Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/1-2cc4_ZSuvfRuoeAjQUcsfV1i7Q.roa
File: 1-2cc4_ZSuvfRuoeAjQUcsfV1i7Q.roa (raw, json)
Hash identifier: fawD4FqkFWnHF6sY0RBlTT3XrUrJ+60m4V3Xt+DUcsY=
Subject key identifier: FB:67:1C:E3:F6:52:BA:F7:D1:BA:87:80:8D:05:1C:B1:F5:75:8B:B4
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 018F3A9A38FA89BD17A7A79FD86C760E6884
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/1-2cc4_ZSuvfRuoeAjQUcsfV1i7Q.roa
Signing time: Thu 02 May 2024 18:38:56 +0000
ROA not before: Thu 02 May 2024 18:38:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208086
IP address blocks: 78.41.47.0/24 maxlen: 24
2a06:11c0:3::/48 maxlen: 48
2a06:11c0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:9a:38:fa:89:bd:17:a7:a7:9f:d8:6c:76:0e:68:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: May 2 18:38:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb671ce3f652baf7d1ba87808d051cb1f5758bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:68:6b:4f:6a:c1:66:5e:e5:b0:20:4f:21:
c2:d9:f9:21:6f:6b:22:29:46:7e:58:62:1f:5c:31:
99:58:97:e7:9b:49:e7:46:50:60:e8:bf:b5:15:01:
8d:cf:4d:ca:20:35:74:58:0c:8a:5f:59:a8:f3:12:
18:cf:2d:2a:24:13:01:4a:87:dd:30:e3:05:b7:3c:
7c:4f:93:16:13:1f:9e:e2:4c:65:fb:ae:de:2f:cd:
1e:53:72:86:dd:83:8f:ea:98:0f:98:e8:51:1b:d3:
ee:50:09:17:86:9a:ab:b2:26:5b:d2:b7:3c:1f:30:
6b:2c:c4:f7:ad:ed:31:7e:47:96:c9:d9:16:d6:bc:
eb:f9:b6:41:ba:d3:de:35:ed:41:85:3e:98:8a:6d:
1e:ec:1d:d0:7b:ce:de:e4:6b:0c:19:94:b8:46:06:
76:94:3d:fc:29:df:13:e8:7d:5f:4f:18:a5:a6:9d:
79:09:d2:9b:9f:a2:7f:07:94:10:5f:e5:98:9e:5a:
fb:ca:86:89:e9:ef:a2:58:9d:b5:8a:0f:6a:f2:0d:
47:b9:db:54:43:c1:cc:c9:f2:65:e6:51:24:aa:47:
d6:29:f0:2b:a2:57:28:61:fe:96:6f:4d:6f:27:a5:
31:78:79:e1:80:18:98:c6:6d:d8:13:56:69:3f:db:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:1C:E3:F6:52:BA:F7:D1:BA:87:80:8D:05:1C:B1:F5:75:8B:B4
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/1-2cc4_ZSuvfRuoeAjQUcsfV1i7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.47.0/24
IPv6:
2a06:11c0:3::-2a06:11c0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:af:1a:f1:62:b8:82:cd:61:71:f7:97:a6:0d:d9:1f:0d:19:
7a:6f:81:0d:12:da:9f:9c:89:28:23:b3:07:6c:5c:3a:6a:e7:
a9:27:fb:3b:79:4d:d4:38:f3:68:d0:34:ce:f3:78:1c:3d:54:
ff:92:5c:c7:cf:18:76:d2:fa:76:e9:c1:1f:f8:af:77:1f:e3:
6f:b6:ac:d4:1e:54:17:d3:ca:3c:11:24:16:c2:d8:35:91:c5:
09:81:34:20:56:d5:a6:dc:83:65:f7:c5:09:f9:2b:26:e6:c4:
b9:8d:a3:a1:a7:91:8b:62:57:af:01:90:58:e9:ec:8c:bc:df:
81:c5:d4:f7:1f:49:03:a3:4d:a2:e4:d3:99:0d:aa:3d:b5:a1:
9b:f1:60:c5:b9:e6:a2:ad:b0:79:75:26:9f:d6:13:bc:d8:4c:
19:27:64:12:17:5e:41:f3:b2:25:f0:63:12:a3:17:f8:00:55:
8c:df:b8:53:35:e6:a1:50:22:8b:09:45:8e:53:86:8b:92:f4:
d4:34:da:cc:db:51:18:04:6c:c6:93:f9:0a:8e:5a:0c:97:d6:
2b:88:28:b1:bf:7d:04:38:2c:e0:d2:ee:1e:13:c3:40:43:6c:
a5:2d:a6:6f:6c:ed:bd:54:53:3a:80:0d:19:50:98:fc:92:5a:
40:43:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:21 2025 by rpki-client