Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vZxtol15l3lnF6Fv7qhQmiqNhS0.roa
File: vZxtol15l3lnF6Fv7qhQmiqNhS0.roa (raw, json)
Hash identifier: il5uYhRLFuoZeXj/TtihNeoT5CyBP5FERZN7FpGBjEQ=
Subject key identifier: BD:9C:6D:A2:5D:79:97:79:67:17:A1:6F:EE:A8:50:9A:2A:8D:85:2D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194035D61731AE63847DD1F98CA9F92D051
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vZxtol15l3lnF6Fv7qhQmiqNhS0.roa
Signing time: Thu 26 Dec 2024 14:27:18 +0000
ROA not before: Thu 26 Dec 2024 14:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18464
IP address blocks: 178.173.224.0/24 maxlen: 24
178.173.225.0/24 maxlen: 24
178.173.226.0/24 maxlen: 24
178.173.227.0/24 maxlen: 24
178.173.228.0/24 maxlen: 24
178.173.230.0/24 maxlen: 24
178.173.231.0/24 maxlen: 24
178.173.232.0/22 maxlen: 22
178.173.236.0/24 maxlen: 24
178.173.241.0/24 maxlen: 24
2001:16c0:16c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:5d:61:73:1a:e6:38:47:dd:1f:98:ca:9f:92:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 26 14:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd9c6da25d7997796717a16feea8509a2a8d852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:86:49:0e:b6:ad:10:b0:fb:82:5e:45:cd:
20:9b:b9:2c:0f:17:0d:1d:14:8f:f4:a4:92:e4:b1:
71:48:3d:69:e0:90:ce:d7:22:5c:1e:53:31:3b:a2:
d5:27:e9:cb:ea:49:14:b9:ed:f9:3d:d1:48:b2:a9:
e1:07:cf:58:9c:e7:ef:c3:fa:2c:18:93:6e:84:3c:
db:65:6b:eb:70:61:a0:bc:9c:d3:60:f8:06:2c:ad:
7e:21:36:c8:80:95:c3:a8:7d:ad:b8:a3:70:1d:c8:
d5:19:bc:2c:1d:9d:3d:9b:41:3d:64:40:f2:67:57:
54:c6:6b:13:1d:e1:d1:e4:ef:3b:05:b6:51:23:fb:
38:1b:4f:e7:f2:37:1d:d7:04:8d:46:33:dc:aa:f8:
8a:e8:7f:8e:02:25:d3:fb:3b:a8:cf:ed:75:35:cd:
26:12:9d:14:73:2a:cb:86:18:07:bb:dc:71:6e:d8:
e1:95:3a:33:01:6a:f9:00:ee:7b:62:4e:62:f3:b0:
66:98:3c:08:9f:16:4d:10:15:fd:c2:a0:20:e0:8d:
63:24:c4:6c:dd:c8:0f:a4:13:b5:83:a1:92:f6:d8:
b3:76:c6:24:82:a8:26:7c:f1:46:f7:92:e2:c1:0b:
9b:33:72:e4:bf:20:ad:14:d2:55:11:3a:ac:a3:ff:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:6D:A2:5D:79:97:79:67:17:A1:6F:EE:A8:50:9A:2A:8D:85:2D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vZxtol15l3lnF6Fv7qhQmiqNhS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.224.0-178.173.228.255
178.173.230.0-178.173.236.255
178.173.241.0/24
IPv6:
2001:16c0:16c0::/48
Signature Algorithm: sha256WithRSAEncryption
55:81:46:80:de:15:53:04:41:0d:41:b6:17:ff:f7:f0:f3:9c:
cc:7f:d9:72:cf:6a:4d:be:81:8f:24:e6:1d:45:29:b4:68:4e:
32:22:fa:0e:6f:f8:18:29:d3:6a:2d:7e:50:26:91:8f:7f:d5:
12:6b:7a:f7:7c:62:c9:8c:f0:50:67:a2:84:52:55:ee:a4:57:
04:86:b2:5b:bd:d4:3b:7d:db:68:7e:e8:40:1a:dc:18:5f:3d:
25:ca:32:3a:df:3b:ab:19:50:bd:73:58:ff:10:e8:df:ab:b0:
04:fe:b8:ba:d7:6a:b8:ad:ef:9e:6d:69:67:7c:74:6b:af:ae:
68:5a:6f:3b:9d:33:3a:2d:e7:0b:07:40:d4:c9:55:aa:d0:26:
99:e9:2e:35:12:bc:e7:7a:92:41:9e:b2:4a:ac:a2:48:d2:56:
1e:a0:4e:88:ff:86:82:7f:3f:ec:92:cb:4b:60:ad:61:3d:df:
6c:5d:b9:26:2f:34:b3:eb:2d:fc:83:e2:73:6e:7c:ab:3f:a7:
be:dc:c7:f6:10:d7:5c:90:11:6b:52:fc:92:c3:0a:be:71:bd:
58:49:0c:e9:63:d6:bc:a1:0d:0e:8e:3b:0f:02:7b:c5:0a:cf:
4d:e2:fa:2a:27:b6:69:f2:00:92:41:c0:d3:0d:7e:35:9a:78:
1c:21:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:48:55 2025 by rpki-client