Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/zrb0bUzCfDLJxYwXCtkZ0hdNnpU.roa
File: zrb0bUzCfDLJxYwXCtkZ0hdNnpU.roa (raw, json)
Hash identifier: iC6hiP55sndQoTIjCNFVPKGwuzUwGVDv5Pg+kyv6LMM=
Subject key identifier: CE:B6:F4:6D:4C:C2:7C:32:C9:C5:8C:17:0A:D9:19:D2:17:4D:9E:95
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 0193D4B3A20604B5D72725773A3442AEE18E
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/zrb0bUzCfDLJxYwXCtkZ0hdNnpU.roa
Signing time: Tue 17 Dec 2024 12:59:22 +0000
ROA not before: Tue 17 Dec 2024 12:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398704
IP address blocks: 213.165.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:b3:a2:06:04:b5:d7:27:25:77:3a:34:42:ae:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Dec 17 12:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceb6f46d4cc27c32c9c58c170ad919d2174d9e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:28:71:4d:9b:3a:40:63:6c:1e:f1:6f:19:
3a:da:52:d7:85:30:35:76:93:f1:83:11:16:78:b8:
a4:d5:a0:6a:18:38:db:82:7b:77:9b:54:99:5d:54:
f7:31:6d:52:ca:8e:31:f4:61:7b:93:4c:80:01:8d:
0a:76:bc:3f:9d:c5:8a:f8:bc:7e:0e:5e:24:54:ea:
d7:74:d9:9c:e4:7d:b0:3d:13:d3:03:f7:75:bd:72:
65:87:45:05:9f:b3:57:01:e2:10:dd:6e:e1:56:d3:
56:23:e8:bf:49:4a:b9:ab:29:97:0a:6c:43:66:4a:
a6:1c:56:3e:5d:fa:44:28:1f:ba:e8:a9:0a:66:ba:
6d:00:90:50:5d:e2:cd:d0:ef:c0:3e:6f:9d:22:71:
61:d8:02:8a:56:78:37:02:16:e7:67:d7:4d:3f:c3:
ca:9b:20:2b:b3:15:67:4b:f9:dd:21:65:a3:41:f5:
62:03:12:bd:3f:3f:3c:93:f8:0b:6f:4a:2a:8e:0e:
7a:ee:b3:c7:12:45:3e:3b:1d:36:36:b8:a6:a1:6a:
cd:29:0c:a7:58:8d:6a:bd:2f:a8:78:d3:29:22:6d:
2d:bd:ae:6a:c2:ed:dd:bd:5b:30:f6:de:e7:c0:c1:
5f:72:8b:01:7a:da:6e:d5:c2:63:56:f5:6f:a7:a0:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:F4:6D:4C:C2:7C:32:C9:C5:8C:17:0A:D9:19:D2:17:4D:9E:95
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/zrb0bUzCfDLJxYwXCtkZ0hdNnpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.32.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:91:4b:42:c0:2d:0b:9d:3c:97:09:35:bd:ef:4e:cd:28:71:
a5:58:8c:35:c8:9c:ec:fe:ee:1c:18:09:cc:cf:c0:ba:7d:32:
c5:a1:db:df:8b:83:5e:07:ef:d7:9a:33:3b:0f:ae:e5:b4:7c:
21:d8:e2:db:ab:f2:93:90:b4:ce:13:29:57:ae:29:e0:70:30:
5f:7a:12:d0:21:6a:2d:d5:2a:db:50:fc:23:50:8e:9b:3a:64:
7a:1c:a2:9e:16:4e:1b:99:d0:1f:ae:c4:9d:1e:a5:ed:7e:51:
04:d0:5f:01:a5:14:24:28:cb:5b:f1:36:5c:48:4a:e6:0e:41:
a9:10:21:a9:6a:ec:08:c2:52:1d:e0:e1:41:8c:1d:de:3c:9e:
3a:91:81:ba:ec:e2:0a:84:e0:6a:fc:0d:d8:bd:f7:aa:14:7e:
9e:d8:65:9c:c2:e8:fb:1a:76:59:6f:92:b2:d9:6f:01:09:16:
6a:f1:58:6d:39:7e:6b:cd:13:fc:55:d4:97:07:2d:df:fd:bc:
a9:33:07:51:02:15:63:85:68:4a:e0:67:36:1b:fc:f5:c9:b2:
72:f0:5e:dc:b9:a3:91:8e:f7:9b:69:ce:8f:bf:a9:61:26:6f:
b7:0f:b3:37:9f:32:27:e8:9e:92:a5:6b:69:95:7f:48:07:34:
e9:98:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:08 2025 by rpki-client