Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/m3nggmQdfwVB5i4RqKUWcjxfFL8.roa
File: m3nggmQdfwVB5i4RqKUWcjxfFL8.roa (raw, json)
Hash identifier: t5yn2z9v4+6b7IzohVxFkMNqUlnEiLNbpa4jII1kuGM=
Subject key identifier: 9B:79:E0:82:64:1D:7F:05:41:E6:2E:11:A8:A5:16:72:3C:5F:14:BF
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 01921DA200343320646E3697C3E28E2A949C
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/m3nggmQdfwVB5i4RqKUWcjxfFL8.roa
Signing time: Mon 23 Sep 2024 06:46:48 +0000
ROA not before: Mon 23 Sep 2024 06:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.190.14.0/24 maxlen: 24
213.190.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 19:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:a2:00:34:33:20:64:6e:36:97:c3:e2:8e:2a:94:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Sep 23 06:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b79e082641d7f0541e62e11a8a516723c5f14bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:3b:ed:ed:d9:b6:1e:35:72:8c:06:6e:8c:
2d:65:f6:27:f8:cf:df:23:8b:e9:69:99:d7:91:b6:
4e:1a:df:aa:84:39:1b:03:3f:d4:9c:f8:72:c4:28:
83:d4:72:01:57:dd:81:44:98:3c:60:c4:ce:e3:30:
91:ed:f7:cb:ab:76:09:04:c4:b2:5f:8a:27:c7:b9:
e8:ba:3d:8d:da:c3:8d:f1:7a:c1:21:60:f0:4d:7f:
1d:08:31:61:13:13:5a:43:9d:e1:b4:22:62:08:f8:
ed:9c:28:9b:13:80:28:1d:cb:29:69:8b:8e:7e:06:
62:86:5f:0e:81:c2:76:f6:5d:5e:19:42:2c:d3:44:
05:8e:a3:96:f6:51:7e:d7:aa:4f:ac:9c:57:af:a3:
58:ff:42:01:69:f0:26:8e:3b:0b:b1:e4:50:b7:52:
d4:f6:c7:0c:b0:fb:fb:df:13:df:73:a8:ff:d7:a0:
2d:9b:76:e9:5a:28:0a:1c:b7:7e:c9:b7:41:84:2a:
56:6d:d1:a5:13:4d:25:68:64:4d:a6:9d:52:c5:a0:
d2:f0:f1:62:d8:54:d2:cc:66:b0:24:a9:cc:33:7f:
80:e3:8d:22:91:d0:25:34:9c:2a:91:7f:3a:76:9d:
c7:f9:fb:6c:49:59:44:8c:fd:e7:20:c7:98:e8:c0:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:E0:82:64:1D:7F:05:41:E6:2E:11:A8:A5:16:72:3C:5F:14:BF
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/m3nggmQdfwVB5i4RqKUWcjxfFL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.14.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:1a:39:0c:c9:d1:52:3d:44:27:f1:45:cc:c5:e2:c5:11:1a:
b5:f8:e9:17:58:8b:93:4f:4f:17:0d:ae:28:39:db:cb:4e:92:
56:91:22:53:b9:2d:96:21:67:38:41:39:f3:ca:09:4e:2f:a3:
65:5c:ef:cb:4f:84:58:00:1d:d0:bf:d5:34:4c:c8:26:05:c9:
6e:eb:9d:b2:dc:9c:cc:1b:af:75:f6:7f:ba:c1:db:4f:be:47:
c6:ec:fa:da:a9:7e:1f:ee:b8:67:47:9f:44:c3:b4:e1:09:e9:
bc:d0:d2:6e:cf:a0:74:67:69:89:cc:24:26:70:00:89:14:aa:
38:b9:e1:49:6a:aa:d3:f9:ac:db:80:b2:23:34:8e:cf:0b:1b:
20:27:5e:81:a8:6b:49:a8:55:67:31:e9:61:55:87:8f:20:cb:
01:e9:05:fb:23:a5:5b:b7:5b:b0:aa:4a:22:43:12:94:d7:44:
cb:a8:d7:c6:13:fa:e6:de:8b:8a:59:6a:7f:53:5e:dd:17:e8:
33:98:33:74:cd:3d:2b:3d:9c:3a:c8:59:a1:7b:0a:69:0f:d9:
40:22:58:77:38:ec:18:79:b9:8c:89:f2:60:f2:c6:43:56:ee:
1e:f0:a8:29:84:52:33:d3:71:a1:6a:fb:95:c2:77:96:71:98:
3b:b0:98:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIdogA0MyBkbjaXw+KOKpScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlhMTc3YmI1ZGZiNmVhYmU0Y2FkNzlkZWY4ZjhiMDA1
ZGY2NTYwHhcNMjQwOTIzMDY0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjc5ZTA4MjY0MWQ3ZjA1NDFlNjJlMTFhOGE1MTY3MjNjNWYxNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7o77e3Zth41cowGbowtZfYn+M/f
I4vpaZnXkbZOGt+qhDkbAz/UnPhyxCiD1HIBV92BRJg8YMTO4zCR7ffLq3YJBMSy
X4onx7nouj2N2sON8XrBIWDwTX8dCDFhExNaQ53htCJiCPjtnCibE4AoHcspaYuO
fgZihl8OgcJ29l1eGUIs00QFjqOW9lF+16pPrJxXr6NY/0IBafAmjjsLseRQt1LU
9scMsPv73xPfc6j/16Atm3bpWigKHLd+ybdBhCpWbdGlE00laGRNpp1SxaDS8PFi
2FTSzGawJKnMM3+A440ikdAlNJwqkX86dp3H+ftsSVlEjP3nIMeY6MCjVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJt54IJkHX8FQeYuEailFnI8XxS/MB8GA1UdIwQY
MBaAFDvZoXe7Xftuq+TK153vj4sAXfZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUt
ZTM4MDMwYjY5ZDVhLzEvbTNuZ2dtUWRmd1ZCNWk0UnFLVVdjanhmRkw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUtZTM4MDMwYjY5ZDVh
LzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1b4OMA0G
CSqGSIb3DQEBCwUAA4IBAQCyGjkMydFSPUQn8UXMxeLFERq1+OkXWIuTT08XDa4o
OdvLTpJWkSJTuS2WIWc4QTnzyglOL6NlXO/LT4RYAB3Qv9U0TMgmBclu652y3JzM
G6919n+6wdtPvkfG7PraqX4f7rhnR59Ew7ThCem80NJuz6B0Z2mJzCQmcACJFKo4
ueFJaqrT+azbgLIjNI7PCxsgJ16BqGtJqFVnMelhVYePIMsB6QX7I6Vbt1uwqkoi
QxKU10TLqNfGE/rm3ouKWWp/U17dF+gzmDN0zT0rPZw6yFmhewppD9lAIlh3OOwY
ebmMifJg8sZDVu4e8KgphFIz03GhavuVwneWcZg7sJiC
-----END CERTIFICATE-----
Generated at Mon May 5 06:29:32 2025 by rpki-client