Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hBLk1cDuNLp1qR-DLClXkqksX7U.roa
File: hBLk1cDuNLp1qR-DLClXkqksX7U.roa (raw, json)
Hash identifier: NzJ44fhjJkV09qVYZ/SgXUti4iVKJ3oU8lQdaOXHTK0=
Subject key identifier: 84:12:E4:D5:C0:EE:34:BA:75:A9:1F:83:2C:29:57:92:A9:2C:5F:B5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0193F992AB44D64B7F17F647E940438A340D
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hBLk1cDuNLp1qR-DLClXkqksX7U.roa
Signing time: Tue 24 Dec 2024 16:49:18 +0000
ROA not before: Tue 24 Dec 2024 16:49:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 178.239.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:92:ab:44:d6:4b:7f:17:f6:47:e9:40:43:8a:34:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 24 16:49:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8412e4d5c0ee34ba75a91f832c295792a92c5fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:3e:b3:0c:82:a5:ea:99:4f:18:76:1b:92:
ba:8c:ab:ca:d5:87:ef:78:56:00:a8:37:d7:34:1a:
6f:da:81:98:0e:53:fc:d4:ae:d9:cb:be:fc:44:4b:
d4:99:d9:c8:b0:be:63:8b:a8:13:5a:00:6a:fa:36:
c0:84:c0:90:d6:1b:ba:a4:5c:18:0e:22:91:ea:db:
70:73:81:ee:56:45:46:20:be:b7:d4:d9:8a:ff:57:
f0:13:ac:bc:24:f6:c8:1b:84:d7:57:79:f3:b5:1d:
38:38:fa:2f:44:b6:df:bd:52:7d:04:7f:3e:98:30:
d7:32:51:76:39:80:9f:7c:cd:86:c5:88:3c:c9:48:
17:d8:12:69:d1:7d:85:7e:d4:dc:7d:d7:a4:b1:0a:
72:14:04:d5:80:09:22:b6:c7:a9:f6:97:b5:45:2a:
85:5b:1d:c8:2d:69:67:33:04:f3:09:7a:b4:94:a4:
02:9a:97:fa:b5:28:7f:7f:71:8b:dd:5f:15:80:5e:
92:72:d7:63:65:f5:e4:4f:ed:d1:5f:5e:86:c4:2d:
3d:d9:9f:b6:44:3e:ab:b7:75:4d:69:f7:99:89:9f:
0b:64:f9:64:96:b8:41:62:d0:8d:80:72:65:8c:6c:
6a:77:97:cb:52:a5:0d:76:b0:ab:54:a7:d3:a7:e1:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:E4:D5:C0:EE:34:BA:75:A9:1F:83:2C:29:57:92:A9:2C:5F:B5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hBLk1cDuNLp1qR-DLClXkqksX7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
18:17:1f:e1:5e:9a:7c:2c:33:36:2d:1c:1a:dc:cc:83:49:5e:
1b:7d:ab:6d:2d:2c:42:f0:24:a6:66:d7:42:4d:e5:6e:28:06:
2c:b6:18:33:af:85:4b:b0:6b:e5:57:dd:29:8e:56:13:00:3b:
65:86:fa:fb:a8:1f:11:d0:40:5c:77:9a:ca:be:00:69:8c:8c:
a6:58:a9:a6:90:6e:13:61:3a:38:1e:fc:ee:75:48:41:10:94:
a1:8c:64:17:67:5a:bb:c4:78:eb:3b:69:5f:63:9e:7b:9f:0d:
f9:00:dc:9d:7c:fc:49:d5:45:82:12:ea:f0:bb:25:a1:75:41:
db:43:04:6f:40:d9:a9:53:f1:3c:44:96:51:ad:4f:65:9a:c8:
22:24:88:c1:c7:fa:36:a5:ec:2c:19:83:10:36:bb:39:21:97:
26:30:12:79:dd:15:ba:d4:80:15:39:62:b0:c1:34:7a:a1:c2:
da:fc:12:e0:f3:e8:d9:a2:e8:96:f3:12:52:db:8d:8a:f0:24:
80:16:d7:80:a7:79:f0:e3:2a:e5:ef:b0:e5:7a:e0:50:76:76:
16:3d:20:2d:88:be:55:92:79:ef:9c:1b:21:dd:78:b9:fa:9b:
d1:b1:22:ee:6f:35:f8:90:75:2f:32:4e:6e:fc:d9:c9:63:78:
c8:69:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:24:39 2025 by rpki-client