Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/78j9BXgMsH_oouHB82jG04T9YxM.roa
File: 78j9BXgMsH_oouHB82jG04T9YxM.roa (raw, json)
Hash identifier: IZXIcJKVOnJNJ5p81hNyOi9NvbXAZehKi/eoaulkANU=
Subject key identifier: EF:C8:FD:05:78:0C:B0:7F:E8:A2:E1:C1:F3:68:C6:D3:84:FD:63:13
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0196D5FD9ED5B2732CCD4E2DD01592D7A631
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/78j9BXgMsH_oouHB82jG04T9YxM.roa
Signing time: Thu 15 May 2025 22:08:10 +0000
ROA not before: Thu 15 May 2025 22:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216344
IP address blocks: 37.32.43.0/24 maxlen: 24
37.32.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 20:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:fd:9e:d5:b2:73:2c:cd:4e:2d:d0:15:92:d7:a6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 15 22:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efc8fd05780cb07fe8a2e1c1f368c6d384fd6313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:6c:59:c2:b9:3d:80:ee:b6:93:0c:05:ca:
f0:0b:61:da:fb:c8:c7:77:42:6c:9c:24:f4:ad:8c:
28:9c:4c:1b:f0:24:2f:2a:ea:73:01:a6:9f:1f:a4:
9b:bf:72:68:59:1f:bf:e1:6c:e9:09:41:74:b2:4a:
98:24:fb:f0:54:59:2c:b9:23:0f:27:ab:bc:b6:19:
1a:4c:64:cb:58:76:64:94:1c:75:ca:cb:fc:2a:16:
75:0d:0b:19:7c:76:94:4d:ed:c3:2d:15:d4:1f:10:
61:55:53:d0:37:62:16:ec:05:d4:9e:01:65:50:8e:
22:40:bb:59:13:fe:be:b0:10:0f:de:af:9c:dc:29:
30:7c:7c:31:aa:92:20:03:bd:9e:a4:2a:f7:01:f8:
81:79:ed:b3:18:cb:2d:92:58:e3:27:24:e5:bf:d6:
a7:fc:aa:13:b4:15:4a:b6:80:ed:dc:e9:1f:44:ae:
d6:fd:cf:1e:60:6f:c9:28:a2:2c:c0:95:7c:43:64:
e7:82:e8:e2:64:ca:8a:d1:2f:eb:b0:1f:09:f4:aa:
aa:cc:54:4d:c9:31:15:75:aa:b8:e0:ad:6a:fd:e1:
79:51:1c:ce:ab:e9:d6:39:d9:ce:b9:5e:58:53:45:
5d:9f:78:e2:c3:d4:e6:d1:86:8e:5d:f1:30:9f:85:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C8:FD:05:78:0C:B0:7F:E8:A2:E1:C1:F3:68:C6:D3:84:FD:63:13
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/78j9BXgMsH_oouHB82jG04T9YxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.43.0/24
37.32.46.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c6:8e:42:23:e5:59:12:a1:6c:a2:9e:4c:7e:6b:de:d2:c7:
40:67:81:f5:01:e5:09:23:42:d4:59:59:3a:88:1f:99:56:af:
e8:03:83:de:66:8b:1a:d4:fe:bd:48:15:db:09:a3:da:ec:b1:
bf:72:9c:b8:6a:09:bb:55:65:3a:12:da:23:93:d3:b5:bc:9d:
27:8c:6f:f0:be:f9:1d:dc:4e:57:6f:dc:1b:83:d8:28:23:cc:
97:9c:77:08:75:d1:41:d5:22:6b:9d:b4:40:e4:06:b3:00:a7:
1c:0a:e2:ab:9d:ce:26:db:e9:d0:29:76:f2:ba:98:fd:52:55:
f6:e0:b1:52:ea:72:c5:67:40:e2:e9:60:26:9c:71:ed:1e:bf:
7c:08:b9:98:c0:07:19:07:0c:08:66:43:fd:5e:b8:7e:c5:2e:
76:60:12:d2:2a:3d:2e:44:e9:f4:cb:91:13:3c:0c:e9:72:d3:
ea:5a:cd:48:08:f0:4b:b9:84:b1:ad:29:cf:5b:f0:cb:54:28:
5c:2b:e6:28:01:9a:8e:0f:2d:ef:3d:20:6a:a7:6b:08:de:8f:
f6:0a:7e:a7:b1:91:6c:f8:7f:b2:f2:4b:71:65:45:ce:66:54:
30:8f:d6:03:9b:32:94:2b:08:d3:d9:01:a8:54:32:05:53:54:
57:5c:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:49:10 2025 by rpki-client