Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/f1T0Oh6QPe0yPwWdPUz078bLCeQ.roa
File: f1T0Oh6QPe0yPwWdPUz078bLCeQ.roa (raw, json)
Hash identifier: LGTy35zaESh7N+Z7ji4tW93wUhU1zf7U9cObVrnOZbY=
Subject key identifier: 7F:54:F4:3A:1E:90:3D:ED:32:3F:05:9D:3D:4C:F4:EF:C6:CB:09:E4
Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial: 018CC34891C46376AC593C5E6DA84B5BD6C1
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/f1T0Oh6QPe0yPwWdPUz078bLCeQ.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42742
IP address blocks: 188.191.0.0/20 maxlen: 20
185.211.164.0/22 maxlen: 22
78.157.224.0/19 maxlen: 19
78.157.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:91:c4:63:76:ac:59:3c:5e:6d:a8:4b:5b:d6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f54f43a1e903ded323f059d3d4cf4efc6cb09e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:38:b6:50:0e:69:e8:2d:41:f6:8c:ba:1a:
4f:c4:83:00:91:62:80:16:b2:55:29:8d:22:89:9c:
08:e8:2b:c3:14:47:21:a4:5c:1c:50:4a:fc:30:2d:
f6:9f:a0:c5:b9:41:2f:c5:aa:39:36:2f:90:c0:15:
c7:7b:35:d3:07:99:78:be:3a:26:26:24:dc:09:37:
a2:b1:97:48:c6:f4:6e:77:c8:d2:7c:37:09:41:56:
89:72:c4:b3:54:6a:b2:4d:60:3b:3c:8d:48:8a:6d:
57:11:ca:18:a2:76:a3:da:4c:34:d8:84:41:2d:d7:
53:00:fe:13:31:46:e1:a4:00:7e:5f:59:d5:d2:df:
5c:a4:45:39:d4:3e:cf:30:2c:41:01:f0:58:7e:04:
05:a0:09:dd:b6:d3:c7:9c:37:70:3f:5b:06:87:03:
08:a4:7b:6d:62:2b:be:32:f7:58:8f:2c:c2:83:a4:
5f:49:ca:cb:0d:d7:9c:d0:9a:65:50:0f:43:30:78:
ee:79:f5:56:3d:b6:3d:84:d0:df:a5:48:fe:d6:6f:
30:13:bb:43:ae:19:21:95:65:d0:4e:73:df:72:7b:
13:d2:fe:1f:f6:c9:da:c6:c5:c5:8a:97:f6:68:58:
7f:6a:5d:ff:11:ac:71:2d:b7:46:34:bb:72:33:bc:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:F4:3A:1E:90:3D:ED:32:3F:05:9D:3D:4C:F4:EF:C6:CB:09:E4
X509v3 Authority Key Identifier:
keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/f1T0Oh6QPe0yPwWdPUz078bLCeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.224.0/19
185.211.164.0/22
188.191.0.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:db:cc:c6:d0:c1:81:b7:45:44:7a:c9:e4:51:d6:47:2c:1d:
ee:07:82:86:86:56:f2:e8:2a:b8:d0:45:97:32:e5:9f:3f:ed:
50:19:1a:5d:59:97:d4:2e:de:fa:ce:77:6a:2e:c2:4e:ed:f1:
45:b0:5e:36:06:72:6c:6a:ff:0d:ed:df:b4:73:80:d1:f6:a7:
c8:71:8b:64:d1:c1:ed:f7:c0:e9:f8:04:e0:e7:67:46:8e:42:
ad:43:a4:f0:13:30:b1:87:d8:d4:de:a5:1b:e8:69:0a:67:a3:
88:5b:27:37:0b:cb:a5:e4:b9:79:f3:b6:bf:0e:66:cc:09:d0:
3a:d8:fa:67:ba:64:8e:dd:1d:10:0d:19:dd:dd:9c:a6:b8:86:
c6:49:83:ee:e0:61:ef:02:3b:34:33:45:60:32:21:0a:a0:73:
87:20:b2:48:27:65:0d:fd:4b:7c:fa:c2:a0:2e:22:a3:29:d1:
25:53:46:72:8f:6d:76:d6:97:f7:b5:8c:61:86:7b:26:00:54:
65:39:58:cf:d1:bf:bb:20:4e:93:03:5d:be:8a:1a:79:75:79:
2d:b1:6a:e8:2d:62:72:69:b6:49:00:a0:d9:c5:d3:3a:44:8a:
f4:9d:e5:ec:9b:8c:84:48:76:03:d6:54:62:e7:bc:a3:cd:74:
12:49:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:39:12 2025 by rpki-client