Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/2zFf6UHr5jNPBFjEcsJBf4_-b-k.roa
File: 2zFf6UHr5jNPBFjEcsJBf4_-b-k.roa (raw, json)
Hash identifier: Ff7ozRjuqgnzyd0V+HF8wb/RDp85rASxg17eFZ8Q3aY=
Subject key identifier: DB:31:5F:E9:41:EB:E6:33:4F:04:58:C4:72:C2:41:7F:8F:FE:6F:E9
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 0193CF815F08C8ED0940DCC3D02B7DF06F64
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/2zFf6UHr5jNPBFjEcsJBf4_-b-k.roa
Signing time: Mon 16 Dec 2024 12:46:22 +0000
ROA not before: Mon 16 Dec 2024 12:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 213.165.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 17 Dec 2024 12:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:81:5f:08:c8:ed:09:40:dc:c3:d0:2b:7d:f0:6f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Dec 16 12:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db315fe941ebe6334f0458c472c2417f8ffe6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:f3:06:80:ba:c7:1b:88:70:22:ed:1f:7b:
58:32:ec:2e:35:5a:d1:d1:09:e6:fb:22:08:d6:f6:
6a:bb:fe:8d:f6:b2:52:a5:89:cd:a0:3a:fd:53:bf:
9a:f8:41:6b:87:99:d7:a0:d6:c5:0a:36:58:81:99:
8d:b5:19:08:22:ef:6e:ff:11:4c:4a:4b:48:b5:5d:
5b:b6:92:1f:ce:89:59:4a:aa:03:7e:e4:45:32:3f:
b1:bb:ab:28:0b:f6:9d:d5:19:c1:a2:67:57:54:dc:
c9:1a:ca:bc:fa:82:39:23:7a:a2:8f:65:23:9e:19:
0a:8f:3b:ff:ed:af:f5:8e:a2:48:2b:f4:1f:48:76:
be:fb:85:97:62:b3:fd:d6:2e:5d:a8:0c:34:cb:5d:
93:8d:d8:29:2f:1e:2b:22:4e:3c:e7:c9:53:b5:46:
d7:46:5a:b2:bf:79:12:63:ad:db:57:0d:b7:94:dc:
10:db:69:f8:8f:35:f8:4a:32:82:7f:02:dc:e5:7a:
50:95:86:70:72:91:3f:f0:18:77:33:10:b8:b5:b3:
aa:c5:09:a4:40:fa:42:fd:50:f2:34:bb:0f:f4:2d:
a5:d2:d6:83:f9:3d:55:e4:fb:e0:6d:80:6c:01:3d:
aa:3a:bb:d1:8c:c8:0b:d0:16:14:ce:46:0b:d9:99:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:5F:E9:41:EB:E6:33:4F:04:58:C4:72:C2:41:7F:8F:FE:6F:E9
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/2zFf6UHr5jNPBFjEcsJBf4_-b-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:39:54:cb:b3:54:23:bc:8d:57:0a:70:be:f3:1c:0c:8c:cf:
79:13:f7:6e:7e:dc:49:9f:61:69:25:7c:b4:2e:a3:2d:4a:1c:
b0:00:df:bf:b6:e3:b1:76:77:af:61:18:2a:b2:1f:32:01:1f:
1d:53:cd:32:62:bd:38:bd:34:12:9a:50:27:4d:19:ea:82:2f:
9e:03:cc:48:f7:ed:b5:f1:06:3f:49:ed:85:cb:d5:a6:e4:ef:
33:e9:ce:54:6c:0e:51:55:3b:d5:d8:42:67:24:8b:50:a2:9a:
c2:43:03:98:9c:93:fe:f5:f0:49:c4:27:b0:19:44:8a:53:37:
c3:4a:22:ae:8d:33:8b:ad:8d:f7:58:65:47:82:8e:59:75:3c:
c4:7c:af:98:5c:68:3d:91:8b:fc:9e:a3:3e:c4:df:ff:03:29:
df:5d:63:3b:a3:4f:08:c6:64:92:3e:43:b1:ec:19:fc:f3:f1:
40:87:da:2b:dd:09:c6:5c:e0:a3:da:94:45:7a:5c:ce:8d:6d:
04:b8:ae:9c:d3:9b:54:0c:34:af:b0:0e:7c:26:8a:c8:02:ac:
84:32:38:1d:53:5a:9f:ef:bd:e9:db:83:b8:b5:66:12:dc:7d:
25:eb:90:c9:ba:2b:e9:f1:eb:de:f5:83:ed:1f:9e:10:ee:77:
a5:a7:b3:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPPgV8IyO0JQNzD0Ct98G9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzU5MDRlMjRkYjBlOTkwNDk1YTM0NDVlNzdkMTEzNmVk
NjE4ZDcwHhcNMjQxMjE2MTI0NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjMxNWZlOTQxZWJlNjMzNGYwNDU4YzQ3MmMyNDE3ZjhmZmU2ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq63zBoC6xxuIcCLtH3tYMuwuNVrR
0Qnm+yII1vZqu/6N9rJSpYnNoDr9U7+a+EFrh5nXoNbFCjZYgZmNtRkIIu9u/xFM
SktItV1btpIfzolZSqoDfuRFMj+xu6soC/ad1RnBomdXVNzJGsq8+oI5I3qij2Uj
nhkKjzv/7a/1jqJIK/QfSHa++4WXYrP91i5dqAw0y12TjdgpLx4rIk4858lTtUbX
Rlqyv3kSY63bVw23lNwQ22n4jzX4SjKCfwLc5XpQlYZwcpE/8Bh3MxC4tbOqxQmk
QPpC/VDyNLsP9C2l0taD+T1V5PvgbYBsAT2qOrvRjMgL0BYUzkYL2ZnDfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsxX+lB6+YzTwRYxHLCQX+P/m/pMB8GA1UdIwQY
MBaAFLw1kE4k2w6ZBJWjRF530RNu1hjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRXUVRpVGJEcGtFbGFORVhuZlJFMjdXR05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82MzJkYzAtNGQyZC00MGMyLWFiNjUt
YzM4YjFmOWQ0NTdjLzEvMnpGZjZVSHI1ak5QQkZqRWNzSkJmNF8tYi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82MzJkYzAtNGQyZC00MGMyLWFiNjUtYzM4YjFmOWQ0NTdj
LzEvdkRXUVRpVGJEcGtFbGFORVhuZlJFMjdXR05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1aUwMA0G
CSqGSIb3DQEBCwUAA4IBAQBbOVTLs1QjvI1XCnC+8xwMjM95E/duftxJn2FpJXy0
LqMtShywAN+/tuOxdnevYRgqsh8yAR8dU80yYr04vTQSmlAnTRnqgi+eA8xI9+21
8QY/Se2Fy9Wm5O8z6c5UbA5RVTvV2EJnJItQoprCQwOYnJP+9fBJxCewGUSKUzfD
SiKujTOLrY33WGVHgo5ZdTzEfK+YXGg9kYv8nqM+xN//AynfXWM7o08IxmSSPkOx
7Bn88/FAh9or3QnGXOCj2pRFelzOjW0EuK6c05tUDDSvsA58JorIAqyEMjgdU1qf
773p24O4tWYS3H0l65DJuivp8eve9YPtH54Q7nelp7O3
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:12:04 2025 by rpki-client