Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/KZ5DtlTU0qGlZgSzQXwkLAnq90s.roa
File: KZ5DtlTU0qGlZgSzQXwkLAnq90s.roa (raw, json)
Hash identifier: Ru8D27yhUS71rSQR8ht9NGzUkdoysi/OKeIRrqsvJBE=
Subject key identifier: 29:9E:43:B6:54:D4:D2:A1:A5:66:04:B3:41:7C:24:2C:09:EA:F7:4B
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0190C0B1C659E2980430BC3F88818471C55D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/KZ5DtlTU0qGlZgSzQXwkLAnq90s.roa
Signing time: Wed 17 Jul 2024 12:36:34 +0000
ROA not before: Wed 17 Jul 2024 12:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13115
IP address blocks: 213.145.64.0/21 maxlen: 21
213.145.64.0/23 maxlen: 23
213.145.80.0/21 maxlen: 21
213.145.80.0/23 maxlen: 23
2001:41f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Jul 2024 13:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:b1:c6:59:e2:98:04:30:bc:3f:88:81:84:71:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 17 12:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=299e43b654d4d2a1a56604b3417c242c09eaf74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:db:28:21:44:61:54:60:6c:7d:96:8f:d2:
3f:75:26:a7:3c:8e:e6:78:a3:d7:ea:41:d9:58:9e:
63:2d:96:75:5a:41:84:8c:83:77:8f:12:7a:5c:6b:
a5:2b:a0:84:43:74:41:bf:15:c5:8a:84:05:54:a2:
82:e5:a4:c4:21:6f:b5:d6:3c:fb:79:6c:9c:93:d9:
6e:51:b8:c3:3e:6f:a6:23:5f:15:37:90:1c:e5:fa:
bf:30:61:3b:31:69:86:b5:ea:cf:7b:02:05:07:a6:
06:0e:7b:a5:ee:f2:ba:c9:8a:fd:53:4b:9b:43:6f:
d3:1e:23:a8:70:63:82:7b:73:65:aa:7b:2a:4e:7a:
f6:7c:eb:cd:b1:9b:45:24:09:58:23:45:d9:3a:f5:
58:36:bb:f8:7d:ac:19:6c:7a:ae:23:1f:96:eb:18:
01:f5:ef:9a:ce:6d:e2:78:50:3f:b9:af:51:0d:8b:
72:a9:03:d5:33:d0:8f:ee:be:fb:76:46:de:82:26:
ff:26:e5:8b:f2:e4:4e:cc:df:e9:7c:65:0a:01:e8:
30:88:2c:52:1d:16:91:53:93:ba:f2:19:09:05:33:
ff:12:96:1c:80:03:78:5b:33:ee:99:bd:4e:d7:c6:
b6:70:21:6e:c5:85:61:c8:a6:1d:76:83:32:e5:6b:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:43:B6:54:D4:D2:A1:A5:66:04:B3:41:7C:24:2C:09:EA:F7:4B
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/KZ5DtlTU0qGlZgSzQXwkLAnq90s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.64.0/21
213.145.80.0/21
IPv6:
2001:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
aa:6a:44:ff:16:bb:b0:06:e2:ae:ae:79:a0:9e:e5:ef:5f:dd:
a9:33:e2:6e:31:81:b4:94:d5:98:0e:55:39:f3:3f:88:87:96:
e1:bb:59:78:94:55:19:87:0f:87:ec:28:09:ef:17:d3:17:8d:
cb:d5:8f:9e:68:16:bd:66:40:cb:f8:a8:c0:a6:7a:6b:72:87:
4d:23:82:c3:45:9f:c7:7e:83:f9:75:09:04:47:ce:cd:0d:08:
9e:13:98:4e:eb:5c:5b:0f:43:38:e9:12:2f:1a:f8:06:c8:5f:
69:29:42:05:4e:cf:a3:2f:d8:ab:95:b0:45:d4:a9:c5:3e:d5:
b0:53:52:0b:aa:76:c8:b9:0a:46:84:f7:69:c7:5a:44:7b:04:
29:71:c8:5a:7a:b2:28:19:1f:d4:4f:70:b5:39:82:0b:af:9b:
9c:af:ba:25:df:b6:77:7e:5d:ac:82:8a:64:1e:c2:7a:17:00:
bc:44:b0:2c:f1:6d:f9:4e:6b:71:8f:2f:4c:13:60:5a:eb:bc:
14:57:89:de:ae:d0:77:07:dc:7a:10:df:d6:dc:48:54:0d:90:
79:98:b2:bf:c5:e8:b5:a1:7a:df:63:fb:57:3b:59:57:45:8a:
45:2a:da:64:4a:83:89:f3:3c:3f:3a:e6:bc:dc:76:65:7a:ab:
89:53:5c:e3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZDAscZZ4pgEMLw/iIGEccVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQwNzE3MTIzNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTllNDNiNjU0ZDRkMmExYTU2NjA0YjM0MTdjMjQyYzA5ZWFmNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28DbKCFEYVRgbH2Wj9I/dSanPI7m
eKPX6kHZWJ5jLZZ1WkGEjIN3jxJ6XGulK6CEQ3RBvxXFioQFVKKC5aTEIW+11jz7
eWyck9luUbjDPm+mI18VN5Ac5fq/MGE7MWmGterPewIFB6YGDnul7vK6yYr9U0ub
Q2/THiOocGOCe3NlqnsqTnr2fOvNsZtFJAlYI0XZOvVYNrv4fawZbHquIx+W6xgB
9e+azm3ieFA/ua9RDYtyqQPVM9CP7r77dkbegib/JuWL8uROzN/pfGUKAegwiCxS
HRaRU5O68hkJBTP/EpYcgAN4WzPumb1O18a2cCFuxYVhyKYddoMy5WsHDwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCmeQ7ZU1NKhpWYEs0F8JCwJ6vdLMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvS1o1RHRsVFUwcUdsWmdTelFYd2tMQW5xOTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQD1ZFAAwQD
1ZFQMA0EAgACMAcDBQAgAUH4MA0GCSqGSIb3DQEBCwUAA4IBAQCqakT/FruwBuKu
rnmgnuXvX92pM+JuMYG0lNWYDlU58z+Ih5bhu1l4lFUZhw+H7CgJ7xfTF43L1Y+e
aBa9ZkDL+KjApnprcodNI4LDRZ/HfoP5dQkER87NDQieE5hO61xbD0M46RIvGvgG
yF9pKUIFTs+jL9irlbBF1KnFPtWwU1ILqnbIuQpGhPdpx1pEewQpcchaerIoGR/U
T3C1OYILr5ucr7ol37Z3fl2sgopkHsJ6FwC8RLAs8W35Tmtxjy9ME2Ba67wUV4ne
rtB3B9x6EN/W3EhUDZB5mLK/xei1oXrfY/tXO1lXRYpFKtpkSoOJ8zw/Oua83HZl
equJU1zj
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:09:28 2025 by rpki-client