Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/gPgNbqdfiXyO6S3s1W_ulEGz4T0.roa
File: gPgNbqdfiXyO6S3s1W_ulEGz4T0.roa (raw, json)
Hash identifier: zGoncUFSKyf9Qb9GT3BehEvtDnQJ9G1saY5f0NXeSes=
Subject key identifier: 80:F8:0D:6E:A7:5F:89:7C:8E:E9:2D:EC:D5:6F:EE:94:41:B3:E1:3D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019427A73D209DC0015932C00B5162943D80
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/gPgNbqdfiXyO6S3s1W_ulEGz4T0.roa
Signing time: Thu 02 Jan 2025 15:34:19 +0000
ROA not before: Thu 02 Jan 2025 15:34:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 178.239.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 10:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:a7:3d:20:9d:c0:01:59:32:c0:0b:51:62:94:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 15:34:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80f80d6ea75f897c8ee92decd56fee9441b3e13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:f8:fc:64:6d:7d:48:6b:92:d9:c7:f3:b4:
55:a9:0e:bb:e0:71:df:85:1b:6b:05:cc:ad:4b:26:
f3:50:65:15:8f:9b:d2:1e:a1:09:fe:46:9c:f3:d4:
1c:19:c4:64:51:e6:cd:c1:4e:e1:85:4c:66:7a:f7:
1d:35:17:77:19:fd:5c:19:1e:75:4f:24:3c:3a:88:
d9:2f:71:80:7c:e6:16:75:1f:0d:20:af:80:c3:cc:
89:d4:75:0b:45:d6:d9:5f:a4:d8:76:0c:06:85:6d:
2b:1c:5d:aa:91:03:d3:23:b0:ea:a0:fa:a5:b6:42:
57:45:50:d8:29:d9:21:bd:9b:fb:6f:ec:e8:65:36:
20:be:78:7d:af:bc:f3:43:65:e0:64:ee:9a:29:2b:
7a:47:22:29:f3:69:08:10:f7:d8:f9:bf:c7:43:31:
9d:f3:71:c4:49:0e:9d:6a:74:d1:82:d1:f4:24:af:
57:c6:f8:fa:55:c8:cd:ae:1c:8f:7d:f6:25:a4:6d:
21:8b:f3:5f:cf:5e:d4:93:b4:64:1d:8b:8a:ba:19:
cc:91:45:db:b8:7d:f7:49:b6:60:fc:2a:f2:b7:8d:
5c:49:57:48:f1:2c:ea:73:2a:7e:86:d0:e4:54:06:
5a:85:03:86:57:08:dd:3f:f8:a0:14:58:40:25:51:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:0D:6E:A7:5F:89:7C:8E:E9:2D:EC:D5:6F:EE:94:41:B3:E1:3D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/gPgNbqdfiXyO6S3s1W_ulEGz4T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0f:92:07:e2:eb:0e:1d:b7:5d:dc:84:7f:8c:b4:21:1f:f9:
19:30:a9:30:2b:39:dc:a2:83:cb:6a:81:56:61:ff:38:ec:b5:
bd:2d:92:3e:a5:02:46:b6:be:e2:83:95:e2:c4:0e:6a:fe:7a:
68:aa:ed:cd:d0:a2:f8:e2:dd:05:01:a7:06:a9:e3:c5:c2:e3:
d4:46:3c:19:02:ed:3c:72:6c:f5:fb:9b:e4:25:ad:6d:51:60:
b5:d0:d7:4e:66:72:07:2c:b3:6f:da:75:eb:a9:b8:38:f9:be:
ef:26:c9:6a:65:00:7c:3f:27:c7:70:f6:c1:2f:47:03:02:21:
d0:51:6f:a4:03:27:cf:44:83:32:18:da:75:a3:3a:21:7d:13:
a9:0f:27:b1:de:8d:e9:da:0e:b9:ee:c1:81:93:4a:ec:32:f3:
7b:43:d6:cc:ad:b6:1f:da:67:70:cd:76:89:17:e9:f9:d5:4f:
90:aa:03:40:19:d0:91:ed:b5:64:06:44:82:f8:bd:2b:9a:16:
c1:a5:60:5a:4a:2f:7b:e4:59:57:0b:82:d2:36:73:f4:fa:95:
e4:90:15:3d:8b:8e:c6:1b:82:c9:c4:86:65:66:eb:8e:ea:2b:
c4:a6:37:35:ed:d0:2a:b1:62:66:ca:e8:70:91:25:09:76:51:
5a:0f:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:39:07 2025 by rpki-client