Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/P2Gp0Qce7g4dUsW32j-C9VjlwAI.roa
File: P2Gp0Qce7g4dUsW32j-C9VjlwAI.roa (raw, json)
Hash identifier: IeEsLK7t6ES2rpvA+ilN1QrLHh+4+AU1a9jxQl+GVpk=
Subject key identifier: 3F:61:A9:D1:07:1E:EE:0E:1D:52:C5:B7:DA:3F:82:F5:58:E5:C0:02
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 018CC26D696EE93FBDCE9D3920B60CEA35D0
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/P2Gp0Qce7g4dUsW32j-C9VjlwAI.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51139
IP address blocks: 178.249.228.0/22 maxlen: 22
178.249.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:69:6e:e9:3f:bd:ce:9d:39:20:b6:0c:ea:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f61a9d1071eee0e1d52c5b7da3f82f558e5c002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:5d:5e:ec:6e:9a:f1:de:02:ba:58:ba:34:
af:8e:91:7a:3d:54:4e:c7:57:a6:4b:4c:ff:8b:31:
d2:de:6c:26:48:78:27:48:77:87:c6:87:b6:98:71:
d7:df:c1:fa:ec:92:a7:a6:0f:f1:03:cc:19:39:24:
ad:bd:dd:0c:00:68:d1:df:4f:79:4c:cd:58:11:ab:
be:e7:d9:db:8b:ed:20:f0:7c:3d:3a:ef:77:c9:24:
77:aa:e3:3a:d7:fc:81:e5:a8:9f:63:9d:9d:ab:d6:
f0:57:b8:ea:2a:36:b9:f4:14:28:2c:6b:fe:d4:ea:
66:c8:f9:da:54:8e:de:e1:28:27:ac:b9:8b:a8:52:
17:ca:8e:35:7d:84:54:32:12:36:74:d1:ed:52:99:
98:b0:71:21:4e:f9:ab:d3:1f:e0:be:da:20:ae:49:
f2:fe:58:5f:26:92:e0:86:77:f1:3f:b2:d9:71:d5:
76:42:1b:56:24:8f:3d:54:ba:4a:40:6b:b4:88:c8:
c3:2f:8d:32:d5:7c:d3:7a:d6:16:3a:aa:66:f2:05:
59:67:2a:16:ce:77:d9:b0:c3:1d:7a:f9:22:db:63:
ec:87:93:ca:a4:23:24:61:02:05:36:41:87:23:bf:
b5:5b:51:e5:3a:15:9c:b9:30:9f:48:25:71:bf:2b:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:61:A9:D1:07:1E:EE:0E:1D:52:C5:B7:DA:3F:82:F5:58:E5:C0:02
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/P2Gp0Qce7g4dUsW32j-C9VjlwAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:66:69:46:aa:8a:19:0a:85:34:7c:7c:ad:1c:c3:21:24:07:
61:ac:1c:0e:ec:9d:7c:12:93:62:3d:ee:81:5f:f7:2e:18:c7:
7f:a2:32:30:2e:08:bb:b4:11:0c:e8:00:a7:9d:4c:01:c0:ed:
03:bd:c5:42:ce:3a:9c:d4:27:0b:2c:e2:9f:ec:34:b1:24:ff:
c8:5f:c5:69:4d:ed:98:b2:ca:ad:fc:d3:57:a6:6b:c2:92:8d:
5f:9a:c5:a8:f0:b2:2e:a5:fb:71:68:5b:2d:39:ea:ea:cb:6b:
cf:9d:84:1e:b2:2c:f1:1d:87:24:4d:1b:73:22:2b:a3:b8:87:
6a:5b:e0:cd:4b:b2:aa:0e:2c:dd:1b:2e:04:6a:ac:68:d0:28:
d1:77:1c:6b:f5:bd:b3:39:05:90:e8:13:67:9b:d3:9d:43:7b:
c1:c2:32:89:d5:63:d8:e9:4d:7c:8a:dd:0f:39:c0:5d:cf:2f:
9d:05:84:b4:29:c1:bd:89:3c:73:ff:28:5d:bf:16:24:f8:87:
36:87:7f:29:65:7c:3f:30:9e:cb:d8:1e:4b:5a:0a:45:aa:a2:
83:72:48:f4:78:25:4b:a3:a7:57:f8:c7:28:93:b4:13:72:2c:
16:10:83:92:bb:e2:59:af:b5:25:16:86:df:68:8f:bc:7e:f1:
c4:ae:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:09 2025 by rpki-client