Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vPlQGxoEbacynzTuTMjNtgP1eeA.roa
File: vPlQGxoEbacynzTuTMjNtgP1eeA.roa (raw, json)
Hash identifier: 34K01MMXyZTmQJxPzRGRqsIN45taSQ4QJS9u9cp9I64=
Subject key identifier: BC:F9:50:1B:1A:04:6D:A7:32:9F:34:EE:4C:C8:CD:B6:03:F5:79:E0
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01918E64E554C932C619B1B109FFC8916D38
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vPlQGxoEbacynzTuTMjNtgP1eeA.roa
Signing time: Mon 26 Aug 2024 11:14:22 +0000
ROA not before: Mon 26 Aug 2024 11:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 11:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:64:e5:54:c9:32:c6:19:b1:b1:09:ff:c8:91:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 26 11:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcf9501b1a046da7329f34ee4cc8cdb603f579e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:a4:8c:d1:23:dd:d0:a5:1b:7b:9d:a6:67:
79:c7:92:95:fb:57:4d:ab:c0:9d:37:e4:1b:a9:00:
a5:e4:6b:f2:43:d2:30:f1:56:0b:04:a5:49:da:b4:
b0:ec:3e:96:79:5e:2b:3a:c2:a0:8c:2f:29:f6:65:
e1:87:56:a3:5a:e9:f8:f5:f2:17:79:40:4f:33:fc:
80:c7:ba:6b:50:80:2f:1b:c2:5f:da:c4:3d:c7:b0:
f3:e6:4d:b8:7c:e7:01:6a:3e:0f:5c:c5:96:7c:df:
87:15:5c:90:11:b6:49:47:ae:b6:82:e6:14:e7:e5:
e9:24:be:4a:c9:11:44:ab:44:c8:dd:5a:ee:64:f3:
0a:6b:30:a7:18:53:82:98:da:38:a6:d8:9e:d6:4e:
63:c3:84:35:81:65:26:97:2a:b9:b6:42:32:15:64:
5e:48:9f:52:58:58:06:fd:0a:5b:ef:07:10:e2:e8:
1a:3c:36:51:91:cf:92:88:8c:fd:11:61:54:b9:ba:
2a:8e:32:0a:1e:b7:93:8e:67:22:a9:5b:84:39:65:
8b:a5:84:25:bf:61:a6:91:82:27:02:40:55:85:38:
41:b6:8a:66:57:87:d4:24:b9:bc:70:ed:13:c8:0b:
5f:48:48:c5:ef:ae:e7:3a:f1:19:cd:20:35:40:85:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:50:1B:1A:04:6D:A7:32:9F:34:EE:4C:C8:CD:B6:03:F5:79:E0
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vPlQGxoEbacynzTuTMjNtgP1eeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:30:f8:28:a0:82:8f:bc:6f:b9:34:dc:dc:66:78:ea:ae:b5:
2e:4b:a4:b7:f2:3c:67:bf:31:3e:0b:80:15:ab:ea:8b:7d:1e:
f9:04:34:b7:5f:a9:2c:ef:e1:21:72:b4:92:2f:8d:6b:f6:7e:
0c:14:0e:00:b9:19:42:47:a1:0e:70:4e:1a:97:26:fb:0b:5d:
c8:84:0e:7c:5f:6b:e9:9c:90:73:74:c9:93:40:82:54:4a:f9:
12:04:da:2a:f2:79:49:2d:bd:30:83:59:25:a5:7e:62:f8:79:
72:a1:32:67:42:a4:34:11:32:5b:85:4d:c6:52:02:80:97:80:
0d:e0:75:2c:ec:b3:25:13:c0:74:26:07:10:2f:1f:37:2a:f8:
19:10:34:99:76:b7:08:cc:d0:ac:e4:7d:ba:ab:df:83:7c:9f:
32:51:2f:89:30:7e:5a:05:42:f5:c7:87:fb:71:28:47:77:f6:
72:71:31:26:ac:a1:d3:cf:9e:4d:b1:01:4e:e1:92:41:50:f4:
a7:78:a4:01:b5:8f:4c:f4:61:21:f4:84:9c:6f:27:5f:45:73:
31:82:73:81:d6:b7:80:de:0e:69:83:98:84:27:08:81:60:38:
f9:f4:d1:99:d7:0d:f0:ff:cd:1c:5f:f2:8a:c8:97:e4:06:e6:
d0:fc:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:29 2025 by rpki-client