Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kiKkKIOWB5H2EEtAGy6Y2SracRo.roa
File: kiKkKIOWB5H2EEtAGy6Y2SracRo.roa (raw, json)
Hash identifier: QGS+t9W8culf4aU/WHAwUW9EW9TvD5iSbhx1SOVBI00=
Subject key identifier: 92:22:A4:28:83:96:07:91:F6:10:4B:40:1B:2E:98:D9:2A:DA:71:1A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01943B92BBFB80E4BC6C301D3254A1919C04
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kiKkKIOWB5H2EEtAGy6Y2SracRo.roa
Signing time: Mon 06 Jan 2025 12:24:19 +0000
ROA not before: Mon 06 Jan 2025 12:24:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18464
IP address blocks: 178.173.224.0/24 maxlen: 24
178.173.225.0/24 maxlen: 24
178.173.226.0/24 maxlen: 24
178.173.227.0/24 maxlen: 24
178.173.228.0/24 maxlen: 24
178.173.230.0/24 maxlen: 24
178.173.231.0/24 maxlen: 24
178.173.236.0/24 maxlen: 24
178.173.241.0/24 maxlen: 24
2001:16c0:16c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 13:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:92:bb:fb:80:e4:bc:6c:30:1d:32:54:a1:91:9c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 6 12:24:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9222a42883960791f6104b401b2e98d92ada711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:00:69:c3:85:97:7e:6d:6f:25:da:8e:36:
22:e2:62:2b:af:70:3a:44:87:d0:22:18:33:32:b8:
2a:8c:a8:92:7b:2c:a3:e0:21:e3:12:0e:fd:e5:33:
49:49:6b:f7:16:53:3c:cb:7d:a6:23:b1:64:72:53:
29:43:84:b7:56:27:83:fc:77:c4:bf:4d:3c:6a:83:
7d:7d:8e:38:fd:ab:bf:ef:f6:ff:70:91:80:42:ad:
f7:bc:65:3d:54:94:c7:34:44:e7:47:8b:f5:fa:03:
35:a2:1a:9f:42:ee:ce:07:e4:d3:c5:5b:2d:02:89:
2b:08:29:e8:a8:e3:8c:93:3f:18:02:57:39:6c:c9:
1f:4e:2a:97:43:1b:2c:11:ed:27:83:50:f8:c0:76:
93:c5:d9:15:7f:83:fc:89:7a:82:5a:d8:88:6f:b5:
11:24:5e:1f:36:8e:52:91:c7:97:98:df:8f:86:35:
fe:ab:d8:28:99:9f:c1:ed:fd:1b:ec:58:88:4d:9a:
10:a4:ef:c5:d4:05:34:94:ff:15:29:b2:7b:e4:91:
e2:10:ed:e4:9d:9b:6f:b6:11:62:28:58:30:7a:e0:
e3:de:9b:30:4b:a6:fe:42:b0:63:d7:91:7d:2d:24:
da:d1:6c:b9:c9:74:bc:ea:cf:b5:3a:37:71:98:04:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:22:A4:28:83:96:07:91:F6:10:4B:40:1B:2E:98:D9:2A:DA:71:1A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kiKkKIOWB5H2EEtAGy6Y2SracRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.224.0-178.173.228.255
178.173.230.0/23
178.173.236.0/24
178.173.241.0/24
IPv6:
2001:16c0:16c0::/48
Signature Algorithm: sha256WithRSAEncryption
73:30:35:cd:a9:3b:9e:61:12:43:0d:9e:0b:59:41:00:f9:7a:
11:7c:56:cc:07:d6:f4:99:73:41:01:93:33:b0:86:27:89:5a:
ed:b8:f9:65:e8:41:82:63:30:5a:ca:a7:f7:12:7a:90:5e:97:
68:c3:a3:b9:a8:e1:71:fd:83:57:b6:53:1c:06:65:c7:88:86:
85:2c:4e:73:21:9a:53:a0:7e:01:63:77:b8:b2:04:56:52:49:
f0:7a:52:67:e8:e9:7c:c7:e5:e7:4a:06:b7:15:9a:6c:98:f0:
ab:b6:92:85:e3:63:b7:21:e5:15:cd:19:a6:5b:60:50:b5:78:
f4:c6:85:19:c5:0b:6e:57:40:7d:da:ab:94:8b:4a:26:e6:7e:
31:8f:27:9e:58:d2:87:9c:49:8f:fa:fe:a7:f8:fc:60:f3:28:
30:70:37:a8:5f:ce:05:e4:bb:e2:be:d1:61:28:4a:26:86:47:
9f:96:67:90:b7:61:ec:47:aa:6b:27:8d:a7:70:07:cd:72:8f:
60:b8:96:a0:f2:1e:66:d7:b5:e3:85:c7:10:12:09:74:dd:f5:
af:3b:39:93:99:b3:2e:ce:49:7c:cd:9f:c6:00:db:33:e1:b3:
65:48:4b:c4:ce:83:30:ee:7c:a7:01:40:1f:05:1c:45:47:ec:
5a:df:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:46:18 2025 by rpki-client