Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/7JqGv8pjYzAP7qZM0IsuuWEpCTE.roa
File: 7JqGv8pjYzAP7qZM0IsuuWEpCTE.roa (raw, json)
Hash identifier: ecGzHfbGycdlTYRsLIPfFE7X9blazXjsK+bP5U76w6o=
Subject key identifier: EC:9A:86:BF:CA:63:63:30:0F:EE:A6:4C:D0:8B:2E:B9:61:29:09:31
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0194274777F8516112FF836AC69599840953
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/7JqGv8pjYzAP7qZM0IsuuWEpCTE.roa
Signing time: Thu 02 Jan 2025 13:49:42 +0000
ROA not before: Thu 02 Jan 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215232
IP address blocks: 178.236.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 08:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:77:f8:51:61:12:ff:83:6a:c6:95:99:84:09:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jan 2 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9a86bfca6363300feea64cd08b2eb961290931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:7e:f6:f9:9f:61:dd:cc:22:d6:c2:6e:b4:
be:b3:23:52:78:5e:44:35:2e:9d:94:8b:d0:8e:e1:
e9:c5:aa:61:a5:0c:fc:6e:ee:0b:13:cf:35:2a:79:
7e:b3:80:43:13:54:8b:f3:6b:cc:eb:7f:38:6f:17:
cc:97:74:ac:b8:d3:2e:f8:65:c3:1b:9a:df:c0:d1:
7e:66:96:c9:6d:12:ab:24:1b:a3:46:85:51:87:a7:
e3:1d:c8:57:14:c6:a9:76:05:3a:58:66:e8:f0:01:
c7:b5:80:0f:e7:37:d2:49:13:e2:01:e7:38:29:90:
0a:c2:11:8b:52:63:bc:24:8f:ff:c8:99:8a:56:f4:
2f:94:b4:bc:55:30:c3:d7:fd:1c:84:ce:8b:55:83:
88:10:33:a4:46:48:1a:5c:28:05:39:39:ef:04:26:
2d:51:1f:f9:bd:dd:a2:07:a4:24:22:88:3b:15:78:
29:f4:e4:e7:2c:47:28:69:35:37:01:3d:61:61:cc:
85:d2:fe:fd:52:ad:24:31:b0:44:6b:79:1a:63:38:
5b:30:87:6c:e4:35:c5:02:a0:07:06:48:7c:e4:7e:
f0:ee:2b:44:10:6a:0e:67:49:1f:f7:82:2f:2e:a4:
07:30:59:98:10:9f:ec:79:0c:79:ef:25:98:b0:a7:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:86:BF:CA:63:63:30:0F:EE:A6:4C:D0:8B:2E:B9:61:29:09:31
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/7JqGv8pjYzAP7qZM0IsuuWEpCTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.243.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0a:88:39:02:f5:8e:c4:07:53:e7:eb:cb:1e:aa:79:27:be:
3c:ae:26:af:1a:84:75:76:1c:2f:32:4d:74:36:18:27:d8:95:
b0:07:81:89:1a:d4:9c:55:64:c4:04:bc:1a:c5:4b:03:2a:05:
2b:30:f6:a3:81:b6:59:b7:42:be:d9:49:28:86:f3:3a:35:ed:
be:d9:63:f2:cf:7f:1a:3e:63:c9:0e:ea:2c:1e:c0:61:37:7e:
de:a3:da:5b:f1:90:69:5f:9d:87:fb:59:cf:a7:65:50:40:1f:
6b:4e:54:da:f0:c2:79:ee:79:52:a1:9f:3f:18:0d:1a:30:16:
32:f4:fd:60:8a:99:18:f5:b0:58:68:7b:72:8f:61:d9:31:91:
25:d0:1f:9f:57:db:e7:42:26:83:c7:25:19:b1:cc:5e:27:d7:
f6:13:e4:ef:7b:48:7a:96:52:40:02:62:2c:72:19:a0:4e:08:
e8:90:fa:80:26:db:b3:b9:c5:5c:ea:db:2e:80:3d:49:ec:53:
66:bb:f9:34:1d:57:5d:df:15:3e:89:6b:8b:d8:ba:3b:04:da:
42:98:71:10:eb:5f:61:a3:aa:37:bf:91:f8:7c:53:18:fb:44:
c8:11:be:3c:db:16:77:d1:d6:f6:65:cf:6d:c8:c6:ea:5f:64:
54:67:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:34:27 2025 by rpki-client