Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/pZYOYZNUVGu9N8qDuADSVSK2HrA.roa
File: pZYOYZNUVGu9N8qDuADSVSK2HrA.roa (raw, json)
Hash identifier: doR+6cRBP9/yN7FDmkczReebF2qQP2ddqHK2v15UNYM=
Subject key identifier: A5:96:0E:61:93:54:54:6B:BD:37:CA:83:B8:00:D2:55:22:B6:1E:B0
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 018CC8DE5433DD849032254D2CA0CA599C9C
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/pZYOYZNUVGu9N8qDuADSVSK2HrA.roa
Signing time: Tue 02 Jan 2024 06:31:02 +0000
ROA not before: Tue 02 Jan 2024 06:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6823
IP address blocks: 178.251.43.0/24 maxlen: 24
178.251.44.0/24 maxlen: 24
178.251.40.0/24 maxlen: 24
178.251.40.0/21 maxlen: 21
178.251.42.0/24 maxlen: 24
178.251.41.0/24 maxlen: 24
178.251.45.0/24 maxlen: 24
178.251.47.0/24 maxlen: 24
178.251.46.0/24 maxlen: 24
37.202.48.0/21 maxlen: 21
37.202.49.0/24 maxlen: 24
37.202.48.0/24 maxlen: 24
37.202.51.0/24 maxlen: 24
37.202.50.0/24 maxlen: 24
37.202.55.0/24 maxlen: 24
37.202.53.0/24 maxlen: 24
37.202.52.0/24 maxlen: 24
37.202.54.0/24 maxlen: 24
2a01:6be0::/32 maxlen: 32
2a01:6be0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:54:33:dd:84:90:32:25:4d:2c:a0:ca:59:9c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Jan 2 06:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5960e619354546bbd37ca83b800d25522b61eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:bb:ba:2d:e0:fd:c9:fc:e7:fa:f7:5d:79:
56:2a:fa:cf:e3:53:f6:98:d1:54:74:3c:20:26:6f:
44:4f:e8:e8:19:ea:13:53:0a:e1:46:e8:91:a1:30:
56:ce:1b:da:bb:2d:20:84:6d:a6:e6:9c:37:a3:03:
ae:65:3a:cc:5c:9a:cb:b1:93:b4:d0:3b:bb:ce:bb:
14:3b:0f:65:10:1a:f8:ec:9b:db:03:2c:5e:16:c4:
ed:14:4c:b2:fc:1d:f9:43:d5:a4:40:b7:c9:80:ec:
82:01:38:68:96:7e:78:63:49:2b:04:80:8f:40:8d:
7e:85:59:0b:cc:98:18:61:bf:5e:8b:c1:6e:24:74:
fe:14:59:df:39:43:78:b0:41:5f:6f:6b:e7:fa:8f:
4c:fe:af:1b:06:30:51:6a:24:5f:cb:0f:c4:09:86:
85:d2:04:1a:98:e8:75:33:3d:bf:71:6a:22:11:d1:
a7:de:9a:3b:74:6f:f1:4a:7f:1c:43:13:cc:bf:65:
7b:82:f1:61:92:a3:47:8d:1a:2a:a1:f5:2f:97:9d:
12:44:b4:5f:2c:29:5d:bb:5c:4a:99:20:19:84:0d:
d6:90:73:de:53:7b:8f:bf:31:1a:ac:bc:33:9b:1b:
f9:3b:84:63:f6:d4:5d:26:68:df:4c:eb:8a:7e:7c:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:0E:61:93:54:54:6B:BD:37:CA:83:B8:00:D2:55:22:B6:1E:B0
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/pZYOYZNUVGu9N8qDuADSVSK2HrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.48.0/21
178.251.40.0/21
IPv6:
2a01:6be0::/32
Signature Algorithm: sha256WithRSAEncryption
21:63:dd:b8:0e:db:b0:88:e4:d4:31:89:2b:73:0a:f2:31:a2:
bc:2c:6e:9d:98:10:07:e6:91:d4:c5:07:d6:60:b7:70:16:b0:
8b:9c:f3:e3:92:f9:88:6b:3a:7a:88:9f:60:91:60:7b:42:0e:
cc:5c:f6:2c:d9:b3:94:96:24:41:e5:5a:65:3b:28:b9:85:76:
c6:51:9e:1b:f8:52:61:d8:7a:3e:ff:f5:b3:89:d3:92:a0:79:
99:0e:4f:68:f7:f4:da:f7:0c:87:c2:1e:2f:13:a9:27:92:7d:
09:95:97:b3:32:69:6c:86:6f:cd:79:99:8f:e9:3b:87:fe:84:
00:48:1c:2e:86:65:e2:6b:8a:23:52:90:97:9e:8b:80:68:ac:
db:3c:7e:0f:e3:6c:e6:2b:e6:c4:59:5e:53:0c:55:a6:1b:49:
3d:f7:a5:4d:d1:be:1a:78:48:17:0a:0e:89:a8:18:47:f2:98:
a0:b7:1a:53:e0:e3:13:c6:01:0e:52:73:02:a9:9f:d4:45:9a:
c4:df:1d:44:f5:ed:85:d5:2a:fc:5a:9b:24:d3:cc:de:6c:cc:
7c:f3:95:8a:b0:2d:f8:0c:b5:1d:0f:75:71:d2:b4:af:ad:3a:
b0:c8:11:51:83:ff:ee:18:ae:99:03:41:09:e9:da:ae:01:df:
3b:49:44:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:25 2025 by rpki-client