Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/F0nd_0J1uIObHKAxVm3E9MNTnNM.roa
File: F0nd_0J1uIObHKAxVm3E9MNTnNM.roa (raw, json)
Hash identifier: cg9ZAVXeYeNo8OWLSWyHHppWinJGj34N3yfRA03D5lM=
Subject key identifier: 17:49:DD:FF:42:75:B8:83:9B:1C:A0:31:56:6D:C4:F4:C3:53:9C:D3
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0193F2E663340D57501A020D4C0763066988
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/F0nd_0J1uIObHKAxVm3E9MNTnNM.roa
Signing time: Mon 23 Dec 2024 09:43:25 +0000
ROA not before: Mon 23 Dec 2024 09:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397032
IP address blocks: 78.108.218.0/24 maxlen: 24
193.31.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:e6:63:34:0d:57:50:1a:02:0d:4c:07:63:06:69:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Dec 23 09:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1749ddff4275b8839b1ca031566dc4f4c3539cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:9b:97:8e:9d:d6:77:1d:75:4c:1b:24:f2:
1c:3a:7b:ca:a5:7a:d9:5c:a5:5d:dc:c6:ce:a4:39:
41:f6:e6:46:37:2f:a8:d5:0a:76:9e:3d:f1:2a:14:
12:08:3b:31:ba:68:33:f1:93:26:04:70:ae:cf:d9:
87:12:50:c1:cf:8b:db:53:cc:09:24:6e:35:79:39:
97:b4:7c:79:00:8d:36:46:38:13:fc:48:67:6d:27:
04:ed:48:5f:b7:04:bc:ec:e0:6a:f1:93:17:fb:13:
ad:7a:43:3f:2f:9d:a8:eb:90:86:5e:e2:82:94:59:
c1:ef:a1:7b:53:ff:0f:8a:4c:27:11:e5:ab:35:4a:
c2:46:a5:7f:03:c5:64:3e:3d:81:f5:aa:43:9f:d2:
9e:f3:ec:c6:40:48:76:07:f0:6b:c0:99:91:55:04:
0a:b3:b2:5c:32:f8:78:19:56:31:73:ce:13:29:06:
4a:e1:be:96:f0:96:1c:d0:5d:3a:1d:96:50:b4:4a:
0f:cb:38:5f:4b:52:eb:20:d1:9d:9f:96:1a:75:7b:
a7:a6:47:2d:56:df:4b:62:a3:65:1d:5d:6c:09:d1:
aa:0c:cd:f4:67:15:28:a4:e3:73:fc:0c:85:42:61:
73:d3:3e:f8:59:19:f2:21:f1:4b:e5:82:ff:1b:53:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:DD:FF:42:75:B8:83:9B:1C:A0:31:56:6D:C4:F4:C3:53:9C:D3
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/F0nd_0J1uIObHKAxVm3E9MNTnNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.218.0/24
193.31.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:60:a8:69:7f:68:97:4e:6d:29:0a:21:d4:fd:56:8b:5e:21:
ba:4b:a3:74:07:dd:7c:0f:ed:12:5b:a6:4a:c1:88:a3:04:b4:
ed:cd:23:84:ba:21:0b:f2:57:74:aa:fd:17:4f:53:03:24:26:
85:e0:82:ef:63:dd:54:3c:e9:19:8a:b7:5d:f6:1d:75:aa:99:
d3:98:60:81:cc:a3:9e:52:77:2d:4e:3b:01:52:61:0c:3c:4c:
95:35:0e:67:f8:e1:bb:16:54:94:0e:54:59:07:55:af:1b:58:
73:7d:2d:5a:f1:87:46:3c:df:ac:8e:eb:13:7d:cd:ae:96:94:
7e:b0:60:94:ac:fd:d3:06:d6:4a:76:05:51:4c:90:e2:34:9e:
ee:d1:99:f4:47:01:55:99:46:00:46:d2:70:4c:bd:bc:58:e9:
4a:7a:9f:e4:45:a7:8d:c9:4b:bf:68:22:73:fb:6b:9d:06:dd:
d7:62:81:50:5a:8b:16:0b:f1:7d:af:59:bf:91:1a:b0:39:27:
af:3b:d0:b3:9c:72:83:b7:dd:c9:44:08:1a:28:30:44:12:df:
5c:26:d8:4e:3e:d4:1a:f7:0f:68:8a:52:4f:f6:e8:a9:fd:a6:
4b:1d:4c:c7:26:0d:5b:d1:66:e9:e8:f2:15:36:59:c2:95:30:
a3:50:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:31 2025 by rpki-client