Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/rmJ4xoVmjX3yf3gKzoL6vR5e0wA.roa
File: rmJ4xoVmjX3yf3gKzoL6vR5e0wA.roa (raw, json)
Hash identifier: ZviSZP0A8zIyxT4Q4b02hnABeUVCtDqgGxPZD6+v1PE=
Subject key identifier: AE:62:78:C6:85:66:8D:7D:F2:7F:78:0A:CE:82:FA:BD:1E:5E:D3:00
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 0191F4EC8D9B79371683ED7C8DC4F993101F
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/rmJ4xoVmjX3yf3gKzoL6vR5e0wA.roa
Signing time: Sun 15 Sep 2024 09:03:49 +0000
ROA not before: Sun 15 Sep 2024 09:03:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204126
IP address blocks: 178.213.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f4:ec:8d:9b:79:37:16:83:ed:7c:8d:c4:f9:93:10:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Sep 15 09:03:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae6278c685668d7df27f780ace82fabd1e5ed300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:a3:0c:d7:da:62:99:14:ee:88:65:39:56:
2d:ac:bb:e3:fa:a5:a0:87:1a:4d:18:1c:df:ef:a8:
65:00:80:f2:88:40:3e:e3:a2:33:fb:e0:3a:63:c7:
4c:74:da:08:33:60:ae:74:65:c6:cd:3b:be:0c:10:
5e:2c:68:85:d9:04:9f:60:71:b1:ae:1d:d3:fe:c9:
f0:73:5f:82:74:9e:e9:81:d6:cc:19:c9:68:5c:24:
a0:f8:45:c2:90:dd:54:2b:78:15:84:f6:f5:19:68:
84:4a:64:db:f3:6c:a4:89:4e:ea:2a:24:d5:af:b8:
bd:e7:23:9f:38:80:67:97:8b:90:69:df:84:13:e3:
4c:21:25:b7:fc:56:44:28:2b:4f:5c:f5:c7:c2:78:
a0:37:bf:29:a1:0d:48:a3:a9:a2:a9:e4:10:a5:95:
20:4b:80:ae:6c:73:23:d5:04:0b:7f:83:40:d2:76:
8a:76:e8:d0:4b:6f:f6:17:ea:58:55:5a:58:1f:0c:
b3:bc:e2:57:51:52:de:4d:71:ba:80:3e:3c:5b:9f:
f7:fe:95:6c:fa:ae:e9:e7:b9:39:dd:a3:0f:78:91:
a8:ff:a3:ae:fe:0d:8e:3b:6b:03:37:24:69:a4:61:
e4:7b:90:73:99:5e:46:10:b4:b3:1f:80:52:0f:de:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:78:C6:85:66:8D:7D:F2:7F:78:0A:CE:82:FA:BD:1E:5E:D3:00
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/rmJ4xoVmjX3yf3gKzoL6vR5e0wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:55:81:88:f6:0b:17:11:f0:52:31:d0:01:e3:15:d0:9f:85:
90:f2:70:27:cd:72:63:2c:29:4b:7c:38:36:6e:8d:1c:cb:63:
e9:8a:fb:6f:3d:11:33:bb:ef:c4:54:44:a5:ae:e7:27:ca:33:
af:12:8d:3b:55:d3:16:2e:2b:ab:1a:ab:89:f9:64:05:b4:9f:
3f:b0:c0:84:90:8f:f5:f9:d7:57:06:47:a5:d5:c1:b1:5f:eb:
c9:a8:23:d6:a2:bb:08:7f:a0:66:16:9e:4e:60:b1:e9:6e:f8:
2c:21:03:18:a8:b5:4a:66:3f:22:08:73:d0:30:fc:34:d8:e5:
36:fe:0b:77:0f:b8:8a:d2:e4:59:e8:e8:8a:f0:a3:6e:93:8c:
03:7c:8e:76:50:75:fd:84:07:ad:38:9f:9f:40:d3:3d:4b:f3:
78:3d:58:d8:6f:f0:a4:ec:a1:b6:dc:53:18:be:5a:8b:69:62:
fa:e3:b4:d2:bf:13:82:d0:f0:44:51:15:a1:9f:5e:06:f7:18:
02:6e:8d:90:63:30:7d:11:bd:55:2a:df:a6:99:a5:6d:86:2c:
c5:ba:67:03:fa:79:77:9f:55:e7:c2:8f:9a:8d:01:c2:ef:4d:
82:68:47:15:dc:c8:08:99:e7:82:f0:cf:d3:8a:ae:77:a1:4c:
e6:f8:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:26:03 2025 by rpki-client