Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/1RC6hp0DWzzk22jnIQXjGHucUbc.roa
File: 1RC6hp0DWzzk22jnIQXjGHucUbc.roa (raw, json)
Hash identifier: wGFGhTZsAW4zSNApfz5qTcVsVH1WrJNDVa/+HiQUKX4=
Subject key identifier: D5:10:BA:86:9D:03:5B:3C:E4:DB:68:E7:21:05:E3:18:7B:9C:51:B7
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018CC8DF235EEDB58FC6672BC80D754763A0
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/1RC6hp0DWzzk22jnIQXjGHucUbc.roa
Signing time: Tue 02 Jan 2024 06:31:55 +0000
ROA not before: Tue 02 Jan 2024 06:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31252
IP address blocks: 178.175.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 11:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:23:5e:ed:b5:8f:c6:67:2b:c8:0d:75:47:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 2 06:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d510ba869d035b3ce4db68e72105e3187b9c51b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:4f:24:37:ca:16:73:93:7e:e9:74:db:6f:
ac:05:b2:1a:1a:76:f9:ab:da:e2:dc:1f:dd:ed:7d:
52:4e:c6:96:1f:b7:56:5f:f5:82:27:c6:ec:d7:6b:
aa:43:93:1a:4b:69:b3:09:e4:1d:06:9c:3a:d2:d0:
0d:73:e1:5a:54:c3:a4:84:97:ce:b1:4b:8d:a1:7c:
53:95:a1:3a:12:65:04:b5:78:3e:ed:f8:ae:7f:a3:
f7:e2:ad:29:59:d7:b8:2c:08:83:9a:91:7a:45:98:
d8:6d:43:07:17:b8:c0:3c:c5:e4:96:40:fe:d2:33:
e6:09:ab:25:88:6a:0e:0b:d4:18:7b:af:f2:13:65:
4a:21:47:00:c3:8b:a8:48:8d:40:d8:6d:ba:d9:94:
ad:6b:c7:4d:2a:11:94:e3:9c:0a:f0:a3:04:3d:34:
ca:57:f6:3a:ae:86:e9:96:d5:16:a0:3a:eb:9f:c0:
af:d5:07:59:f1:eb:2e:15:2d:f0:ac:6e:c6:a1:84:
8a:ed:6a:c2:17:57:45:ac:32:78:71:2d:86:6a:81:
37:b6:84:80:09:1f:24:aa:e2:17:da:ad:59:a5:5b:
53:10:2d:23:66:59:37:e7:7e:5e:05:a3:e0:55:bb:
a9:e0:0a:50:11:54:6a:a7:e8:62:4b:7c:83:9b:a0:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:10:BA:86:9D:03:5B:3C:E4:DB:68:E7:21:05:E3:18:7B:9C:51:B7
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/1RC6hp0DWzzk22jnIQXjGHucUbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.153.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bb:ce:cf:c8:3c:88:f3:c5:9d:65:3a:de:fd:e8:8c:37:ea:
f1:95:f8:86:b3:ff:6b:0c:bf:92:f5:f6:e4:cc:ea:ac:90:36:
de:ee:08:fb:2a:2d:2c:f0:83:82:e0:8c:ec:92:05:e0:46:b0:
75:db:52:57:c4:40:a5:28:ec:7d:57:6e:01:fc:57:9e:1e:cb:
81:e3:14:12:b0:af:03:cd:16:f3:61:3b:da:af:8b:4f:a4:f2:
74:43:dd:3a:ea:b8:56:57:fb:53:d1:63:6d:f7:a1:f6:90:63:
03:d9:cf:e0:ed:49:c0:12:5a:80:f5:1d:e7:1f:83:ba:60:4a:
20:3d:40:4a:7c:dd:ee:53:97:31:a9:58:94:4c:cc:dd:b9:b8:
79:a6:3b:67:ce:37:de:42:d0:a5:79:fe:d1:f1:f9:f8:1c:2e:
f7:0f:b5:3d:ab:5c:69:1e:01:4f:30:8e:7f:5e:a3:db:db:9a:
c2:a3:8f:f0:85:78:44:ef:46:05:f9:3b:07:58:34:79:bf:f8:
18:5b:4a:0a:a1:10:e9:c6:9d:6f:4f:50:b3:0b:47:6c:39:12:
fd:c9:3b:38:fd:28:b8:2e:7b:2b:4d:fb:73:fe:6e:0d:9c:32:
0e:2b:f0:69:7a:fb:2a:44:87:04:11:b9:db:2a:01:e6:f2:c0:
37:23:75:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:24 2025 by rpki-client