Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/vbF8wjZIwqdVpGc9w_MjDbFDNkg.roa
File: vbF8wjZIwqdVpGc9w_MjDbFDNkg.roa (raw, json)
Hash identifier: KyI2JQmJ21n6pm9opqHmqjmH/DoRO/WtmnW+ozykRRg=
Subject key identifier: BD:B1:7C:C2:36:48:C2:A7:55:A4:67:3D:C3:F3:23:0D:B1:43:36:48
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018CC8021FB4D62E2FE0F2BEF7496030C960
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/vbF8wjZIwqdVpGc9w_MjDbFDNkg.roa
Signing time: Tue 02 Jan 2024 02:30:31 +0000
ROA not before: Tue 02 Jan 2024 02:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51520
IP address blocks: 178.250.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 11:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:1f:b4:d6:2e:2f:e0:f2:be:f7:49:60:30:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 02:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdb17cc23648c2a755a4673dc3f3230db1433648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:32:5f:39:fd:19:80:3c:34:5f:4f:20:58:
5e:71:9c:02:33:77:77:03:8b:86:50:53:6f:48:f1:
5e:8a:82:2e:5b:ad:cd:22:88:ba:3f:bd:ba:d4:a0:
81:b8:06:0f:9f:c3:73:9d:e6:de:9b:7e:13:cf:1f:
47:42:d0:ac:ea:ea:f2:52:13:74:22:35:4a:af:28:
ce:f0:79:57:3d:15:f8:3c:e1:5b:ee:ae:41:6d:4c:
eb:f2:89:55:5e:78:f4:3b:1c:1c:d1:0c:d0:0d:b4:
4c:9c:56:88:95:68:8e:5a:a7:89:7a:83:f5:80:50:
96:60:38:0b:3b:67:c3:b6:90:b5:c8:d7:01:35:01:
b2:3b:c6:6d:48:c1:88:1f:38:1f:de:f8:35:46:09:
87:e6:55:a4:fd:a5:36:ed:21:2a:95:80:1f:d2:0e:
f8:c0:ef:ce:10:71:9d:41:6e:c3:64:9b:20:66:4f:
18:c1:30:e8:0e:9c:d9:18:c9:69:cb:4c:ae:92:d6:
03:85:a6:5e:78:fb:10:6f:9b:23:44:bd:67:42:b0:
7b:00:cf:8e:48:71:92:d6:25:0c:bb:d4:38:df:ef:
3a:99:cd:f3:8d:ea:b6:60:68:41:3d:7c:28:0f:a8:
b1:ac:c5:c2:39:ea:5c:d6:b6:0f:45:d6:27:43:7f:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:7C:C2:36:48:C2:A7:55:A4:67:3D:C3:F3:23:0D:B1:43:36:48
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/vbF8wjZIwqdVpGc9w_MjDbFDNkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7d:9d:1b:d4:61:0a:01:c8:7e:0f:d7:5d:df:c4:8c:4b:ad:
8f:91:77:b4:92:79:4b:f5:38:94:e8:60:99:a9:58:8b:78:d4:
c1:29:21:b3:25:75:2d:fd:04:44:95:20:f9:56:b8:a2:a5:fa:
9c:18:38:8c:fb:71:df:7a:1a:59:93:7e:e4:00:45:f1:c7:1b:
c3:98:39:a0:4f:9d:c8:86:8b:1b:a7:22:fc:9e:a3:84:e4:b4:
54:17:02:d6:4d:80:89:19:37:c9:a1:14:f1:77:b6:07:79:22:
fe:13:27:e4:5e:a0:52:12:d1:a7:40:b8:ff:aa:36:54:71:10:
f0:76:69:4c:4c:76:29:40:bf:06:c3:73:d2:98:96:19:c7:da:
68:71:14:e2:9b:fe:42:ce:e5:1f:c6:c9:03:92:c4:13:2e:6a:
ae:60:5a:0e:3c:cb:eb:bd:0d:66:4c:2e:ef:32:60:cd:b0:d5:
3c:5a:b4:8d:ad:2a:3e:a9:3d:93:75:d3:55:83:26:ce:7d:b4:
ba:6b:dd:b0:b1:ec:fe:fa:97:83:7c:39:81:da:11:be:f8:60:
53:30:12:7c:c7:ca:de:02:1f:3f:08:62:79:48:28:35:b0:78:
8b:c5:a9:31:40:3e:aa:c1:3f:6a:61:24:63:eb:c3:b0:c6:32:
27:fd:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:55 2025 by rpki-client