Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/42K9axA22w_1HMFMoswMWPTkCe0.roa
File: 42K9axA22w_1HMFMoswMWPTkCe0.roa (raw, json)
Hash identifier: AkndXe/h9bWFHfvc9aWpCCs03K40gRkRLhKJweUaKqs=
Subject key identifier: E3:62:BD:6B:10:36:DB:0F:F5:1C:C1:4C:A2:CC:0C:58:F4:E4:09:ED
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194BEB342D957EC6BABC4C762AC98FC62BA
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/42K9axA22w_1HMFMoswMWPTkCe0.roa
Signing time: Fri 31 Jan 2025 23:30:06 +0000
ROA not before: Fri 31 Jan 2025 23:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 178.173.232.0/22 maxlen: 24
188.209.156.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 02:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:be:b3:42:d9:57:ec:6b:ab:c4:c7:62:ac:98:fc:62:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 31 23:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e362bd6b1036db0ff51cc14ca2cc0c58f4e409ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:73:d2:5d:46:89:6e:7a:8f:d6:96:6f:1f:2c:
4a:05:ef:ba:97:9e:1b:22:d3:04:1f:c1:a4:88:ac:
a4:17:c1:c6:7b:2c:25:f6:93:e9:b6:d0:54:e7:f1:
90:82:29:5f:41:5c:74:c6:a9:f7:cc:40:6c:95:f5:
8d:4d:89:24:e0:4c:9d:87:7d:8c:35:b7:98:75:29:
f6:0e:39:4b:9c:06:30:f7:1d:ee:60:83:9e:fc:8f:
eb:0b:06:c6:0a:39:67:e2:71:87:9f:67:a7:14:61:
71:f4:5a:ce:05:a4:0c:15:5d:4b:27:a3:56:39:ae:
99:ec:85:a7:53:02:33:91:9e:38:78:20:d4:1e:49:
31:1d:b0:a7:3c:e9:97:7f:e3:db:e7:07:ea:c9:5f:
41:bd:72:6f:db:7a:16:b8:d7:63:ad:dd:fb:34:68:
0a:ed:49:ef:25:2d:69:9b:8f:6f:26:60:31:11:d0:
46:09:31:32:8a:d4:9c:d9:f2:04:7b:1a:3a:4b:eb:
cb:6e:5d:20:da:58:69:3e:48:a7:bf:ca:a4:07:6e:
33:dd:01:d7:4d:0a:4d:4a:52:ae:ce:a2:47:b0:77:
2c:14:6e:4c:8b:ee:2c:db:be:90:c6:74:2b:5a:07:
ed:d2:8b:e8:5b:76:38:3b:9e:b4:63:4d:d2:59:30:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:BD:6B:10:36:DB:0F:F5:1C:C1:4C:A2:CC:0C:58:F4:E4:09:ED
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/42K9axA22w_1HMFMoswMWPTkCe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.232.0/22
188.209.156.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:78:bc:f2:ce:e7:85:fb:11:12:a4:a4:9a:55:da:f2:46:d4:
ea:77:15:1f:b7:e9:29:10:70:53:b3:c3:08:d4:16:8d:74:7b:
4a:10:e8:89:4f:26:f1:7a:8f:89:04:f8:cb:74:b8:b0:20:ab:
72:4c:3c:0e:3f:0c:f1:e5:dd:52:25:03:9d:07:17:8b:a2:f6:
6c:6a:ef:c8:24:ef:10:ac:3e:5b:31:17:5c:72:9a:d1:55:8a:
09:a2:df:55:1b:af:6f:7c:1f:44:81:f8:e7:b0:d5:46:14:da:
ab:01:9c:47:6f:57:83:91:f2:f6:48:3c:21:e1:10:17:78:5c:
cd:6d:38:d1:ac:a1:42:56:91:c6:eb:56:95:e3:50:f6:4a:bd:
ac:b5:0b:6b:9f:be:54:25:09:92:32:93:20:73:8a:60:f9:0d:
3e:a2:70:cc:51:6e:e9:7e:13:59:71:1a:f1:e6:8d:e6:a6:a1:
6e:80:dd:a4:08:57:e1:a3:b1:17:a6:06:ca:c7:90:0e:2f:71:
ce:16:39:75:32:b1:3d:eb:f4:19:2f:f4:de:94:ca:a0:1a:8a:
dc:50:d8:8e:b3:81:98:a8:6a:f5:89:41:a5:57:c8:b8:e4:dc:
f7:ff:f9:54:f5:23:e5:65:dc:db:f7:1b:c6:d4:80:66:fd:34:
b1:b5:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:41:28 2025 by rpki-client