Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/B-jR-BEjC9YP9R6L0w0fI1bMNuI.roa
File: B-jR-BEjC9YP9R6L0w0fI1bMNuI.roa (raw, json)
Hash identifier: TRwpMCJ7XWRdZJhXyHIiDT9m47CeCCusFAQUxfLg9uk=
Subject key identifier: 07:E8:D1:F8:11:23:0B:D6:0F:F5:1E:8B:D3:0D:1F:23:56:CC:36:E2
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01900AFA00C4949B714C46B240E77A487A82
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/B-jR-BEjC9YP9R6L0w0fI1bMNuI.roa
Signing time: Wed 12 Jun 2024 05:44:34 +0000
ROA not before: Wed 12 Jun 2024 05:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
185.212.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 16:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0a:fa:00:c4:94:9b:71:4c:46:b2:40:e7:7a:48:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 12 05:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07e8d1f811230bd60ff51e8bd30d1f2356cc36e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:fc:3a:92:26:5a:00:eb:45:e8:95:0d:d4:
94:28:0c:a0:56:2e:8d:23:ab:e9:77:3a:a7:83:4a:
66:e9:ab:08:c6:ba:20:b8:78:c6:5d:5f:2a:fd:1c:
cb:68:06:8a:a2:b7:00:0a:fa:02:51:70:82:b0:a9:
d7:7a:23:df:01:87:43:40:14:e9:8f:19:cc:22:f0:
76:8c:76:95:5b:16:de:d4:14:a4:7b:ee:51:82:93:
a2:4d:05:f7:0e:65:8b:ef:bc:fe:2a:1c:dd:a2:28:
7a:ff:41:cb:b9:94:a3:a8:fc:48:2c:64:55:e6:7e:
aa:d6:5c:04:b1:ac:56:69:94:22:d1:e1:87:0e:e1:
5f:3c:21:7b:ed:66:d6:d9:60:9d:0e:f7:35:f5:8a:
3f:dc:f3:49:35:fd:cf:34:ca:d1:e4:b3:2c:cc:7b:
2a:22:4b:d7:cd:90:bd:3e:5b:6f:34:88:c2:f1:da:
e5:6d:18:3b:7a:98:33:a7:e7:96:78:12:5f:57:4a:
33:9b:22:bd:c4:29:74:bb:84:b7:c8:cd:d8:da:a0:
4b:80:c4:1f:9e:09:e0:14:02:35:66:76:94:12:47:
f0:66:cc:85:c3:dc:b4:8c:ec:98:91:4b:73:70:e4:
ce:18:04:05:9f:a8:54:13:bb:fd:7c:26:92:40:c2:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:D1:F8:11:23:0B:D6:0F:F5:1E:8B:D3:0D:1F:23:56:CC:36:E2
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/B-jR-BEjC9YP9R6L0w0fI1bMNuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
185.212.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:bc:81:32:2a:9e:3a:2f:8d:ab:af:44:85:03:5a:f8:9d:e3:
e7:cb:06:31:e5:dc:67:b0:67:d0:cd:b4:80:dd:c0:56:d1:40:
8f:a4:1c:14:af:e3:ef:9e:06:bf:17:10:6c:a7:4d:5b:ec:df:
75:be:8a:d8:31:99:f2:63:f3:d3:07:db:fd:44:30:6f:c7:27:
43:7b:dc:f5:6f:46:45:51:cc:24:9e:95:0e:14:3b:1e:21:53:
5d:41:18:dd:00:8c:4e:b1:e4:d9:ae:dc:10:43:fb:e8:53:32:
9b:a8:9a:98:05:77:36:0f:d1:86:62:9e:29:0d:2f:94:6e:57:
74:29:65:0a:d9:6d:50:b5:63:7f:ef:b4:e3:02:7d:30:c8:9d:
c3:2a:f6:08:7e:6a:af:93:e9:28:a4:00:90:69:d0:6f:bf:23:
9f:d7:34:f1:3c:0c:90:ab:52:5d:0c:47:e5:cf:ae:3b:fd:8d:
3d:3b:da:84:b6:ce:73:d2:50:ff:09:9e:36:3e:8b:44:f7:53:
92:a6:73:6c:e0:f9:ca:a2:8a:af:00:bb:8b:2b:c3:0a:d2:6f:
a5:21:84:90:bf:ae:e6:14:13:55:93:06:0b:58:2c:87:5e:3a:
33:ca:d1:10:ea:a2:99:f3:b2:bf:48:b2:df:0e:f2:ec:e3:01:
54:8f:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:37 2025 by rpki-client