Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cRu3S0lQfcTOXrMZrJKzYUCKX_c.roa
File: cRu3S0lQfcTOXrMZrJKzYUCKX_c.roa (raw, json)
Hash identifier: DqErC1GzoGTSiIarpOIXOkG9FHg6Z5JyD5+nan1rlUc=
Subject key identifier: 71:1B:B7:4B:49:50:7D:C4:CE:5E:B3:19:AC:92:B3:61:40:8A:5F:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B5B699B2794E56782768D14808428BD7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cRu3S0lQfcTOXrMZrJKzYUCKX_c.roa
Signing time: Wed 11 Dec 2024 12:34:23 +0000
ROA not before: Wed 11 Dec 2024 12:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215479
IP address blocks: 178.215.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Dec 2024 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:b6:99:b2:79:4e:56:78:27:68:d1:48:08:42:8b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 12:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=711bb74b49507dc4ce5eb319ac92b361408a5ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:38:f8:56:80:a9:2c:e4:64:17:f0:66:43:
eb:7d:a4:b1:54:65:9b:b0:b0:ef:1b:2e:04:fa:aa:
f7:ef:1f:21:68:70:78:46:8d:69:4c:fc:dd:68:e2:
14:03:50:54:ff:fd:30:8c:42:8b:b8:1b:2c:f8:9d:
a0:4b:66:f3:ce:e2:c4:6e:17:6d:64:bc:94:a9:ba:
8f:04:46:5a:8a:fe:26:29:26:b4:89:9e:2b:38:9b:
17:9f:45:08:e4:f8:fe:85:8e:59:d6:53:32:19:08:
a5:3e:7a:fd:6f:04:c1:4b:03:bf:e4:b5:b1:9b:70:
36:df:6e:64:b9:9d:a8:59:65:e8:4c:9c:d2:13:7d:
76:59:6f:5a:40:b0:86:a1:40:46:b1:c6:78:c7:4f:
f8:64:6f:30:92:88:fc:bc:f7:ca:27:1d:5d:ce:75:
3b:8d:b8:f0:18:68:75:2b:20:5d:ef:46:81:34:04:
36:32:6c:c8:90:fc:7c:46:b5:36:c3:71:3e:db:57:
93:f6:ff:2e:d1:1e:43:38:33:a1:c4:b9:9c:80:d3:
9a:1d:67:88:04:92:bc:d4:8c:33:bb:39:a1:f7:47:
60:84:eb:3d:29:a2:d0:8c:e9:32:0b:74:85:6d:a5:
f3:76:23:c1:4a:cf:66:f3:80:63:f9:00:5d:7f:15:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1B:B7:4B:49:50:7D:C4:CE:5E:B3:19:AC:92:B3:61:40:8A:5F:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cRu3S0lQfcTOXrMZrJKzYUCKX_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.238.0/24
Signature Algorithm: sha256WithRSAEncryption
66:36:3f:0f:4d:93:09:c2:26:e0:56:46:09:a6:39:c9:cc:fa:
50:dc:ef:2f:5e:0f:21:85:fe:a1:02:f3:02:ea:c2:8c:a1:d3:
6e:3d:9a:97:86:85:9e:a6:4d:78:bc:e7:06:72:7c:f9:d1:e0:
6d:f2:30:1f:bd:6b:23:46:a5:49:ae:d0:d0:85:a8:4f:d8:81:
35:86:57:5b:35:ff:aa:3e:e5:df:48:c3:2d:0f:c8:54:5a:22:
c5:d5:0d:df:5d:8a:7c:8a:f4:9b:5d:99:ab:6a:aa:55:45:8b:
42:ea:2f:28:83:be:8a:a7:6e:9e:29:d5:ee:f8:b9:87:6e:1e:
8f:6c:8f:8c:cd:92:d8:c0:bf:55:51:b3:da:65:ca:6c:1f:17:
93:2d:b7:8e:54:73:0d:4f:d1:f4:d5:f4:71:49:59:fe:2d:0d:
10:17:c3:2b:d3:c9:5d:cd:25:21:58:17:5c:da:be:ff:21:f3:
53:f2:15:9c:49:b6:df:7e:65:de:35:d7:84:25:d7:c0:33:d0:
03:eb:8b:91:c0:c4:d6:ca:a1:f2:8d:93:e0:cf:82:3d:bd:48:
59:e0:31:2f:1b:fd:2d:eb:c3:18:79:d7:19:a6:99:46:dd:01:
fa:ef:65:a8:86:d9:46:76:9f:18:6e:d3:a5:fd:50:27:5d:c3:
d1:82:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:19 2025 by rpki-client