Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KljmqX9NPuSI1gIFXakkkTaHJ7Q.roa
File: KljmqX9NPuSI1gIFXakkkTaHJ7Q.roa (raw, json)
Hash identifier: MzAjnED61555upsZrYbBq1B1zLj6w7W6WMPO1GIHq6k=
Subject key identifier: 2A:58:E6:A9:7F:4D:3E:E4:88:D6:02:05:5D:A9:24:91:36:87:27:B4
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955A8F390CECAB2583D585B36ADAB1
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KljmqX9NPuSI1gIFXakkkTaHJ7Q.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57790
IP address blocks: 188.215.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5a:8f:39:0c:ec:ab:25:83:d5:85:b3:6a:da:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a58e6a97f4d3ee488d602055da92491368727b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:21:eb:0e:18:44:4d:ac:48:99:02:f2:68:
d8:68:b7:93:1a:7b:02:e0:0c:ff:6b:df:a6:6f:af:
c2:45:16:74:21:45:81:58:03:56:3b:dd:2d:e6:34:
e1:c0:80:1d:10:38:90:83:0f:53:f8:3c:4e:e0:c2:
28:d4:a3:3d:e4:a1:68:3e:73:70:c5:6b:07:93:66:
03:6d:19:6e:12:1e:00:7d:44:81:a4:d3:d7:ef:2f:
da:01:67:d6:68:12:30:18:7e:96:d9:48:21:bb:94:
86:54:1f:33:e8:35:aa:41:ab:c8:d6:a5:86:a4:94:
c7:13:cd:a2:ca:5c:59:f1:a2:86:70:78:dd:56:07:
a6:51:6e:b6:c7:dc:8e:f0:28:03:41:51:7a:1d:0f:
a6:80:71:75:6b:46:88:e3:b9:29:14:d2:2d:59:3a:
da:ff:de:2d:69:ea:c4:90:3b:e1:65:95:42:8c:4b:
ef:52:24:18:17:be:4d:cc:19:6c:d4:34:45:62:95:
fc:da:c8:fc:ea:bb:6e:8e:52:17:8b:ba:70:72:69:
4b:15:68:21:a2:52:7b:13:0b:ec:e6:ee:ed:1e:2b:
4d:51:71:57:e4:e7:59:29:b0:ef:d5:bc:e1:ba:e4:
78:d6:03:fe:c1:2d:d7:bf:37:a9:b5:a2:aa:be:88:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:E6:A9:7F:4D:3E:E4:88:D6:02:05:5D:A9:24:91:36:87:27:B4
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KljmqX9NPuSI1gIFXakkkTaHJ7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.78.0/24
Signature Algorithm: sha256WithRSAEncryption
22:18:7f:3e:63:c6:e1:7a:79:31:45:02:cf:47:1b:b1:2a:af:
46:fe:f5:3b:c9:cf:cb:12:69:66:7a:85:ee:39:9f:64:16:cd:
cb:1e:43:00:4b:5f:8a:af:ac:08:26:53:da:ba:ea:2c:65:f1:
2f:59:96:b2:ac:a8:40:1b:b8:9d:30:e1:1f:c9:39:37:f5:1d:
5e:33:77:7e:99:f8:ad:b9:8d:12:ab:24:e7:31:f5:17:c6:60:
0a:a8:c7:fe:8e:01:23:7d:37:ca:3b:0c:74:35:95:db:63:16:
66:7a:5c:43:01:79:73:c4:88:66:a1:be:2f:7e:04:3e:9a:78:
27:c3:ea:f0:0f:76:06:f1:7b:df:bc:f0:55:a7:98:aa:c4:c0:
fb:f1:45:eb:e3:36:b4:5c:c4:b6:54:2d:d3:a3:89:50:37:9c:
60:23:88:3e:20:ea:eb:9a:b3:b1:57:8b:d4:66:5b:cc:9d:1e:
2d:cc:5d:fe:7d:59:ff:ea:c7:40:b8:c5:59:bd:d4:b3:2a:c0:
ec:f8:3d:50:e0:af:88:fd:94:a1:30:b7:38:3d:44:ba:e1:01:
56:3c:6a:8d:1a:2c:1f:db:ac:e2:8a:aa:d9:3e:65:ce:9b:f3:
cb:f7:1d:74:a8:47:2f:3d:03:fd:50:da:ce:46:0a:27:62:e7:
8e:e6:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:16 2025 by rpki-client