Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/RL9nDB4zTtJHVYXSA5Nru4OOtd4.roa
File: RL9nDB4zTtJHVYXSA5Nru4OOtd4.roa (raw, json)
Hash identifier: LuFSf2oQAubmSYTBzDlpcnTTpZVaSctAeUPdMiZX+bA=
Subject key identifier: 44:BF:67:0C:1E:33:4E:D2:47:55:85:D2:03:93:6B:BB:83:8E:B5:DE
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D715F6635BB241DBB5FADC33FDCEE2
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/RL9nDB4zTtJHVYXSA5Nru4OOtd4.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214447
IP address blocks: 213.238.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 11:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:15:f6:63:5b:b2:41:db:b5:fa:dc:33:fd:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44bf670c1e334ed2475585d203936bbb838eb5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:78:6f:cc:57:4c:3c:4d:44:43:a5:ee:d2:
f2:64:5e:b0:38:ea:8d:47:98:a4:c6:fa:57:04:77:
b2:b9:55:df:72:b4:11:e8:25:98:42:dc:61:81:b0:
d4:5c:cd:74:fe:d5:a2:a0:56:e7:c3:12:47:3a:6f:
2b:35:bd:63:fc:d5:17:ca:eb:7f:48:b8:bf:40:e4:
f6:9c:9b:54:56:e1:85:a9:14:ab:4b:54:46:30:96:
5f:ea:a9:70:37:46:71:5a:70:c0:49:b5:b6:99:6f:
6c:4c:0f:52:49:7c:62:7a:92:18:38:7f:45:9c:e0:
aa:f6:3e:a6:fb:73:fc:d4:9a:fd:42:69:dc:e5:cf:
2b:99:eb:4c:22:e7:25:c7:a8:b8:2f:6c:69:f8:f3:
2e:61:07:e2:dc:dc:d0:2d:a2:ce:65:a7:5d:8d:53:
7a:9c:45:49:f6:6f:ff:87:cc:76:b6:79:1d:90:b8:
dc:9e:b6:80:eb:76:4b:76:d5:7d:5e:7f:d6:b9:05:
11:89:1a:36:71:c0:32:89:56:ab:ed:d8:ce:25:4a:
f2:9d:7c:d6:31:16:6d:1f:92:ae:21:55:0a:09:fe:
06:55:22:e8:24:fc:df:1b:29:21:bc:f7:71:19:40:
68:9f:82:3c:5f:5f:9e:f7:99:44:11:ec:7c:cc:f8:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BF:67:0C:1E:33:4E:D2:47:55:85:D2:03:93:6B:BB:83:8E:B5:DE
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/RL9nDB4zTtJHVYXSA5Nru4OOtd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.174.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d1:77:fd:0a:f3:8b:2d:77:44:dc:2e:ea:b3:45:1e:f9:7a:
84:77:ae:7d:36:84:cd:64:8e:e8:21:4b:1d:b1:3b:80:79:75:
7e:71:15:16:20:ff:e6:0a:7a:57:6b:53:42:30:a9:67:fe:6f:
82:f7:b4:97:0b:c3:39:b7:1e:e1:cc:0d:8f:04:5d:51:cc:c5:
30:10:ac:61:ae:8d:54:4e:a6:ce:d2:98:aa:d4:bc:a3:17:49:
11:51:c5:ff:cc:87:c1:ba:f0:dc:e3:44:fb:d7:06:81:7d:e4:
9f:f6:c6:46:ac:5e:3f:2f:c4:b4:51:07:85:7c:d5:e3:8f:4b:
64:d3:11:b7:0c:6f:cc:83:19:7f:82:b3:94:24:00:a1:1c:d2:
ba:45:94:bc:29:03:07:4b:90:85:9e:fd:48:7b:06:ec:d5:ff:
f8:69:26:d6:e1:d2:dc:b4:af:66:6c:5c:c8:0c:63:54:a9:56:
75:d6:10:35:60:ba:38:9b:37:ec:e4:07:ef:55:b5:26:f2:bb:
19:de:ed:67:88:39:3b:21:05:f9:c3:af:aa:9b:24:7b:5a:30:
8f:d5:f8:a3:1e:fc:54:fe:6a:e4:15:31:30:02:bc:e2:99:87:
60:25:f8:0b:a8:d7:1b:90:8d:d6:aa:29:e0:48:cb:bf:c4:c9:
b7:76:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:08 2025 by rpki-client