Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nMhHw9QuRSkYGvtobt90y7SFi4c.roa
File: nMhHw9QuRSkYGvtobt90y7SFi4c.roa (raw, json)
Hash identifier: 0tj4jHCUWlM8/1PoQMCKLdNAP8Kfbco/rsvwjdFWX38=
Subject key identifier: 9C:C8:47:C3:D4:2E:45:29:18:1A:FB:68:6E:DF:74:CB:B4:85:8B:87
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0193F39F52AE18942ABD7ADF92A434E31446
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nMhHw9QuRSkYGvtobt90y7SFi4c.roa
Signing time: Mon 23 Dec 2024 13:05:25 +0000
ROA not before: Mon 23 Dec 2024 13:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 178.239.149.0/24 maxlen: 24
185.243.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 16:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:9f:52:ae:18:94:2a:bd:7a:df:92:a4:34:e3:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 23 13:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cc847c3d42e4529181afb686edf74cbb4858b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:72:36:e3:28:67:e5:6e:1b:90:c0:df:b4:
fa:92:53:b8:d8:fa:7b:b7:a2:48:de:7d:00:da:01:
b5:50:f5:ed:80:3e:19:e0:4f:21:1c:5e:c7:3d:3e:
06:28:94:31:d5:49:9d:b1:6b:42:dd:79:5f:8b:66:
4d:37:c5:7b:57:f3:8e:6d:a3:04:9f:53:6b:ec:ef:
87:59:7c:61:04:81:98:7e:eb:fe:01:78:62:2d:97:
78:e0:b2:38:96:5f:38:49:b1:b8:8f:db:47:1a:31:
e6:3f:e3:00:23:a9:54:a1:f3:f0:9d:c4:18:ad:f0:
51:1e:76:41:9d:b6:f2:bf:5b:bb:bb:52:17:ba:cb:
41:48:25:de:18:1e:7e:7a:08:6c:07:ea:7e:f7:6e:
39:20:7a:62:9b:11:1d:44:5d:43:ed:77:c0:ad:ba:
ee:af:83:ca:e3:9b:98:3a:8a:fc:f3:58:0d:71:50:
5b:07:fc:9a:7c:fb:00:74:82:bc:26:73:8c:07:52:
76:a8:f5:63:1e:de:49:5a:f1:88:b7:ce:24:54:71:
06:a3:87:bb:28:ad:42:0f:58:54:da:18:e9:23:2a:
b2:e7:8f:b9:c2:4f:85:38:c2:f6:25:81:e1:fd:bc:
3f:de:0d:21:f2:a5:d4:ed:92:65:e9:24:3b:a9:7c:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:47:C3:D4:2E:45:29:18:1A:FB:68:6E:DF:74:CB:B4:85:8B:87
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nMhHw9QuRSkYGvtobt90y7SFi4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.149.0/24
185.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:fc:40:5d:53:de:b9:4f:0f:e3:61:1f:d2:1d:08:d4:71:8d:
3e:30:9d:e2:1c:3c:b7:f7:80:79:18:c4:85:a8:fe:c3:b7:96:
01:99:ef:f3:7c:a0:a0:5c:0a:a4:eb:92:a7:2c:4e:41:e5:e1:
ec:6b:8d:b5:17:fc:de:f8:44:57:9f:1b:3a:2f:07:81:fe:50:
e3:e8:e3:e9:00:e5:88:88:30:62:bc:ce:34:82:06:00:3e:dd:
e2:c9:7c:2f:d7:2f:42:0a:1b:b9:07:6d:60:c6:55:b9:96:a9:
ec:11:5b:f2:70:0b:d0:bb:5a:86:45:19:40:cb:71:1a:7f:92:
d3:cd:88:80:99:c8:63:90:ca:52:ec:aa:e1:e1:44:d1:cc:5f:
2a:a2:22:a6:c6:0b:06:2e:d1:af:b1:26:e2:68:83:a3:cf:3c:
0a:61:f6:b6:78:ad:12:b1:d5:f8:3c:07:05:52:b2:a1:d4:cd:
26:6f:79:a5:a9:99:05:2c:ef:d4:c8:96:f2:32:19:17:4a:02:
15:82:f4:20:d3:bf:89:c2:9f:f7:9a:cd:4a:ca:09:5a:e4:8d:
b6:cf:ca:fe:9e:27:3c:1b:f0:40:ef:e0:b8:38:80:7f:df:5b:
8b:11:4d:67:f4:25:7a:b3:c3:e7:d9:b4:35:43:08:a6:0d:dc:
4d:9d:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:28:39 2025 by rpki-client