Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/iqMXOYd-T5repqniYyepQU3FOhE.roa
File: iqMXOYd-T5repqniYyepQU3FOhE.roa (raw, json)
Hash identifier: stdhFmijk6NZ+dERlM4PcifFJXfLABQUeBx03S8mM8o=
Subject key identifier: 8A:A3:17:39:87:7E:4F:9A:DE:A6:A9:E2:63:27:A9:41:4D:C5:3A:11
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019012402F7180F36620AB183678E18A8E19
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/iqMXOYd-T5repqniYyepQU3FOhE.roa
Signing time: Thu 13 Jun 2024 15:38:34 +0000
ROA not before: Thu 13 Jun 2024 15:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48024
IP address blocks: 178.173.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 00:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:40:2f:71:80:f3:66:20:ab:18:36:78:e1:8a:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 13 15:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aa31739877e4f9adea6a9e26327a9414dc53a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:97:2a:2a:17:d0:ba:a6:b9:bb:1a:df:a0:
a3:ea:63:f2:cf:92:5a:dc:c1:4c:38:6f:6a:a4:df:
3b:01:5b:c5:2e:af:1d:c9:2c:fa:e9:b4:e4:dd:30:
4d:43:48:f6:e5:4c:d4:50:ff:38:c1:76:43:3a:8f:
a5:42:99:0d:21:c3:ec:f1:a3:7c:57:df:3f:cb:07:
a4:aa:79:e1:f2:49:dd:4e:63:8f:29:d3:aa:96:c9:
14:65:3d:62:f3:f8:71:b5:3a:75:c8:77:6b:5c:82:
fb:4d:03:e2:13:d4:1c:d3:fd:1a:3b:ac:31:ea:02:
bf:77:17:0f:62:67:c7:70:4d:bd:92:94:a5:97:c6:
9f:44:22:b6:ca:de:c8:37:ec:3a:d2:ec:c6:09:e0:
ca:ba:2c:a3:fe:62:89:9f:2e:85:88:bb:b1:1c:a1:
fe:e0:d4:b1:a4:1c:48:df:1c:80:3c:ce:f9:f8:19:
65:c9:f4:72:2e:21:86:20:db:33:08:97:42:90:39:
10:91:95:d9:ae:7d:cc:21:71:8e:a8:cf:81:66:6d:
7f:60:4c:2d:c7:c1:14:3d:77:c7:97:db:b2:b0:2e:
59:3a:8c:9b:c6:49:19:e6:6e:56:52:3b:49:a3:9c:
fe:55:2d:78:37:fb:56:ac:e1:59:b6:f8:2d:1f:1f:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:17:39:87:7E:4F:9A:DE:A6:A9:E2:63:27:A9:41:4D:C5:3A:11
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/iqMXOYd-T5repqniYyepQU3FOhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.224.0/19
Signature Algorithm: sha256WithRSAEncryption
82:69:3c:bd:4b:3b:7f:45:83:96:ed:80:b9:48:79:2b:74:71:
21:ba:90:10:96:e5:8d:a1:40:b3:5b:71:52:45:3b:7f:d4:db:
5b:cd:0a:8e:c6:55:0a:df:81:ba:df:ac:50:c4:c0:d4:ce:d2:
b8:78:92:d5:d2:61:48:36:ab:68:cd:ff:10:f9:58:e0:b2:5f:
0f:1a:89:55:2f:2d:89:6f:1e:9f:93:23:43:e2:e5:a7:61:6a:
61:cb:68:f1:9f:76:30:27:2c:25:68:e9:01:63:22:e7:05:ee:
65:55:57:bc:39:a0:91:5c:8a:96:e3:bf:c9:ad:a3:70:b7:54:
54:cb:40:b7:2b:ea:a5:ce:5a:be:45:e6:b6:b2:c7:63:3c:89:
ff:9e:fe:af:84:b0:88:16:32:3a:22:a0:25:29:08:93:a1:90:
b2:12:e1:76:04:92:6d:b6:5d:51:7f:03:0e:09:2b:7d:c3:ce:
30:40:39:0e:67:a8:cf:cd:9f:92:18:f5:90:2c:a5:58:fe:3e:
90:77:9a:29:64:dd:f1:b2:1a:78:8e:9e:37:59:99:5e:a5:36:
4d:e0:7c:c7:51:0e:8a:a6:78:ff:a0:8b:ea:03:3e:02:56:47:
82:1f:26:40:32:e1:06:c1:ec:7a:29:c1:a5:76:cd:29:ae:a3:
62:f5:29:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:18 2025 by rpki-client