Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/dZE2fpm8e-BLQJ0K49yqivrQzjM.roa
File: dZE2fpm8e-BLQJ0K49yqivrQzjM.roa (raw, json)
Hash identifier: lnGcXBtBhTIQteoSiZbWE4cVHoqyThTB6+2PhRgfSs8=
Subject key identifier: 75:91:36:7E:99:BC:7B:E0:4B:40:9D:0A:E3:DC:AA:8A:FA:D0:CE:33
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 0191F082CA066EE85E84929DC694870BB1EB
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/dZE2fpm8e-BLQJ0K49yqivrQzjM.roa
Signing time: Sat 14 Sep 2024 12:29:48 +0000
ROA not before: Sat 14 Sep 2024 12:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 212.68.172.0/22 maxlen: 22
212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/22 maxlen: 22
212.68.176.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.180.0/22 maxlen: 22
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 08:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f0:82:ca:06:6e:e8:5e:84:92:9d:c6:94:87:0b:b1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Sep 14 12:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7591367e99bc7be04b409d0ae3dcaa8afad0ce33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:38:f9:c4:14:7d:92:02:b1:13:b0:9b:46:
50:89:81:75:15:4a:d2:2c:8b:36:ec:ab:56:cf:b5:
c0:de:51:6e:29:4b:d9:c8:9e:97:6b:54:bd:e0:fa:
f9:e2:2b:dd:3f:1f:94:08:84:e2:a6:35:cc:c7:15:
bd:7c:8f:92:d1:7a:62:ad:34:c6:49:20:2f:3f:a7:
37:bd:c0:4c:9a:d2:44:9d:bb:df:e9:b1:99:2c:97:
80:a5:4a:92:86:b3:c7:c2:dd:dc:d9:d8:14:fe:c6:
07:4c:50:b7:41:56:25:e6:6f:bb:9f:fc:17:de:1a:
0f:08:1c:a8:ae:42:5c:4a:66:86:64:ca:42:ef:f7:
01:48:ff:1a:26:63:c2:83:cd:20:2e:98:2f:4b:3f:
14:a0:50:f3:95:51:c7:20:39:eb:e4:0f:7c:96:76:
66:3c:83:dd:f7:72:04:15:e9:31:5e:11:bb:8b:8b:
3c:9c:e7:90:b6:8f:79:65:d1:3d:2c:a6:f8:97:a9:
eb:a0:36:5e:18:08:0a:48:9d:7d:9d:56:d9:b8:a7:
35:01:26:23:f9:91:6d:b8:dd:0c:8e:8a:63:7c:47:
d1:b8:77:db:df:c5:1d:d5:11:4f:bf:19:4b:83:e6:
dd:8d:b8:28:cf:d3:e8:a4:11:39:f0:c3:a6:66:0f:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:36:7E:99:BC:7B:E0:4B:40:9D:0A:E3:DC:AA:8A:FA:D0:CE:33
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/dZE2fpm8e-BLQJ0K49yqivrQzjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.172.0-212.68.183.255
Signature Algorithm: sha256WithRSAEncryption
17:64:ab:b3:96:03:c8:df:bf:d2:a2:63:0d:76:cb:57:fa:98:
57:28:c2:1f:d1:b6:17:62:2c:02:83:56:96:56:34:f5:73:98:
68:10:3f:1b:a6:0a:fc:eb:29:50:d9:ee:b0:c8:4a:a4:13:41:
04:81:9b:89:71:90:6b:b5:a3:0e:f1:87:e0:93:d6:01:56:d8:
0c:ac:e8:e7:04:2a:ca:0e:e7:15:36:3f:39:5c:00:e0:70:6c:
bb:eb:41:2b:69:20:4a:30:8a:2f:ed:2e:69:e2:4f:76:7a:eb:
cb:40:99:e7:fc:ac:56:4d:65:48:4f:aa:ca:12:31:e6:ad:ee:
6a:d5:46:43:85:51:7a:32:da:09:bb:05:cc:f4:90:41:af:13:
f4:f2:74:ff:00:4b:67:c3:cd:a3:1c:ea:ec:f2:29:23:4d:72:
c4:3a:8c:7c:45:52:45:e9:14:22:cf:63:69:8b:de:b8:45:27:
0d:0e:da:50:e0:ec:b3:fb:87:98:88:bb:fe:5c:83:52:b0:12:
d9:6c:78:f8:3e:7e:4f:99:66:01:a2:7a:30:b5:b3:94:78:19:
6f:4a:5f:5e:6d:10:78:29:45:39:ac:a5:7e:c8:63:44:d6:50:
3c:9d:2c:9b:d2:37:4c:2e:f8:fb:cf:c6:95:25:9f:8b:c4:57:
18:0c:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:34:54 2025 by rpki-client