Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1tHKsOln33-nOUfRE6l3pVxIqig.roa
File: 1tHKsOln33-nOUfRE6l3pVxIqig.roa (raw, json)
Hash identifier: pLPYBGJhdzNA7yumoHpmVJNtxjZOITJ5zrhEqKg+F/g=
Subject key identifier: D6:D1:CA:B0:E9:67:DF:7F:A7:39:47:D1:13:A9:77:A5:5C:48:AA:28
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01920536C64A40B527FB665EABA12217D7A3
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1tHKsOln33-nOUfRE6l3pVxIqig.roa
Signing time: Wed 18 Sep 2024 12:58:48 +0000
ROA not before: Wed 18 Sep 2024 12:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214167
IP address blocks: 147.78.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:36:c6:4a:40:b5:27:fb:66:5e:ab:a1:22:17:d7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Sep 18 12:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6d1cab0e967df7fa73947d113a977a55c48aa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:c8:0a:c8:36:48:92:33:5f:2a:7b:9e:e5:
1b:2b:8c:0b:69:bd:c6:62:fe:71:a7:cc:bf:ec:c5:
49:bc:1a:ae:99:88:b6:76:24:3a:b7:25:52:75:f1:
b7:b6:bd:36:d2:8a:0f:aa:11:5d:d4:1c:f1:8f:b8:
ed:fd:22:77:b2:d4:36:d8:e4:8e:f8:65:3d:45:83:
2d:54:e0:83:b2:84:85:e4:f7:97:26:fd:06:ad:12:
b7:24:96:9a:3c:5c:41:2f:31:6a:a9:01:64:57:0d:
a0:2c:8f:ac:df:56:37:a1:ef:fd:e2:32:d9:43:34:
a0:a7:49:80:b2:82:a9:bc:82:fb:3e:5a:51:1a:32:
db:8c:1f:d5:da:2d:95:2d:6c:5e:92:61:9d:4f:83:
9b:4c:d7:5b:8e:27:cf:42:e8:73:28:a8:f2:b0:ed:
55:ec:2a:09:9c:a3:3c:2a:fc:e2:20:ae:3c:98:3c:
f8:9c:36:d1:92:57:b2:fd:f4:d8:18:d3:b8:16:d5:
b7:07:53:7b:31:f0:9d:35:6b:ed:7b:ae:ae:00:11:
db:8a:aa:96:99:f9:6b:85:7a:5c:3d:79:3f:85:b8:
da:e2:de:dd:98:2a:0e:ba:6a:2a:b3:f7:d5:c6:78:
2d:ac:c2:45:37:33:1b:a5:e3:10:ee:0e:fb:45:55:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D1:CA:B0:E9:67:DF:7F:A7:39:47:D1:13:A9:77:A5:5C:48:AA:28
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1tHKsOln33-nOUfRE6l3pVxIqig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:01:87:b0:db:91:b1:fa:76:10:78:78:dd:8d:2e:2e:6e:cf:
fb:69:81:a7:ee:4d:37:cd:42:08:13:e2:6e:a9:33:a9:b2:af:
b6:d3:09:8b:38:5a:9d:45:42:b1:9a:09:b7:71:9a:0f:db:36:
e4:af:52:6f:93:55:99:13:9e:8c:a8:b4:8c:fa:4f:98:70:9e:
26:2e:d8:4a:86:29:87:90:aa:33:ff:09:74:11:0e:92:25:0c:
ce:1d:4d:60:d9:0a:01:54:b5:6a:df:a9:8b:00:da:71:d0:f0:
ce:9a:1f:5b:2a:fa:5b:b7:5b:d5:3e:09:99:83:6e:e3:97:c2:
25:0b:90:3c:1b:ab:f1:c2:ef:f0:71:a4:96:8b:3b:f6:b8:43:
f6:aa:65:0d:86:a7:7c:19:eb:64:76:18:94:c4:c4:fb:dc:b9:
9e:a2:5c:e3:da:db:ed:db:89:e7:50:94:73:f2:c1:8b:f0:5e:
ef:dd:11:7b:4c:2d:b3:cf:dd:b4:31:4e:1e:d0:6d:67:bd:16:
b2:0d:e7:21:3b:44:29:df:46:c6:d1:75:29:7f:5d:bd:3c:8e:
cd:50:ee:70:eb:7e:5b:7c:e4:5e:85:e4:fa:9f:7c:78:d1:59:
97:8f:be:af:79:08:07:eb:d3:94:49:78:de:76:43:db:54:0b:
ae:4f:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:48:52 2025 by rpki-client