Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-ybSDvmPQ4Y_sRNPkLG2oex3ESE.roa
File: 1-ybSDvmPQ4Y_sRNPkLG2oex3ESE.roa (raw, json)
Hash identifier: wGYgbrmEfRKLlN0WCIoR0Uf9bnV/Pj5a0fv9+VG6WAc=
Subject key identifier: FB:26:D2:0E:F9:8F:43:86:3F:B1:13:4F:90:B1:B6:A1:EC:77:11:21
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019369DB2D2F890A136AEE63ADD16CDD3CBC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-ybSDvmPQ4Y_sRNPkLG2oex3ESE.roa
Signing time: Tue 26 Nov 2024 19:03:11 +0000
ROA not before: Tue 26 Nov 2024 19:03:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214857
IP address blocks: 178.239.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:db:2d:2f:89:0a:13:6a:ee:63:ad:d1:6c:dd:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 26 19:03:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb26d20ef98f43863fb1134f90b1b6a1ec771121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:f3:22:84:02:5b:a3:1f:eb:41:65:e6:31:
44:87:e3:ec:b2:51:6e:b7:2c:10:70:bd:3b:f1:cb:
65:d4:74:2c:8e:0c:a2:04:38:08:18:f7:56:32:8b:
73:0a:b6:89:21:99:51:b2:ce:ed:ef:f8:25:cb:d3:
c8:5e:a1:9d:28:ea:20:2f:84:5f:33:1d:4c:0f:fd:
39:a5:1f:ec:d3:7d:43:eb:58:3a:d6:b9:d3:75:4b:
21:ac:a5:3b:bf:e0:61:ab:4d:b5:f7:09:99:1c:85:
e7:c8:f5:ca:88:64:0f:a4:c8:3e:07:7b:ad:1b:a0:
ee:02:85:8c:e3:26:e1:ce:69:9e:b9:dd:f2:23:bf:
de:15:a4:b6:f4:aa:ba:49:73:8f:01:9a:73:ba:08:
fe:bd:c8:36:db:01:87:5f:6c:db:bf:71:58:c5:76:
78:68:40:5b:9e:57:bb:ba:8f:a4:b9:c0:6c:20:a8:
74:cf:56:67:7e:58:d0:76:5d:d0:a3:9c:4c:13:d5:
1c:06:9b:02:c2:c0:cd:d0:43:75:cc:01:ab:61:c7:
f0:63:5b:e9:60:1c:b4:7b:d0:d6:d6:d5:6f:43:a1:
9a:88:ed:45:1d:5a:86:33:a9:49:b6:29:13:4b:98:
62:37:02:e9:49:3b:84:67:27:b6:f9:67:29:3e:e0:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:D2:0E:F9:8F:43:86:3F:B1:13:4F:90:B1:B6:A1:EC:77:11:21
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1-ybSDvmPQ4Y_sRNPkLG2oex3ESE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d6:5e:ab:f1:83:63:6d:30:11:f1:35:c9:7e:98:ee:22:1e:
8f:47:9a:b9:3d:d8:6e:4d:7e:d2:fc:a7:bb:f1:3f:66:0e:93:
98:e3:d5:ce:dd:ad:b7:34:b1:85:c0:ea:2f:02:b0:35:6a:ed:
a6:9c:36:cd:09:1d:2f:94:37:bf:5c:1f:43:f7:6b:dd:7f:c7:
6a:04:2a:2a:88:9e:1e:4e:38:01:fc:83:50:bb:93:ae:6d:15:
54:0c:9e:ef:36:81:42:ed:36:4f:b8:c6:b9:b5:92:ca:af:a8:
2f:39:44:3c:f3:c3:b2:03:ca:cb:7b:6e:94:6c:7e:6f:c8:09:
76:60:a3:f5:34:e1:d9:e1:f8:33:c4:6b:c0:42:1a:df:1d:e7:
4d:5b:05:f3:ab:99:2a:79:a3:1c:10:9e:73:c2:4d:10:69:e3:
6b:0a:d3:56:48:ef:f2:19:52:e3:db:94:01:62:db:af:28:c7:
c4:32:6e:95:de:76:dc:fb:37:cd:b7:81:35:9b:c0:7c:b1:62:
37:29:a2:ea:68:e2:99:e8:7c:f6:37:66:b1:4f:43:cb:36:6e:
bc:4a:c5:15:38:64:8b:b6:2a:34:05:cf:17:28:25:6c:66:64:
2b:d6:c2:a8:e3:82:8a:1d:5a:4f:f6:9c:d3:a7:6e:3f:b6:56:
6a:3e:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:29 2025 by rpki-client