Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/umN8WrZjVea7JI09TzOWEhRd6mc.roa
File: umN8WrZjVea7JI09TzOWEhRd6mc.roa (raw, json)
Hash identifier: 9bebBeHELd/CIu6swT+fJOEDxLX+khzEU1ODLejc3uU=
Subject key identifier: BA:63:7C:5A:B6:63:55:E6:BB:24:8D:3D:4F:33:96:12:14:5D:EA:67
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 018D7E65C63629B9FA3268035592AAAC7574
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/umN8WrZjVea7JI09TzOWEhRd6mc.roa
Signing time: Tue 06 Feb 2024 12:30:15 +0000
ROA not before: Tue 06 Feb 2024 12:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209838
IP address blocks: 213.170.200.0/23 maxlen: 24
213.170.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:65:c6:36:29:b9:fa:32:68:03:55:92:aa:ac:75:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Feb 6 12:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba637c5ab66355e6bb248d3d4f339612145dea67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:09:04:0b:fc:c6:70:a5:7d:77:7b:c1:66:59:
90:53:14:19:7e:87:e0:8c:f9:3a:77:5a:d7:5a:1e:
49:f6:09:f9:ca:01:f2:87:69:a1:74:73:ba:4d:7a:
a0:36:25:5b:2b:95:d5:34:07:61:ba:b3:90:52:fd:
e9:12:bf:50:ba:a2:f3:49:ff:58:53:34:9c:24:92:
ee:fa:fd:7a:73:f5:a1:d8:97:7f:0c:f2:e4:95:ae:
cc:07:74:b3:30:5e:ef:67:88:47:4b:53:07:49:00:
c2:01:0e:63:9e:7b:4b:79:3e:d0:98:b3:06:86:f0:
ff:62:7e:2c:9e:00:1e:84:13:70:02:c2:cc:55:94:
d1:60:0c:a6:c0:2f:76:18:4d:45:93:44:d3:9c:d1:
7c:0e:6c:5f:2a:df:2b:f6:2f:25:de:89:0f:43:66:
86:92:36:ac:55:05:75:07:ac:41:1a:04:b1:d4:dd:
e3:53:02:16:5c:01:97:43:ff:6d:b2:5c:1c:fe:df:
ba:8b:65:3f:97:d3:62:65:68:03:2a:d5:56:d1:9a:
4a:e5:59:ba:47:99:ab:5f:79:da:68:85:f6:de:ce:
c8:1b:09:f9:07:9c:aa:7e:d3:e8:70:bb:a3:4c:4b:
d6:b6:6b:8c:96:f3:43:ae:17:9b:7e:2a:51:27:17:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:63:7C:5A:B6:63:55:E6:BB:24:8D:3D:4F:33:96:12:14:5D:EA:67
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/umN8WrZjVea7JI09TzOWEhRd6mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.200.0/22
Signature Algorithm: sha256WithRSAEncryption
17:02:2b:5c:f5:65:b0:23:88:6b:8a:37:7b:42:a3:52:65:37:
3a:0c:da:00:d7:4f:6f:b1:fa:56:ee:6a:4e:f3:d6:89:7f:f6:
56:af:e4:68:a2:71:97:2d:8d:07:4e:18:a6:33:ed:85:05:db:
21:61:48:f7:7e:2f:2b:2a:e3:ca:87:ee:a0:c1:5c:aa:1c:93:
01:52:73:be:7b:ff:f7:39:04:92:a6:3e:9c:d6:1f:51:52:d2:
32:0f:61:66:83:24:72:f6:58:c7:26:4a:d3:93:92:9e:63:11:
92:7f:74:9e:fe:7f:18:ba:66:f0:e6:34:cb:dc:6f:e5:56:da:
73:8d:a6:c7:de:76:c6:3a:97:04:d2:1a:c5:6c:7a:43:62:69:
65:10:c1:c0:c9:bb:35:7f:d2:b9:81:2c:5f:41:69:9e:31:14:
ab:8f:0f:29:bc:cc:54:40:d4:cc:bc:95:ad:33:45:b1:d6:14:
48:9e:66:06:44:41:1b:9f:37:ab:2a:1e:43:f7:32:6d:3f:ff:
f1:2f:b1:fe:b7:4a:81:89:d7:21:24:e6:c7:61:f4:ec:86:79:
e5:9c:8a:72:5b:62:cf:70:c2:f8:87:4a:d9:9e:70:1b:28:12:
58:6c:bc:1d:63:2c:38:e5:08:c9:c2:a1:41:dd:da:72:bb:53:
83:55:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:11:35 2025 by rpki-client