Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/K7RZ2GnwumPw2zdSRUjCW6M7jxc.roa
File: K7RZ2GnwumPw2zdSRUjCW6M7jxc.roa (raw, json)
Hash identifier: NjrKbjdpjBL08a3TsRFgDB7hXW2JTQ15mks/6mkl/pQ=
Subject key identifier: 2B:B4:59:D8:69:F0:BA:63:F0:DB:37:52:45:48:C2:5B:A3:3B:8F:17
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9686020D5A29942CE08FB9D18923671
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/K7RZ2GnwumPw2zdSRUjCW6M7jxc.roa
Signing time: Mon 08 Jan 2024 14:09:40 +0000
ROA not before: Mon 08 Jan 2024 14:09:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 217.113.51.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.49.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
217.144.50.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
213.181.205.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.200.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 14:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:68:60:20:d5:a2:99:42:ce:08:fb:9d:18:92:36:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 14:09:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb459d869f0ba63f0db37524548c25ba33b8f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:c9:d7:ba:a4:05:f3:25:20:e1:55:57:2a:
7a:e1:08:f5:45:ad:36:84:83:39:50:0a:4f:2f:2a:
60:37:48:3e:20:a7:6d:b2:80:0a:de:e9:90:25:0b:
cc:5a:d9:cd:9e:33:f0:95:27:37:ad:b9:2c:6e:cc:
48:1d:32:11:71:07:c2:02:d6:50:cf:18:2f:08:eb:
9d:25:e6:97:05:a3:fd:1c:3c:91:97:18:32:aa:37:
3a:6d:89:ee:81:e1:f4:a8:f1:90:4c:62:0c:9f:11:
44:1b:f9:48:f7:46:b4:5a:db:39:0c:ca:32:48:55:
5f:76:90:66:62:66:68:a4:38:21:91:9b:66:f5:0c:
51:c0:ea:25:a9:5a:3e:eb:94:c9:53:6c:0d:50:18:
0f:b3:b6:f0:9c:2b:36:cd:a6:08:90:b0:be:42:24:
33:78:7a:ed:cb:a5:31:b1:c4:db:d1:6c:bb:46:e8:
fc:db:4b:c2:bf:77:24:4b:bd:e2:1c:6f:b2:55:2b:
9b:3c:16:38:41:9e:e8:1e:24:22:01:a1:ac:3b:c5:
33:e2:6e:87:86:d8:d5:0f:93:7a:04:09:c7:f5:79:
eb:ff:1c:7c:f2:70:ef:e9:df:41:9c:56:6d:1b:68:
5b:2a:d0:dd:91:b5:7a:08:5c:af:b3:9d:61:18:b0:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:59:D8:69:F0:BA:63:F0:DB:37:52:45:48:C2:5B:A3:3B:8F:17
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/K7RZ2GnwumPw2zdSRUjCW6M7jxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.11.0/24
84.21.15.0-84.21.16.255
84.21.18.0/23
87.229.54.0/24
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
217.113.49.0-217.113.51.255
217.113.53.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
Signature Algorithm: sha256WithRSAEncryption
81:5c:4d:30:15:8a:54:83:a5:7e:b1:a2:7a:ed:37:39:36:ff:
57:11:e6:30:50:b1:f3:65:ef:2b:31:8b:73:74:c6:c4:f0:c8:
30:d0:56:c0:41:02:41:7e:7f:80:93:84:0f:31:f1:35:e9:d2:
ed:22:8d:90:5e:12:bf:5e:ea:ae:67:ba:83:f1:5d:88:d2:31:
08:75:2e:d8:a2:d4:e0:77:05:6e:f8:ee:36:0a:c5:de:16:b8:
4b:2b:e5:5b:d5:94:b4:82:88:73:3d:c8:a8:a3:29:32:84:ef:
71:ba:db:a9:98:13:85:8f:5d:8f:11:f7:aa:aa:49:05:b2:03:
fa:8d:dd:33:2b:8c:4e:a7:be:b8:20:b7:e4:bc:ba:48:ac:6e:
4a:52:55:4f:1f:cc:ce:7e:de:75:11:41:14:40:a9:a2:d1:65:
6a:8d:a4:a2:3d:98:ac:ab:f9:cb:43:b8:41:4c:04:7b:27:52:
ab:d1:5e:89:3c:ed:d8:00:c8:94:ff:63:f4:a6:d7:1a:c1:20:
6a:8b:80:df:8c:98:f9:5d:63:46:b0:32:d5:87:df:e3:54:42:
96:89:ff:3d:ca:e2:d0:1f:37:e9:09:fd:9a:f2:3b:d0:11:58:
3e:f3:61:ea:f4:db:8c:6e:f9:6f:ac:d2:a4:9e:8f:39:59:41:
bc:62:de:68
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 8 18:04:54 2024 by rpki-client on console.sobornost.net