Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/L42NIocmpf5_Z9Cdo0TivdqVhPE.roa
File: L42NIocmpf5_Z9Cdo0TivdqVhPE.roa (raw, json)
Hash identifier: Sp5Q14NAkoIFHIR8KNgLd3fVEJNcnB2btQs2B6fMYls=
Subject key identifier: 2F:8D:8D:22:87:26:A5:FE:7F:67:D0:9D:A3:44:E2:BD:DA:95:84:F1
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01939C48944C00BC06337847D31B0C1CA2B8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/L42NIocmpf5_Z9Cdo0TivdqVhPE.roa
Signing time: Fri 06 Dec 2024 14:03:42 +0000
ROA not before: Fri 06 Dec 2024 14:03:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214567
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:48:94:4c:00:bc:06:33:78:47:d3:1b:0c:1c:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 6 14:03:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f8d8d228726a5fe7f67d09da344e2bdda9584f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:49:9b:55:8a:14:52:60:aa:d2:4c:2c:a6:
8f:b9:de:89:49:5e:82:a8:71:52:4a:04:57:75:e5:
42:4f:3b:5a:0c:58:b2:52:b1:d6:2f:72:60:ae:8f:
5d:18:64:c8:0a:fc:28:ec:3e:fe:91:57:f3:ba:b4:
9e:7f:cb:6a:73:df:02:62:78:46:70:8f:c3:9d:df:
f4:d2:15:7d:38:a7:78:bf:df:e5:10:c1:f0:d2:c2:
0d:da:6f:b6:85:6e:6c:97:40:dc:7f:29:86:5a:cb:
aa:75:cf:77:81:bc:67:76:24:00:17:0a:07:7c:1e:
29:65:33:df:ba:02:51:c5:fe:6c:a9:e9:f6:e6:1b:
58:f7:7f:09:67:d6:92:f7:75:cb:2c:e5:a3:e2:da:
d5:28:ef:7d:1c:74:1f:da:0f:b0:ef:01:70:43:e3:
7e:13:89:f4:d1:59:af:7d:ff:35:8b:84:51:f5:88:
76:ac:80:00:43:c2:ba:e8:f7:57:97:27:83:6c:c9:
fc:5f:1f:03:ea:59:ad:62:72:ed:95:1d:4d:de:33:
db:5a:f3:71:17:ab:1e:20:c8:26:ac:02:e4:95:3e:
8e:58:30:58:9b:0d:2e:3b:a6:aa:0b:d5:1e:9b:f0:
2d:9a:33:cb:71:4d:af:d7:4e:26:76:84:8e:08:3f:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:8D:22:87:26:A5:FE:7F:67:D0:9D:A3:44:E2:BD:DA:95:84:F1
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/L42NIocmpf5_Z9Cdo0TivdqVhPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:9b:2f:ff:a0:e8:9b:74:5b:ec:d3:7b:ce:e3:53:fd:ba:6d:
10:3e:ee:39:73:72:83:51:a3:b9:76:31:6d:f8:24:6b:5b:f6:
0c:5a:11:24:aa:ee:8e:79:c3:85:66:80:39:71:1a:5f:9b:c5:
72:da:be:21:70:48:c6:8a:07:74:de:13:8f:e3:2e:b7:4d:a1:
7e:e6:73:bd:73:0b:cb:1f:f7:12:df:36:c7:f0:1e:f8:53:30:
3c:3c:3d:9e:95:8f:f6:93:00:cf:0f:32:f6:96:b4:13:8a:6c:
67:fd:c8:3a:8a:78:2f:3f:a5:ca:80:d4:67:43:d9:23:12:f0:
a3:6d:d1:fa:df:2b:8b:d0:e3:e1:e4:88:5e:72:5c:80:e8:91:
0b:5f:87:78:c8:0a:5b:73:b7:ce:f2:d3:20:4b:32:88:4c:9c:
1d:dd:89:52:78:d5:02:95:92:9d:f0:a3:ca:e4:f5:9b:a9:b6:
16:a2:cd:55:11:fa:30:c0:2d:cb:05:4d:d9:8c:a1:9e:45:64:
5b:64:60:7a:bc:8f:d7:2a:a2:98:34:83:9e:3d:52:02:39:26:
05:02:1a:be:59:ec:92:1d:4b:55:64:60:6e:43:64:1b:5a:37:
de:37:75:b0:b9:b2:1a:9e:a5:f3:81:20:37:24:e5:4a:b4:e9:
c6:95:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:55:18 2025 by rpki-client