Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iZrHtdZCEThgjKG_6wdzByGWx7c.roa
File: iZrHtdZCEThgjKG_6wdzByGWx7c.roa (raw, json)
Hash identifier: gdKyVbRWvQQlr6zlipownrWSdVTSl8OeO7dG0G0jM9A=
Subject key identifier: 89:9A:C7:B5:D6:42:11:38:60:8C:A1:BF:EB:07:73:07:21:96:C7:B7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019408B5312AF8EDEF1FBB4C6DF9FA21C4E3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iZrHtdZCEThgjKG_6wdzByGWx7c.roa
Signing time: Fri 27 Dec 2024 15:21:19 +0000
ROA not before: Fri 27 Dec 2024 15:21:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215479
IP address blocks: 178.215.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:b5:31:2a:f8:ed:ef:1f:bb:4c:6d:f9:fa:21:c4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 27 15:21:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=899ac7b5d6421138608ca1bfeb0773072196c7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:a6:ae:54:d3:d1:40:de:38:06:ba:fb:7c:
22:ac:72:46:fb:0e:a6:33:ca:87:18:bf:7a:db:b9:
1c:eb:94:be:00:96:7b:a8:5c:4b:9c:a5:fe:56:2b:
50:3d:21:e0:23:2d:e8:bd:0e:43:37:7f:92:04:6e:
ff:60:0e:de:ef:bc:00:bc:f1:de:09:b0:10:5e:b0:
c9:d0:1c:fc:c4:a0:69:ce:76:97:91:3f:cf:78:b9:
f8:dc:ac:e4:c9:9e:2d:8b:98:36:75:fb:d6:cc:92:
d0:a0:0d:6d:95:70:a1:ca:05:7a:5c:0f:c4:3c:92:
5e:13:92:53:fb:59:00:f8:59:72:2c:ca:41:5a:3e:
e3:f1:20:ad:9e:60:17:42:68:5d:80:5d:41:b5:81:
9d:55:59:ba:e4:94:dd:3c:04:53:4b:20:9f:31:7a:
aa:a1:17:5a:cc:c3:7b:b9:ed:a6:4a:d3:40:96:ce:
b5:f9:29:a3:c0:66:15:d0:48:70:a0:e5:91:74:39:
72:93:8d:a3:e2:04:88:5e:a4:9b:02:64:2f:cc:63:
b0:dc:cb:19:f3:68:32:19:fc:a1:64:65:03:12:73:
5e:73:c3:b0:5a:fd:49:18:42:a3:72:9d:e3:0f:b2:
91:5c:e9:9d:da:fd:c7:40:0b:1c:19:95:e8:99:43:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:C7:B5:D6:42:11:38:60:8C:A1:BF:EB:07:73:07:21:96:C7:B7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iZrHtdZCEThgjKG_6wdzByGWx7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.238.0/24
Signature Algorithm: sha256WithRSAEncryption
59:97:d2:d3:10:70:9a:18:7c:8e:60:71:66:c9:ab:33:ab:64:
6b:09:34:8a:bd:94:59:27:51:af:9f:60:ae:fa:34:4b:df:36:
70:4f:28:d5:ec:67:03:e3:09:b7:f0:ae:1c:fb:30:e3:b2:a8:
0e:42:03:0b:26:70:19:72:c0:78:a2:b6:52:d0:8d:ca:b0:ff:
38:09:f0:23:63:7d:8e:4e:98:83:18:48:94:a7:f7:ca:e9:62:
14:40:71:4a:aa:78:d8:85:e0:5b:7b:49:c3:c0:b5:0f:88:15:
97:3a:3d:6f:de:77:a8:65:c7:d4:77:ef:4b:a3:a0:1c:31:66:
b2:7b:a3:40:6f:3a:8e:be:65:38:bc:dc:50:fb:c1:a0:fb:c2:
84:42:a5:e8:1d:7e:45:88:48:76:cb:0f:b4:73:40:54:f3:b1:
18:c8:a9:28:c9:59:86:fd:eb:cb:23:c8:2b:e1:fd:cc:89:6c:
25:da:9f:0d:4a:d4:46:54:23:69:d8:5f:df:db:99:68:d7:14:
c1:5b:b4:e2:5e:e6:78:82:b0:25:d1:6c:6b:0a:e8:fc:79:64:
b6:a3:e7:00:53:23:cc:65:c1:3c:07:5c:e5:f3:3c:b2:58:42:
72:5a:e8:35:95:51:2d:56:16:6a:3c:02:35:f4:eb:5d:9f:cc:
e8:fa:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:47:01 2025 by rpki-client