Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/3M17nPKurqPoR32VvMMdY5ggCOY.roa
File: 3M17nPKurqPoR32VvMMdY5ggCOY.roa (raw, json)
Hash identifier: MN8SuzVZ5wx05EaMf/an84Ni+13Rb0Yri9H1vZfHr3g=
Subject key identifier: DC:CD:7B:9C:F2:AE:AE:A3:E8:47:7D:95:BC:C3:1D:63:98:20:08:E6
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018FEC34B2ACAED9777326244D1CA6623449
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/3M17nPKurqPoR32VvMMdY5ggCOY.roa
Signing time: Thu 06 Jun 2024 06:20:27 +0000
ROA not before: Thu 06 Jun 2024 06:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 178.239.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 08:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:34:b2:ac:ae:d9:77:73:26:24:4d:1c:a6:62:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 6 06:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dccd7b9cf2aeaea3e8477d95bcc31d63982008e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:1a:53:f9:63:18:57:78:52:eb:24:bb:19:
88:d3:7a:f5:2f:7d:c6:c7:7c:5e:9d:34:4e:1d:10:
16:d0:7e:d4:a7:b1:d2:7d:59:70:80:60:db:50:a2:
36:fe:eb:d2:18:af:76:4f:c9:1a:01:ef:80:80:ef:
26:71:ab:38:3e:3c:e0:98:26:43:7b:9f:60:ef:d6:
e0:25:a2:f3:84:54:e1:ff:11:77:9b:90:96:b7:b0:
de:eb:2d:1f:2d:48:b1:d9:48:75:6e:db:32:c4:cf:
34:a2:1d:b2:8c:1c:33:88:09:01:ec:f6:b5:ba:88:
6e:dc:c3:96:5d:1a:23:02:f5:8f:4e:f8:2f:c3:39:
8e:74:c9:0e:91:2c:9c:e8:1c:78:c5:a2:b5:9e:61:
5e:4c:fb:83:70:49:b9:9e:85:02:88:a8:31:b9:bc:
aa:d9:51:a9:a9:70:c6:0a:ba:2e:c9:47:6f:dd:4e:
c5:4b:b9:44:fe:09:81:e3:8d:89:38:ca:e5:c5:00:
f2:98:6d:3d:83:d0:cb:03:79:67:b8:b5:9a:87:26:
1f:cc:28:23:7c:e7:df:f0:bc:f8:be:98:08:05:50:
ce:fe:db:1d:26:3f:44:bd:4d:43:0f:5e:a9:8b:9e:
41:d8:ac:89:d6:8e:86:8d:c9:7c:27:5b:2e:cb:be:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:7B:9C:F2:AE:AE:A3:E8:47:7D:95:BC:C3:1D:63:98:20:08:E6
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/3M17nPKurqPoR32VvMMdY5ggCOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.146.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3d:80:49:aa:51:eb:8f:eb:c7:5a:d8:33:70:49:2c:cd:71:
88:a9:d2:aa:8f:17:7e:ed:ff:a2:72:a2:ca:77:0b:e1:ef:ae:
45:1a:61:8e:67:18:0c:7d:16:5c:be:f2:8e:9a:7d:db:7a:8d:
4a:b7:d0:05:29:d5:e3:bf:8e:01:21:bf:eb:98:c9:d4:14:f9:
f8:db:17:4a:da:6f:cc:6a:db:31:f3:70:20:d1:1e:cf:63:c6:
a5:af:b4:dc:1c:50:d5:a3:66:21:63:87:33:8c:ee:2d:8d:57:
94:e2:9c:ea:a2:e3:c3:4d:58:d7:d6:95:8a:ca:fe:31:0d:eb:
7d:ef:65:a1:d9:88:60:4f:f4:0f:3f:5c:9b:b7:19:63:a8:02:
9c:14:a2:92:f1:ad:62:bc:6b:4e:82:a7:95:6d:60:d2:84:80:
91:1f:b1:4b:fc:70:e9:c8:7f:fc:53:38:f1:c8:26:f2:db:e1:
1c:66:6a:cd:b8:c2:06:39:47:60:1b:ab:f6:06:a3:ec:5a:da:
99:89:65:90:06:5c:d8:d7:ec:7a:8e:bf:3f:24:4d:40:b0:eb:
69:78:09:e6:10:a6:89:00:57:6b:90:ac:2c:99:90:ac:43:ad:
3b:a8:98:71:f7:f8:c4:4d:55:40:76:f9:05:0c:70:1a:c0:14:
40:cf:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:35:59 2025 by rpki-client