:49:ae:7b:c9:9d:8a:94:
ee:93:5b:0e:79:29:34:c2:ea:d7:d5:94:a3:85:b9:
1b:8b:0a:be:79:bb:dc:c6:54:b6:63:95:72:f3:bd:
ee:c5:aa:6a:51:aa:a1:ae:0c:ab:2b:cb:e2:34:ee:
18:ed:8f:b5:d4:41:a2:16:6e:fc:7a:df:f0:1b:08:
2b:04:3e:1a:84:15:9a:b5:87:d7:22:e4:42:07:6a:
e3:0d:97:5a:47:65:eb:92:d5:bb:e9:7f:d3:b9:80:
ea:57:79:1f:6e:d0:d5:b4:d2:b1:03:75:0d:bc:33:
57:af:c4:2e:4d:cf:7d:af:ce:27:96:93:14:4d:13:
4d:eb:70:e2:6c:21:47:4b:f1:ef:5b:e1:b3:ca:c8:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:75:97:F3:7C:A6:F7:D8:DC:54:65:4D:BC:DD:72:B5:27:E3:C5
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/Ivl1l_N8pvfY3FRlTbzdcrUn48U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:13:7d:65:6a:fa:fc:8b:7e:ed:47:ee:71:18:13:e5:c0:7e:
35:0a:b4:dc:8a:43:81:b8:ef:06:4b:87:4c:7f:65:41:b4:e2:
a1:8d:98:27:e3:92:56:ea:77:89:8c:96:f1:c2:f3:ab:ef:ab:
9c:55:1e:9d:38:99:2f:b0:40:ef:d5:3b:94:69:4a:65:1e:58:
29:b5:32:07:f9:10:8e:40:b6:5e:c0:e2:b4:3f:97:95:99:65:
4b:90:99:9b:4e:d4:3d:6c:20:e0:af:cc:b6:96:3f:77:47:94:
8d:be:ad:9a:fd:93:65:26:88:b0:f5:7c:44:94:89:23:d0:44:
dd:5f:c1:52:db:87:eb:52:53:48:a9:fd:a6:0f:60:a6:70:15:
ac:4c:24:97:b9:c8:cb:61:cb:13:0e:03:ba:b9:2d:df:33:bc:
e4:3d:0b:a7:ff:ad:21:ff:16:6a:2f:dc:a5:a9:0d:6d:b2:45:
d1:c3:6d:2c:e5:dc:b9:3f:0f:be:17:45:1a:b6:ac:3f:70:9c:
a1:8e:e5:8d:49:a8:5c:dc:f7:36:43:57:5c:79:fd:33:ae:90:
b0:00:a2:db:87:e3:f7:fa:5e:fd:83:05:e4:9b:61:e7:79:fb:
d1:df:48:59:5a:26:db:9e:ed:9c:3d:6f:1c:ea:c6:90:30:ee:
c7:d2:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:19 2025 by rpki-client