Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJx5PzrQhGg93biZfTFJWSBknnY.roa
File: rJx5PzrQhGg93biZfTFJWSBknnY.roa (raw, json)
Hash identifier: nnAXmFCN1GoW4aa54sG9LDp/eExJdTi4ZQxp0yZ/F4w=
Subject key identifier: AC:9C:79:3F:3A:D0:84:68:3D:DD:B8:99:7D:31:49:59:20:64:9E:76
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 018CC2DB4F384793697786D418B2D0C7798E
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJx5PzrQhGg93biZfTFJWSBknnY.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16019
IP address blocks: 178.211.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4f:38:47:93:69:77:86:d4:18:b2:d0:c7:79:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac9c793f3ad084683dddb8997d31495920649e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:5b:90:9b:cf:04:b4:04:47:2b:ff:2b:25:
d6:9f:ca:28:ce:ca:b6:41:5e:5d:aa:d0:6d:ab:db:
8b:b6:53:38:3b:36:6c:37:58:16:11:a3:f3:0a:5b:
5d:b6:05:1d:4b:2c:c6:ef:0b:5a:a8:cb:1a:3d:44:
d3:db:7b:43:8b:b5:44:51:7a:1d:e2:25:05:2e:5d:
5d:1c:92:65:8c:2d:9a:d2:41:f3:6e:1e:8d:13:ad:
0d:24:02:a3:e3:2d:aa:70:a6:be:6e:ef:8f:21:3d:
8b:c2:66:b6:76:d3:d3:e1:39:82:8e:aa:af:8f:d4:
a5:db:12:cc:52:e1:4b:98:fd:a4:07:96:f2:07:f2:
62:1e:05:d0:1d:4b:3e:86:12:b8:b3:db:89:90:5c:
93:b9:4c:49:7e:f3:95:e7:c6:3e:61:79:6a:9b:a4:
b0:24:c9:85:e8:76:a5:8b:66:d0:52:3e:de:a8:28:
1e:7e:4c:58:04:cc:e3:82:31:0b:3d:71:72:f9:98:
6b:db:a9:b1:f0:26:a6:52:92:b7:f5:ad:67:b1:90:
ae:a8:93:16:3f:b5:e4:65:32:1c:d4:99:28:c5:39:
00:89:b2:b0:42:f1:c6:da:ed:69:a4:a3:d7:3a:3a:
68:ef:c7:20:c9:70:67:03:2f:5c:31:1f:33:9b:3c:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:79:3F:3A:D0:84:68:3D:DD:B8:99:7D:31:49:59:20:64:9E:76
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJx5PzrQhGg93biZfTFJWSBknnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9b:8c:a7:6f:b7:e9:95:fb:db:0a:b1:7d:b4:72:fc:21:16:
52:b8:fd:cb:ea:c7:4b:81:f8:9d:f0:e0:f8:0e:06:f3:1d:07:
c9:82:d3:6a:0d:67:4e:42:a0:58:63:df:af:15:63:f9:b4:66:
9f:bd:ec:6e:24:e6:56:7d:5d:55:76:dc:45:42:38:0c:b6:5b:
a6:99:1e:42:0b:92:12:11:ae:73:55:8f:70:c4:46:b4:d0:07:
36:50:34:8a:35:4f:99:0c:5c:61:c0:86:fa:46:c4:3d:d6:d1:
70:20:1e:ae:92:67:d8:b4:a1:dc:52:53:09:96:01:f5:42:13:
ec:6d:6c:4f:9f:e2:f0:d5:3e:2a:8d:1d:f0:49:01:ed:2c:a8:
bb:f5:c3:fd:c3:36:0d:4c:81:a8:88:93:e4:35:2b:26:a7:1f:
08:a2:af:db:12:88:f0:9f:6a:6b:c5:48:d6:8b:55:cc:9f:75:
43:66:6e:76:ff:da:3d:36:82:ca:14:ff:29:24:2e:6c:40:75:
a7:9e:7f:d4:2d:27:de:c5:a5:5c:ec:d0:3c:62:05:02:a2:c2:
ba:47:82:ef:85:db:e5:16:49:98:6c:fd:c2:0b:3d:bd:b2:d3:
53:88:e4:02:0f:31:5d:78:6a:a8:0f:e8:ac:6e:d6:93:87:9a:
7f:85:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:39:31 2025 by rpki-client