Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/1gnZz2VCx7uiYM6ZzqZra-DZk-k.roa
File: 1gnZz2VCx7uiYM6ZzqZra-DZk-k.roa (raw, json)
Hash identifier: FSS9e8I+WpJOSDhgu9ra1kXMA4O/ARJIXAuTYBX2JwQ=
Subject key identifier: D6:09:D9:CF:65:42:C7:BB:A2:60:CE:99:CE:A6:6B:6B:E0:D9:93:E9
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 01963E5EEBD96435308E081BD291475F4393
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/1gnZz2VCx7uiYM6ZzqZra-DZk-k.roa
Signing time: Wed 16 Apr 2025 11:32:10 +0000
ROA not before: Wed 16 Apr 2025 11:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 213.146.6.0/24 maxlen: 24
213.146.8.0/24 maxlen: 24
213.146.9.0/24 maxlen: 24
213.146.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 11:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:5e:eb:d9:64:35:30:8e:08:1b:d2:91:47:5f:43:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Apr 16 11:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d609d9cf6542c7bba260ce99cea66b6be0d993e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:ba:97:a0:f4:c2:6e:85:e5:bc:16:85:18:
5d:85:05:af:41:9d:1d:f9:02:b7:88:18:9e:cd:33:
a2:82:6a:d0:34:8c:4e:92:f8:54:39:7b:02:d1:c4:
d8:19:55:9a:8f:76:8d:25:cd:7d:3c:cf:a9:ab:bf:
b2:58:c2:25:8f:af:f0:b3:90:40:7e:e0:a7:b4:7d:
a7:22:35:d4:db:cb:4f:37:2f:15:25:a1:f1:72:d1:
79:fc:e9:3e:7b:15:83:fc:15:63:75:6b:1a:c6:f1:
37:86:8c:a1:20:48:ea:f0:ae:98:bc:a0:9e:18:cf:
69:f5:63:ae:e2:03:27:01:4f:a9:27:05:19:12:d3:
66:28:b5:9c:f2:17:27:7c:b4:bd:63:12:e3:1b:2c:
2e:ee:e0:2a:9a:a0:2c:85:e7:62:28:ea:30:3a:99:
fc:38:1b:15:ea:6b:e8:ee:ab:26:9d:10:4b:1c:33:
25:8b:b3:24:40:e9:4c:5d:54:95:e2:a6:51:85:39:
e9:1a:04:d9:80:fd:fb:b9:be:26:c3:ec:9e:ad:11:
33:76:69:ef:73:af:fd:35:38:0f:85:18:61:be:c2:
d6:2c:2c:80:da:95:4f:ce:46:dd:9f:98:4e:28:03:
31:9e:91:bb:1b:64:cb:ec:64:8d:8c:9c:e4:7d:65:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:D9:CF:65:42:C7:BB:A2:60:CE:99:CE:A6:6B:6B:E0:D9:93:E9
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/1gnZz2VCx7uiYM6ZzqZra-DZk-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.146.6.0/24
213.146.8.0/23
213.146.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a4:11:22:85:53:7e:1c:72:cb:3a:45:6d:c4:ef:82:11:84:
b9:ff:10:3e:88:19:ff:3d:91:6d:e6:83:50:27:f7:e6:42:8e:
01:7c:90:fd:3a:a1:f4:b3:72:57:72:3f:54:61:c6:1b:02:6e:
ac:a0:e0:8a:45:41:5c:58:25:e6:9d:35:a4:88:c5:0d:8d:8c:
2c:65:31:75:af:51:9e:98:47:34:24:17:f0:cd:1c:d0:ec:af:
79:57:4f:ec:0a:0f:ab:ed:f0:e2:f5:4e:66:41:ea:cd:dc:1b:
b4:4a:f7:3f:13:0d:0a:37:65:ee:d0:c3:05:e7:bb:5c:26:59:
3b:91:ad:ca:fb:64:86:4c:a4:71:64:4a:14:ab:f4:c3:24:d3:
b9:4b:76:c8:47:59:e6:0b:e8:9f:ad:f8:a6:72:3e:e0:40:06:
0c:80:3a:b9:73:bc:de:ae:29:ed:da:92:61:e7:d6:43:28:02:
da:7b:92:7d:3b:60:27:b7:9d:74:d8:78:7c:6e:b5:03:b7:c8:
53:5b:fc:bd:3a:97:14:e2:58:e6:73:22:28:51:6f:2b:06:58:
f9:a1:f3:04:db:66:05:12:c2:89:ef:d6:a2:35:14:ab:be:c3:
30:38:ec:06:82:53:d5:83:24:fa:c6:a6:ca:ae:0a:13:35:79:
1e:04:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:41:57 2025 by rpki-client