Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/Ubvjm51GqrFCwzbf_mxHZYqoudM.roa
File: Ubvjm51GqrFCwzbf_mxHZYqoudM.roa (raw, json)
Hash identifier: VolrnbGheTEK7dTNi4ziUdbyfqRJaNVDiP4UDLBEliQ=
Subject key identifier: 51:BB:E3:9B:9D:46:AA:B1:42:C3:36:DF:FE:6C:47:65:8A:A8:B9:D3
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 018CC2DB5BE4477FC9683F7B8A383A01C28C
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/Ubvjm51GqrFCwzbf_mxHZYqoudM.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211956
IP address blocks: 78.40.22.0/24 maxlen: 24
78.40.23.0/24 maxlen: 24
2a07:4247:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5b:e4:47:7f:c9:68:3f:7b:8a:38:3a:01:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51bbe39b9d46aab142c336dffe6c47658aa8b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:e7:8a:de:f2:d7:d4:28:d6:b2:36:0f:d9:
fd:7d:82:c4:09:9c:1f:a6:26:7c:bb:a3:ba:31:39:
81:d1:33:85:60:7e:af:fb:8c:74:69:d1:0d:ee:d5:
62:9a:62:2f:5d:f6:14:df:d8:15:e8:88:20:62:b9:
1f:51:9d:1c:72:49:9f:de:6f:1c:32:52:2e:b9:08:
fe:47:21:3e:8c:fd:14:ed:8b:17:a0:85:dc:48:dd:
38:81:32:a3:5b:81:c8:24:03:ba:8a:03:27:dd:9e:
72:5d:4e:6a:3d:42:c2:c7:de:79:88:c3:2b:6a:9b:
62:0f:38:b0:b2:b5:96:8d:60:d6:23:89:65:94:60:
1d:ba:8d:c2:75:d4:ae:b2:31:1d:1a:0d:aa:55:2e:
42:d8:f5:68:8c:bb:48:b7:30:cc:0f:09:81:10:21:
7f:9a:6c:23:8c:90:72:2b:60:4e:42:57:07:24:ba:
d6:98:33:7a:ae:2b:8e:f4:15:25:41:08:0c:bb:d8:
58:89:8d:71:fc:51:a1:d5:b1:9a:0d:a5:fc:00:73:
4b:ac:96:3c:d2:8b:13:f7:c5:1e:d9:39:62:07:58:
a2:53:a0:9c:fe:3f:e6:c4:ae:a5:11:43:c3:c6:b3:
22:95:8b:ba:34:ab:14:85:b1:70:40:8c:5f:c0:40:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:E3:9B:9D:46:AA:B1:42:C3:36:DF:FE:6C:47:65:8A:A8:B9:D3
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/Ubvjm51GqrFCwzbf_mxHZYqoudM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.22.0/23
IPv6:
2a07:4247:3000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:8b:ef:04:44:ce:d6:c6:40:5e:fc:1b:12:fe:e7:8a:12:5b:
e1:ca:76:5e:de:1f:c7:28:27:89:2d:f0:32:3b:20:92:1c:5d:
84:41:e8:47:6d:d3:30:1b:2f:91:50:d1:3b:47:08:98:06:c4:
56:33:cb:ab:85:a2:ca:16:4c:83:b1:0c:97:23:e0:90:c8:22:
d0:fe:12:6d:95:51:cb:42:59:92:99:17:9f:44:65:89:5c:cc:
46:62:2c:12:85:ca:e4:cc:a2:00:aa:f6:35:d1:b4:d8:23:71:
84:5d:14:43:37:52:ac:ab:49:0e:dc:cc:ce:05:86:cb:80:21:
59:d9:5e:b1:e4:12:c0:05:58:48:74:c1:87:8a:09:81:9c:c9:
1b:e6:1f:66:10:f0:3f:6c:5d:e5:97:7b:99:5d:d8:10:88:53:
ce:58:a6:da:ce:97:27:20:47:25:b3:97:f4:10:12:de:a5:22:
3c:35:88:e9:0b:d3:43:fd:8a:47:60:eb:85:33:94:b3:cd:9e:
a5:27:61:a2:1f:3c:7f:2f:3b:62:31:a5:cd:87:c7:20:b0:20:
ae:99:75:cb:75:5c:22:8a:f2:e3:c1:e4:c0:f7:6c:63:09:76:
c2:8c:d1:af:85:a5:b6:45:0e:fe:68:10:f7:9c:97:51:26:c7:
09:7f:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:13 2025 by rpki-client