Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/xlk5WLUKvvnZlr2GcS23fUa28RA.roa
File: xlk5WLUKvvnZlr2GcS23fUa28RA.roa (raw, json)
Hash identifier: A6ernn7bfEVrPH9aaGZtiGGGFKibV6EMTmoGAMzQgLI=
Subject key identifier: C6:59:39:58:B5:0A:BE:F9:D9:96:BD:86:71:2D:B7:7D:46:B6:F1:10
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 0191364A9B0BCD177950BE526F595F11F8D6
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/xlk5WLUKvvnZlr2GcS23fUa28RA.roa
Signing time: Fri 09 Aug 2024 08:39:04 +0000
ROA not before: Fri 09 Aug 2024 08:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210094
IP address blocks: 178.251.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:4a:9b:0b:cd:17:79:50:be:52:6f:59:5f:11:f8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Aug 9 08:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6593958b50abef9d996bd86712db77d46b6f110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:41:dc:d6:0c:7e:59:c8:a6:dd:fd:6d:74:
94:1e:a0:9d:a8:fb:e4:9e:8f:f2:f4:0f:b5:2a:ae:
4a:61:78:69:42:02:a4:3e:ae:32:cf:2b:36:45:df:
c2:d6:6b:d3:11:0f:90:e8:1b:3f:56:fb:d8:9d:39:
58:e8:55:a4:81:8d:4e:9b:d1:55:61:4d:9c:3a:10:
07:17:8d:bd:cc:f5:a4:5c:79:43:26:cd:14:ec:31:
c0:1e:8f:bd:01:a5:30:3d:32:57:27:a6:b4:04:6a:
54:8c:6e:c7:09:24:4d:31:58:87:e0:2f:96:d2:03:
38:1c:e9:44:ed:e3:20:92:52:d4:c5:0d:56:8c:65:
70:e7:21:05:54:7f:88:64:22:81:be:e4:11:dd:dc:
8f:9a:81:2f:87:02:76:c9:59:d0:ec:f2:f4:6c:4a:
d0:34:cf:dc:88:bc:3a:86:96:44:d2:45:1b:0f:b7:
23:a7:b2:7a:01:0e:6d:78:97:ba:97:f0:20:9a:19:
d5:46:ec:5d:d1:0d:ed:64:4b:29:86:98:5d:4c:44:
76:30:83:86:c4:54:d1:b4:f3:b8:bf:ab:36:58:15:
59:b2:7c:d5:62:c5:86:70:7d:f4:a5:67:7e:78:03:
cd:12:6a:20:04:c3:cf:47:de:bb:09:48:a9:63:a3:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:59:39:58:B5:0A:BE:F9:D9:96:BD:86:71:2D:B7:7D:46:B6:F1:10
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/xlk5WLUKvvnZlr2GcS23fUa28RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0d:17:1c:6b:68:5b:21:a2:12:03:6c:e8:39:8b:86:55:8e:
72:22:21:cd:27:f8:2b:fa:bb:bf:65:20:5d:20:ff:61:ce:f6:
81:f7:e3:46:b5:61:38:ec:e9:95:a2:20:b4:36:3e:cf:37:91:
8f:20:b7:27:91:d0:69:de:1f:0d:8e:a9:2d:58:ba:c1:6e:a4:
e9:a3:18:e4:07:68:a4:a0:97:88:0d:81:90:f7:7c:88:a1:36:
24:5f:fc:6c:db:bf:ae:83:c6:5a:30:3d:71:14:9d:b9:84:ef:
d7:7b:6f:26:77:7e:20:ea:8f:1e:d4:b6:67:04:a8:da:b0:d6:
b2:18:68:07:30:74:14:e3:0b:08:6b:88:9b:5b:d8:2c:f1:d3:
58:83:c2:e2:87:00:bd:4b:fc:ae:52:f4:bd:59:21:25:62:30:
14:6d:dc:78:23:3e:db:dc:b3:80:21:20:2d:88:e3:dc:30:d2:
29:04:69:de:06:cc:ef:02:37:e9:4b:8c:e9:42:2b:da:27:8a:
65:f6:d7:0a:a0:56:d4:d0:c7:6e:69:f6:d6:90:9b:64:6e:d4:
d2:35:65:81:7b:e3:24:3a:62:a9:76:73:34:19:d1:ca:47:18:
b1:f5:a0:f3:9d:67:5f:df:bc:05:ef:de:11:7c:50:a3:d2:20:
5c:55:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:52 2025 by rpki-client