Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/3pGklem9A_98h643xwuXQCVNqWk.roa
File: 3pGklem9A_98h643xwuXQCVNqWk.roa (raw, json)
Hash identifier: G/azGhuG+H34k3fNwM9YNzh09c8Jvl2Fh89Ou/N8lmo=
Subject key identifier: DE:91:A4:95:E9:BD:03:FF:7C:87:AE:37:C7:0B:97:40:25:4D:A9:69
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 0193F80EBD4AFB35B33B0CEBF3F43922E4E6
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/3pGklem9A_98h643xwuXQCVNqWk.roa
Signing time: Tue 24 Dec 2024 09:45:35 +0000
ROA not before: Tue 24 Dec 2024 09:45:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.88.0/24 maxlen: 24
147.78.89.0/24 maxlen: 24
147.78.90.0/24 maxlen: 24
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
2a09:2040:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 28 Dec 2024 16:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:0e:bd:4a:fb:35:b3:3b:0c:eb:f3:f4:39:22:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Dec 24 09:45:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de91a495e9bd03ff7c87ae37c70b9740254da969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:58:f8:80:84:90:68:b2:b2:6c:ab:2c:29:
40:cf:b1:d8:fa:24:71:79:44:d8:42:dd:20:02:e0:
a7:5a:26:ae:6c:43:d7:5c:84:c7:bf:8c:e5:41:7f:
1c:50:82:09:ac:32:8e:fd:08:c7:6a:6e:68:45:a6:
ac:24:b1:15:3e:34:14:37:e7:28:3d:3b:39:62:cb:
bb:ec:c8:09:af:7f:7f:ed:00:ce:d2:23:6a:d4:4c:
97:82:8b:9d:58:e1:99:55:88:03:ef:5a:6b:a3:6e:
44:fb:77:12:02:5a:af:c9:02:e4:c6:a8:63:65:cb:
dc:49:c8:a8:de:a4:0a:b7:05:2f:d1:4b:e5:d0:2f:
82:e4:40:9f:10:89:bb:64:d7:0d:20:83:5f:45:46:
4f:f0:41:09:fe:71:ab:68:e8:ba:04:25:8e:63:05:
fc:a8:60:7c:93:b4:fc:8f:69:30:7c:67:f2:05:5e:
f5:be:80:e4:66:4c:0e:94:77:57:58:29:67:e4:58:
34:84:8c:8b:f6:08:c5:e3:99:7a:a8:fa:9f:ad:df:
3d:c9:9d:67:40:61:0c:89:4c:46:cf:45:c8:41:2c:
38:a8:67:15:d7:8b:39:e8:ab:b7:e5:9e:15:d7:91:
fc:09:d2:7d:8b:ed:4d:d9:83:39:1e:48:70:b7:e5:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:A4:95:E9:BD:03:FF:7C:87:AE:37:C7:0B:97:40:25:4D:A9:69
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/3pGklem9A_98h643xwuXQCVNqWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
0f:8e:22:fc:6f:dc:d3:df:99:97:8d:97:91:76:32:c3:2b:70:
11:84:e5:3e:7c:78:b0:b9:ef:56:56:37:00:6c:5c:f1:50:11:
b4:a3:ff:d9:16:a1:d9:ae:ef:39:0f:12:8d:f4:aa:d4:92:6c:
a1:c9:9e:66:19:26:33:4e:ca:47:a6:fe:4a:7e:5b:90:99:e1:
e1:d6:e0:df:1e:3c:0e:c8:29:64:d2:d7:77:e0:7c:1b:f1:3d:
9f:96:b2:b5:9e:5f:f1:86:94:df:f8:ea:67:3d:e7:a6:d5:3c:
7a:2d:02:0c:b7:bf:8d:05:86:ff:a5:28:f5:e7:11:b6:48:62:
9c:08:22:2f:0d:1e:10:27:45:f6:73:0b:ce:15:71:dc:44:42:
62:3b:ba:bb:9b:fe:90:4d:c2:ad:5b:fb:de:30:8d:4f:ab:4f:
d6:99:7e:35:e8:cf:3f:a6:f6:d4:49:0f:3a:98:fa:4c:e8:67:
e3:bc:79:79:e3:9b:c8:6e:7e:e3:4e:29:8c:06:64:b9:6a:6c:
f9:9f:50:16:4d:86:25:7a:10:29:bf:d0:82:4e:db:b5:ff:cd:
79:55:c3:c4:e9:a0:79:a7:37:86:38:7d:6a:59:ac:c9:3f:0f:
d1:5c:32:c8:a4:ef:8e:30:97:b4:f6:af:2d:a7:94:1d:ac:f2:
b1:35:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:43 2025 by rpki-client