Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/AknP4Q8mLKCLvdW7Mv0l-7_yx7g.roa
File: AknP4Q8mLKCLvdW7Mv0l-7_yx7g.roa (raw, json)
Hash identifier: KCLexEKOyfZiK172B8h8XeM5xriIgJIZ7RiKro+p5yU=
Subject key identifier: 02:49:CF:E1:0F:26:2C:A0:8B:BD:D5:BB:32:FD:25:FB:BF:F2:C7:B8
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 0191023A312E6F3C0F95ACC12E01953B9378
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/AknP4Q8mLKCLvdW7Mv0l-7_yx7g.roa
Signing time: Tue 30 Jul 2024 06:00:53 +0000
ROA not before: Tue 30 Jul 2024 06:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1756
IP address blocks: 178.173.128.0/24 maxlen: 24
178.173.129.0/24 maxlen: 24
178.173.130.0/24 maxlen: 24
178.173.131.0/24 maxlen: 24
178.173.132.0/24 maxlen: 24
178.173.133.0/24 maxlen: 24
178.173.134.0/24 maxlen: 24
178.173.135.0/24 maxlen: 24
178.173.136.0/24 maxlen: 24
178.173.137.0/24 maxlen: 24
178.173.138.0/24 maxlen: 24
178.173.139.0/24 maxlen: 24
178.173.140.0/24 maxlen: 24
178.173.141.0/24 maxlen: 24
178.173.142.0/24 maxlen: 24
178.173.143.0/24 maxlen: 24
178.173.144.0/24 maxlen: 24
178.173.145.0/24 maxlen: 24
178.173.146.0/24 maxlen: 24
178.173.147.0/24 maxlen: 24
178.173.148.0/24 maxlen: 24
178.173.149.0/24 maxlen: 24
178.173.150.0/24 maxlen: 24
178.173.151.0/24 maxlen: 24
178.173.160.0/24 maxlen: 24
178.173.161.0/24 maxlen: 24
178.173.162.0/24 maxlen: 24
178.173.163.0/24 maxlen: 24
178.173.164.0/24 maxlen: 24
178.173.165.0/24 maxlen: 24
178.173.166.0/24 maxlen: 24
178.173.167.0/24 maxlen: 24
178.173.168.0/24 maxlen: 24
178.173.169.0/24 maxlen: 24
178.173.170.0/24 maxlen: 24
178.173.171.0/24 maxlen: 24
178.173.172.0/24 maxlen: 24
178.173.173.0/24 maxlen: 24
178.173.174.0/24 maxlen: 24
178.173.175.0/24 maxlen: 24
178.173.176.0/24 maxlen: 24
178.173.177.0/24 maxlen: 24
178.173.178.0/24 maxlen: 24
178.173.179.0/24 maxlen: 24
178.173.180.0/24 maxlen: 24
178.173.181.0/24 maxlen: 24
178.173.182.0/24 maxlen: 24
178.173.183.0/24 maxlen: 24
178.173.184.0/24 maxlen: 24
178.173.185.0/24 maxlen: 24
178.173.186.0/24 maxlen: 24
178.173.187.0/24 maxlen: 24
178.173.188.0/24 maxlen: 24
178.173.189.0/24 maxlen: 24
178.173.190.0/24 maxlen: 24
178.173.191.0/24 maxlen: 24
178.173.192.0/24 maxlen: 24
178.173.193.0/24 maxlen: 24
178.173.194.0/24 maxlen: 24
178.173.195.0/24 maxlen: 24
178.173.196.0/24 maxlen: 24
178.173.197.0/24 maxlen: 24
178.173.198.0/24 maxlen: 24
178.173.199.0/24 maxlen: 24
178.173.200.0/24 maxlen: 24
178.173.201.0/24 maxlen: 24
178.173.202.0/24 maxlen: 24
178.173.203.0/24 maxlen: 24
178.173.204.0/24 maxlen: 24
178.173.205.0/24 maxlen: 24
178.173.206.0/24 maxlen: 24
178.173.207.0/24 maxlen: 24
178.173.208.0/24 maxlen: 24
