Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/01HtAuMUxuqrbi-RYDMlgiph8hQ.roa
File: 01HtAuMUxuqrbi-RYDMlgiph8hQ.roa (raw, json)
Hash identifier: lGVEELYtg5rZM3t1Qq83ZACS5uXbK+Qjh7HwfOV+WDc=
Subject key identifier: D3:51:ED:02:E3:14:C6:EA:AB:6E:2F:91:60:33:25:82:2A:61:F2:14
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0194F10BF5FC25699F7986B5FCAEBDEC38D5
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/01HtAuMUxuqrbi-RYDMlgiph8hQ.roa
Signing time: Mon 10 Feb 2025 18:08:00 +0000
ROA not before: Mon 10 Feb 2025 18:08:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 78.143.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 07:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:0b:f5:fc:25:69:9f:79:86:b5:fc:ae:bd:ec:38:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Feb 10 18:08:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d351ed02e314c6eaab6e2f91603325822a61f214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:43:a5:39:70:53:3b:ce:b0:8c:b8:96:12:
86:dd:40:94:74:c9:f6:b9:e0:bd:ce:f2:4d:b5:37:
56:6a:53:84:f8:a8:26:60:34:c5:0a:76:16:cf:31:
a4:c2:30:92:5b:dd:88:fa:51:ad:49:1b:a6:fe:ea:
80:ee:e2:86:45:5c:b1:4d:50:7d:08:21:7f:60:6e:
eb:e8:3f:cc:70:db:48:e7:8f:57:77:51:1c:00:06:
91:6a:4d:c0:40:d5:90:da:ce:df:11:b2:61:7c:17:
f3:74:1d:4e:3d:c3:10:b2:d8:26:4c:99:ce:b2:04:
8b:91:24:6a:ed:21:25:95:98:b3:cb:a5:aa:9b:78:
50:e9:28:c4:ea:a1:4c:55:d4:ad:85:03:02:9d:19:
49:be:3e:8c:62:b1:97:a0:b6:34:a0:55:67:03:ab:
7d:5f:ed:d0:30:94:f3:b3:6b:de:e0:68:65:49:e9:
97:4f:00:84:ec:9e:76:3a:d6:54:67:2d:97:82:ed:
d7:42:ab:65:0e:d1:fd:b9:9a:02:15:d9:f5:3f:de:
4e:fb:97:fd:42:95:a1:38:07:e4:e9:83:f6:f0:71:
27:a0:f0:4f:c0:9c:a3:ac:ab:b4:1e:30:c4:9a:29:
c3:4f:af:d9:c6:51:18:5f:41:77:d7:0d:0d:5e:e5:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:ED:02:E3:14:C6:EA:AB:6E:2F:91:60:33:25:82:2A:61:F2:14
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/01HtAuMUxuqrbi-RYDMlgiph8hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0a:a9:48:5e:86:15:7e:6a:e4:41:98:5c:34:fb:07:80:01:
86:02:1e:9e:cd:14:e3:0f:0b:20:89:c6:c7:39:79:ae:58:ee:
ea:fa:f5:5a:34:b3:47:0b:d4:90:56:05:2a:93:1f:f6:17:3b:
0f:0d:5c:2c:62:48:d9:34:c6:bd:39:20:ec:6c:64:6f:18:03:
c4:4c:06:0b:07:04:28:8b:58:1c:f1:c8:1f:41:56:b0:3f:4f:
fa:af:38:7b:2d:83:74:fe:00:d6:09:99:d3:91:97:9a:42:3f:
87:f2:ee:ef:2f:99:f9:3b:1c:2d:66:1e:48:ae:37:68:aa:70:
a3:e5:23:db:03:4c:91:11:78:cd:2a:a6:a8:d1:e4:5b:51:d8:
f1:ea:3d:4f:71:45:1b:62:45:e3:df:5f:4d:11:b0:73:c8:96:
55:c5:f4:80:7c:be:32:3c:95:74:26:5a:c6:ce:5d:58:47:cf:
05:c7:07:80:eb:4d:65:84:e1:11:9c:e4:62:90:ab:70:6a:4b:
4b:6c:67:8a:94:b4:75:19:98:be:c0:e5:a4:55:6f:cb:dd:3b:
48:d7:9a:e0:5d:10:ce:de:bb:ce:0f:76:87:2d:bd:d2:6f:6c:
a9:6f:88:75:70:11:07:33:da:53:eb:7f:80:b2:42:17:7d:2e:
75:c2:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:22 2025 by rpki-client