Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/mq4ei1eAMGo8fY_wpPBRtC1HP7Y.roa
File: mq4ei1eAMGo8fY_wpPBRtC1HP7Y.roa (raw, json)
Hash identifier: eMi53Z+xTCKWo+f/s8dV3xSjzCCjEVeCQvyTlFxe21c=
Subject key identifier: 9A:AE:1E:8B:57:80:30:6A:3C:7D:8F:F0:A4:F0:51:B4:2D:47:3F:B6
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019008CE45EB5013ECD3FCDACCC318351FEF
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/mq4ei1eAMGo8fY_wpPBRtC1HP7Y.roa
Signing time: Tue 11 Jun 2024 19:37:34 +0000
ROA not before: Tue 11 Jun 2024 19:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 05:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:08:ce:45:eb:50:13:ec:d3:fc:da:cc:c3:18:35:1f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 11 19:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aae1e8b5780306a3c7d8ff0a4f051b42d473fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:5a:55:f6:12:14:46:a5:33:34:c6:dd:59:
79:22:84:59:55:5a:a9:c7:e6:4b:4d:41:e9:aa:bb:
60:ca:e2:d6:7c:42:22:de:e9:51:f1:31:7a:a0:77:
4a:1b:b0:54:66:f1:a2:61:81:ac:30:98:ba:15:76:
db:73:e6:23:79:39:bd:0d:59:78:97:ad:17:b1:99:
51:01:1c:00:c2:b4:91:75:4c:59:66:49:28:82:76:
07:6c:04:25:3e:52:94:bd:be:ad:1c:12:eb:a6:07:
f7:be:5e:6f:f5:d0:0d:4d:8c:45:cf:b0:04:bc:c2:
98:31:2c:d4:12:83:b0:b7:a6:c9:5e:f5:3d:bc:55:
86:31:67:84:4f:0a:a6:8e:e4:1e:5c:b1:7f:12:2c:
59:2d:84:55:3f:32:97:c5:0f:af:dd:84:2c:d4:bc:
90:1d:e4:04:17:88:c7:69:d6:7d:3a:c0:20:52:9a:
5b:e2:2e:d7:dd:ac:74:ae:8b:4c:bc:28:9f:c2:ee:
98:c2:cd:41:22:d2:68:fc:8f:94:31:04:98:cc:58:
cc:43:1e:ff:37:81:fb:13:f0:c4:d1:bf:89:41:2b:
7b:b1:01:a8:3a:89:14:f0:da:c6:84:7d:06:e6:b3:
9e:da:7e:87:0d:59:8a:45:e9:a2:2c:87:55:08:45:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:1E:8B:57:80:30:6A:3C:7D:8F:F0:A4:F0:51:B4:2D:47:3F:B6
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/mq4ei1eAMGo8fY_wpPBRtC1HP7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
178.239.153.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f6:be:b0:9c:b8:1e:e2:72:2b:7f:e8:5d:f0:ba:36:bc:38:
d1:93:da:f4:c0:3a:3f:22:6f:29:0c:98:d1:e0:df:6b:73:48:
1e:6a:8f:7b:ba:53:30:1a:09:52:80:0e:67:70:58:4c:bc:e6:
97:8a:30:5b:6e:d2:40:9c:31:ef:02:d4:79:27:f5:0b:5c:cb:
ae:6c:e6:23:20:76:e0:95:11:35:67:19:68:79:45:83:9a:59:
bd:4f:b1:89:a8:6e:36:5b:a8:f3:81:f4:ac:10:1b:6f:c6:50:
b4:2b:f8:4f:30:0f:bb:e5:18:cb:d6:da:e2:84:b2:37:df:e0:
6d:86:aa:a4:91:d8:fa:86:23:6e:97:fe:a0:9f:15:e3:52:30:
e3:c3:e6:7f:c0:b0:eb:bf:62:49:71:57:c8:f7:70:6f:57:fa:
e4:44:d8:54:09:e0:06:57:65:99:e0:e1:ef:a2:59:d7:de:f0:
bb:81:f3:ca:22:ef:71:59:02:cc:78:b9:a9:72:12:1e:46:b2:
e7:14:55:76:38:a5:48:ee:e4:f1:56:ed:fb:2d:d9:12:10:6a:
7e:30:ff:01:7c:4f:95:19:35:7b:81:a1:3f:8a:ac:10:68:4d:
b2:e9:92:2d:78:c3:f8:07:26:7a:81:51:b2:d2:97:3e:5c:c8:
53:65:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:31 2025 by rpki-client