Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/m3AScBqB2u71sY6nmSg3P-burRE.roa
File: m3AScBqB2u71sY6nmSg3P-burRE.roa (raw, json)
Hash identifier: BZ3bjuMQhDUuyBGN2xCSin1BxDCzFwhnyCjsCH+ihA4=
Subject key identifier: 9B:70:12:70:1A:81:DA:EE:F5:B1:8E:A7:99:28:37:3F:E6:EE:AD:11
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0193F7DEF9159E085C363BC06BE7A145313A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/m3AScBqB2u71sY6nmSg3P-burRE.roa
Signing time: Tue 24 Dec 2024 08:53:25 +0000
ROA not before: Tue 24 Dec 2024 08:53:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214361
IP address blocks: 178.239.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:de:f9:15:9e:08:5c:36:3b:c0:6b:e7:a1:45:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 24 08:53:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b7012701a81daeef5b18ea79928373fe6eead11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:f3:dc:c7:7f:86:f8:a1:c1:de:f4:f2:d9:
4f:1f:bc:96:6f:ec:bb:5a:71:6a:10:31:7f:5b:1a:
d7:df:7e:5d:03:df:92:31:57:cc:7c:7d:98:e5:ae:
8e:a5:1d:34:9d:8a:4e:94:85:8d:ab:11:ab:86:8e:
e5:61:07:5b:e2:a6:7f:86:26:60:49:cd:c1:e9:e9:
a7:db:49:4e:20:77:dd:c9:e1:25:24:a5:71:fe:3b:
51:77:a3:c0:76:7e:de:f8:f0:5e:58:52:d1:49:b6:
80:d6:0f:ad:c3:7b:56:ec:33:3d:43:ed:8e:52:a0:
c4:03:0c:26:48:27:be:f3:19:31:00:79:71:f1:00:
72:16:f7:3d:93:7e:f2:cf:4f:d7:fe:9f:1d:ee:ee:
59:4d:c9:32:1d:5a:6b:d1:9e:6f:70:27:c5:c6:93:
5c:d8:89:8c:fc:77:90:58:8f:8b:c9:95:88:9d:a1:
94:a7:7e:e3:f0:6a:8f:8a:9f:b3:cf:e8:c3:5d:7d:
93:c3:b9:39:ae:ac:5f:92:d8:f8:fb:fb:ef:d9:29:
c0:7c:78:71:51:66:f9:40:e2:1d:69:10:0c:77:c8:
3d:d9:16:69:06:e5:f4:52:a3:26:18:dc:9b:00:c7:
32:d6:b8:b5:27:c6:d8:ce:56:68:fe:f2:16:94:90:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:12:70:1A:81:DA:EE:F5:B1:8E:A7:99:28:37:3F:E6:EE:AD:11
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/m3AScBqB2u71sY6nmSg3P-burRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1a:42:59:5d:27:63:b2:12:8a:9c:29:6e:97:92:ce:b0:c0:
67:3a:dc:32:4c:0e:26:63:06:ac:b1:af:9e:28:c5:e4:11:ed:
e5:df:13:05:0d:74:f6:ae:02:08:63:a0:20:78:de:64:6c:17:
d3:a4:e0:e5:e4:49:68:72:f9:f5:60:af:99:71:25:de:35:06:
a9:9f:a2:e3:b2:4b:39:ce:29:8b:e2:f1:45:f2:57:ab:d5:78:
77:7c:ea:6e:5c:bf:e5:c1:60:f7:02:40:94:b7:00:09:d6:d2:
45:1f:e1:01:21:fb:8b:03:50:c2:a0:91:99:ba:74:c8:3b:b3:
3f:89:18:dc:95:d1:da:e7:fc:e5:78:e9:31:e8:b1:76:3d:a1:
c7:3c:ae:76:98:a0:47:f8:7f:ce:20:84:81:0e:ba:c6:34:d9:
7f:68:41:d2:e5:f2:6e:62:a7:1b:f1:54:87:16:81:20:a8:f2:
74:4c:e0:a2:fc:69:47:35:13:bc:80:32:f9:4f:a3:5f:5a:5e:
d7:47:4c:35:a9:ad:59:43:75:bf:77:9c:51:0a:9b:96:db:19:
48:c5:0e:2d:22:b0:37:f6:4e:46:7d:79:f0:01:2b:a2:fd:d0:
72:4f:f7:e1:17:7f:95:c7:de:60:0f:e9:b1:bf:6b:c2:6f:d3:
3d:a6:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:40 2025 by rpki-client