178.173.209.0/24 maxlen: 24
178.173.210.0/24 maxlen: 24
178.173.211.0/24 maxlen: 24
178.173.212.0/24 maxlen: 24
178.173.213.0/24 maxlen: 24
178.173.214.0/24 maxlen: 24
178.173.215.0/24 maxlen: 24
178.173.216.0/24 maxlen: 24
178.173.217.0/24 maxlen: 24
178.173.218.0/24 maxlen: 24
178.173.219.0/24 maxlen: 24
178.173.220.0/24 maxlen: 24
178.173.221.0/24 maxlen: 24
178.173.222.0/24 maxlen: 24
178.173.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:3a:31:2e:6f:3c:0f:95:ac:c1:2e:01:95:3b:93:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Jul 30 06:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0249cfe10f262ca08bbdd5bb32fd25fbbff2c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:9d:dd:e4:71:3d:b4:6e:58:18:a7:69:5a:
87:03:7c:b2:87:57:6f:7a:5e:74:7d:a3:ca:fb:8e:
e4:25:4f:fe:5b:38:04:3d:f3:5b:a6:b5:cc:89:93:
9f:2a:ea:c8:4a:07:a4:bd:77:ac:a8:f9:73:ea:0b:
83:6c:33:48:95:df:d3:df:b8:ce:df:1c:3b:2f:29:
94:64:be:89:93:75:d8:0c:f1:4f:e2:96:85:5f:78:
37:74:42:dd:56:52:aa:22:d4:f1:56:65:d7:8f:d2:
1b:cc:c0:10:6a:7e:3e:0d:fb:1e:6e:12:7e:26:5b:
04:4c:29:48:0e:a5:19:05:a3:06:e0:4a:94:69:51:
85:b7:48:ab:03:16:73:f1:9d:fd:f3:53:b0:0a:49:
4a:31:1f:06:59:1e:47:79:f9:d3:6f:1c:b6:c4:94:
1c:25:6e:c3:cf:ad:ab:65:46:2e:20:6d:ac:b2:10:
0b:9c:e5:63:a8:72:da:34:a3:91:d7:cc:d5:93:e6:
f6:e5:b6:ef:76:9f:6d:6d:8d:bb:2d:23:31:0c:6e:
93:7f:b0:a1:42:59:d9:87:06:26:aa:92:9f:ae:71:
0a:a5:69:69:ad:89:05:e9:a1:7b:50:06:7c:ce:0c:
23:6c:df:e6:fd:d1:bd:2d:2b:52:aa:9e:43:c3:c0:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:CF:E1:0F:26:2C:A0:8B:BD:D5:BB:32:FD:25:FB:BF:F2:C7:B8
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/AknP4Q8mLKCLvdW7Mv0l-7_yx7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.128.0-178.173.151.255
178.173.160.0-178.173.223.255
Signature Algorithm: sha256WithRSAEncryption
09:c2:42:96:ed:ac:6b:4f:1c:45:3c:69:4c:04:9f:3b:2d:7a:
01:f9:90:23:03:e4:93:66:e8:55:73:9b:b0:5a:7a:81:60:bc:
59:41:33:97:54:a1:b8:20:bd:95:f3:61:a4:6f:4d:f0:8c:1e:
7c:44:1a:f0:9d:d0:b0:49:45:75:cc:84:dd:4a:b1:31:6c:e0:
d6:f8:3d:0a:a0:d7:02:3a:ff:ef:8a:19:b4:20:14:23:fa:58:
d7:00:67:6b:57:8f:62:d7:db:10:30:2f:19:24:dd:96:b2:79:
59:3e:a5:8a:71:e6:59:53:73:26:22:14:eb:15:99:68:f0:d9:
ff:01:04:3f:2a:ab:98:16:7d:6a:be:77:32:2d:b4:45:55:ab:
ee:ee:60:cf:33:4c:7e:e3:ac:d4:ab:f6:17:80:d9:a0:fd:e7:
9b:85:07:6a:ba:f3:a2:18:6c:61:5b:a7:ea:c2:8f:c2:6b:1b:
02:1a:25:5b:8f:b5:ca:76:4a:fd:1c:7f:13:af:e2:c2:f6:a7:
67:19:d0:97:e1:ba:78:cb:d3:f9:61:12:28:c4:15:32:21:df:
2c:b3:00:d3:be:ac:4b:96:e9:fc:f7:e3:30:e0:29:e9:25:c9:
e9:9f:b5:f3:4e:0f:f5:e1:f7:af:87:af:e2:d5:4d:33:89:4a:
98:50:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:47 2025 by rpki-client