Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/djLGC3j7Rsf9c0KIKKEUmUf-ZOY.roa
File: djLGC3j7Rsf9c0KIKKEUmUf-ZOY.roa (raw, json)
Hash identifier: AtXAj3XyC5m1Zm8GJGvqkM/VzWOasbOTSRdhQx6F0pY=
Subject key identifier: 76:32:C6:0B:78:FB:46:C7:FD:73:42:88:28:A1:14:99:47:FE:64:E6
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0193F492DA1B66A644A368369C4462C93647
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/djLGC3j7Rsf9c0KIKKEUmUf-ZOY.roa
Signing time: Mon 23 Dec 2024 17:31:25 +0000
ROA not before: Mon 23 Dec 2024 17:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
194.33.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:92:da:1b:66:a6:44:a3:68:36:9c:44:62:c9:36:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Dec 23 17:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7632c60b78fb46c7fd73428828a1149947fe64e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:c4:22:d5:5d:0b:78:99:a1:72:b2:42:65:
4a:dd:e2:20:9f:cc:34:d3:6b:50:bf:33:75:c5:44:
53:54:79:97:d2:d0:b6:19:6b:21:3d:b3:13:bd:be:
26:d7:f9:41:0a:68:92:83:85:07:bf:76:de:ad:4f:
1d:9b:ff:d9:39:78:b2:a6:5a:31:ae:ac:21:65:a1:
ff:c5:dd:00:66:60:3c:1b:2b:f2:cc:b0:1d:51:29:
2f:09:d2:0c:1a:d2:79:57:b6:ee:02:2b:3b:0b:1c:
21:68:76:36:23:cc:c9:d5:09:c7:e3:b6:a8:db:b8:
96:41:91:f9:e7:27:c9:4e:ce:4a:d8:e1:ab:a7:89:
8e:00:28:4d:b0:45:c5:7e:91:7a:a7:d6:4e:cc:70:
1d:ca:c7:62:38:a6:ad:03:6b:d4:1d:92:ef:6b:4c:
43:37:39:93:9c:5d:f2:6b:8f:99:89:bf:5f:f3:d2:
bc:9c:11:2d:8d:9d:3d:c0:91:60:f3:75:53:e7:83:
a6:7b:e4:89:1b:0c:b9:b1:28:f3:0d:9e:a9:31:7d:
5a:6f:dc:74:5c:4e:54:c2:4d:98:bb:75:5f:e0:72:
29:68:48:12:5e:1a:6f:66:10:72:d5:f9:4e:32:e6:
95:50:0d:a8:a5:98:d9:b8:11:f1:2c:4d:03:36:b5:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:C6:0B:78:FB:46:C7:FD:73:42:88:28:A1:14:99:47:FE:64:E6
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/djLGC3j7Rsf9c0KIKKEUmUf-ZOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.252.0/23
194.33.150.0/24
Signature Algorithm: sha256WithRSAEncryption
36:86:d9:ed:b9:8d:27:32:ff:c3:78:f4:59:87:b9:64:0e:d5:
d3:73:b7:74:3c:74:cd:d3:59:06:e6:75:4e:0e:9f:17:1b:22:
e7:d5:48:82:51:a0:c3:d8:08:a9:69:97:67:53:4c:72:82:c0:
ed:f6:40:be:b5:31:8e:32:97:7d:76:cd:c3:d3:16:c7:64:6c:
0f:e5:69:83:fd:1b:43:36:ce:5a:21:dd:fa:bd:2c:42:d3:a9:
86:19:1d:e9:4d:97:be:f3:68:4d:1d:86:9f:6a:0b:0c:fa:80:
de:6b:41:89:3f:7f:62:c3:fc:00:b1:00:09:9c:df:73:75:76:
5e:21:09:dc:b7:b4:7e:3e:cd:3a:78:e3:a7:70:c4:70:7f:48:
17:8e:b9:c6:d1:ea:91:23:1e:d6:98:50:74:c5:3c:0b:ef:b3:
f6:c7:b4:ee:f9:71:dc:63:31:34:43:7d:fc:16:67:e5:d4:d2:
c4:29:4e:b3:b0:cd:d9:aa:2a:2f:8c:56:d5:76:1c:bd:f5:ce:
d1:fb:9a:52:27:98:2c:f1:13:0f:a9:88:4d:b4:01:e1:f0:55:
b6:44:53:eb:9a:72:fe:d3:97:a4:0a:a2:70:30:1a:cf:a6:44:
94:f0:f1:36:b6:b6:39:aa:19:22:e4:d8:26:6e:02:ab:c8:d1:
89:a5:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:37 2025 by rpki-client