Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/0_NlVjdy7yTtil34cI0B0_Qty6o.roa
File: 0_NlVjdy7yTtil34cI0B0_Qty6o.roa (raw, json)
Hash identifier: 7MX6MrOP5wFZdKNULHAaVLtW0WIttiC22m+qjHuBXsg=
Subject key identifier: D3:F3:65:56:37:72:EF:24:ED:8A:5D:F8:70:8D:01:D3:F4:2D:CB:AA
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01943603140E21D876D7ABAB6BA889623348
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/0_NlVjdy7yTtil34cI0B0_Qty6o.roa
Signing time: Sun 05 Jan 2025 10:29:18 +0000
ROA not before: Sun 05 Jan 2025 10:29:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 08:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:03:14:0e:21:d8:76:d7:ab:ab:6b:a8:89:62:33:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 5 10:29:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3f365563772ef24ed8a5df8708d01d3f42dcbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:82:c4:8a:6d:90:d1:8c:a7:1c:c7:1b:48:
18:af:f7:7e:28:95:05:7f:87:5d:19:0f:cd:2a:3b:
e0:cb:6a:f5:01:7a:16:1a:cc:b4:5f:fe:56:2a:9e:
01:3f:52:b2:58:2f:bf:b2:6e:51:1b:18:e2:6b:52:
4b:2e:10:b9:9d:a6:a1:c5:b0:e5:ad:8f:57:44:c7:
df:d0:12:2c:58:e1:d4:49:5e:1c:14:23:20:7f:9b:
95:ec:83:4b:42:db:20:cb:1c:62:42:96:97:c9:63:
1e:76:23:87:fe:29:f1:a0:d8:11:b2:09:66:d1:04:
28:94:b2:da:d9:f0:b5:b2:d1:ea:b4:60:8e:bf:e0:
d4:aa:11:ae:1d:73:9b:e7:46:af:03:08:26:22:4c:
fa:c8:91:68:3f:5a:69:f9:df:f7:31:8b:77:96:a9:
ab:df:3a:a0:88:8d:c7:04:75:03:29:15:fa:42:bf:
7e:c1:cf:37:00:73:2f:89:8b:0f:a3:99:11:03:c0:
cc:e2:fd:5f:58:91:f7:7e:8e:39:34:b0:43:a8:08:
3d:30:38:ca:89:0d:41:31:3f:81:9a:45:f2:ad:8b:
f9:18:b1:33:d7:c3:d5:a0:0d:79:5f:81:89:02:ed:
b5:28:1e:34:52:34:94:3d:54:b1:0a:3e:a1:19:16:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:65:56:37:72:EF:24:ED:8A:5D:F8:70:8D:01:D3:F4:2D:CB:AA
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/0_NlVjdy7yTtil34cI0B0_Qty6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7b:d7:3e:3d:0a:96:64:a0:07:5e:f2:bd:13:a1:39:44:3c:
c7:4b:a0:0a:fa:f3:50:fd:5d:03:e1:df:b6:05:a5:cb:a1:13:
cf:6e:51:e3:4b:ed:de:e2:ea:f5:87:f2:d4:bf:df:1f:30:3b:
58:c1:d6:e1:af:66:50:98:b3:21:c3:48:cf:77:d5:10:fc:93:
d6:1f:76:37:21:d3:d3:02:2d:d5:c5:d6:27:c6:19:e2:2c:e2:
46:ef:c4:79:79:3c:6a:60:ee:86:44:29:70:6b:73:a3:fc:43:
be:41:21:83:d1:20:66:79:91:cc:c5:e7:24:5c:98:6f:f8:e7:
07:b9:0b:8a:26:9b:4b:a9:80:82:e4:db:54:34:8e:4c:2b:90:
23:58:a1:4d:5a:8d:e5:da:1f:b1:99:d6:b2:2f:97:c7:5d:c4:
38:3f:db:5d:db:95:7f:c0:72:b9:3d:0b:c8:e8:13:a3:1c:98:
41:65:77:02:04:ae:01:b8:2f:63:30:d5:ab:f1:64:92:95:fb:
fb:54:d0:d7:d5:c9:10:01:ec:c9:57:f0:c8:08:c0:7c:b9:4c:
6b:a5:c4:7e:5a:e2:6b:71:78:a4:bb:47:3d:15:e2:cc:24:8b:
5d:39:58:06:8e:e2:ed:82:9a:f5:5e:08:fd:06:9e:15:f9:50:
af:b2:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:11 2025 by rpki-client