Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vfZ2br4gyUOWNts6vM890H6a2Fc.roa
File: vfZ2br4gyUOWNts6vM890H6a2Fc.roa (raw, json)
Hash identifier: KZ8d4dCemFQERxx6fIWb/nnCrZQ3CC2pattdKG7wKEc=
Subject key identifier: BD:F6:76:6E:BE:20:C9:43:96:36:DB:3A:BC:CF:3D:D0:7E:9A:D8:57
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019036A66C0BFBFEFDE9DAFBB63260AD6D37
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vfZ2br4gyUOWNts6vM890H6a2Fc.roa
Signing time: Thu 20 Jun 2024 17:16:34 +0000
ROA not before: Thu 20 Jun 2024 17:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 11:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:36:a6:6c:0b:fb:fe:fd:e9:da:fb:b6:32:60:ad:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 20 17:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdf6766ebe20c9439636db3abccf3dd07e9ad857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:2c:20:23:98:63:f2:aa:28:fc:1c:00:a8:
c6:31:1e:14:26:07:e5:c7:39:c7:08:10:ba:05:70:
6c:77:e2:35:a4:c1:fd:13:06:0b:4a:66:90:b5:39:
6c:8f:c6:ff:db:0a:6b:7c:36:2d:ee:2f:75:89:fa:
eb:0f:62:55:60:e8:c6:2e:da:7f:2a:94:d7:f7:00:
f8:ef:bc:ff:4c:16:59:d5:7c:3b:18:ab:6f:c0:d7:
f8:60:70:62:84:f3:33:30:20:2e:ca:40:96:51:30:
9b:39:88:8c:b0:14:c4:fc:5f:2f:4d:2a:c8:17:54:
ec:28:ae:db:08:69:89:20:76:d8:f9:52:41:2e:c5:
da:f1:f7:7c:4a:53:60:fe:5d:ed:7a:f7:5c:bd:51:
96:ab:ee:cc:2a:40:ab:2b:6e:46:c8:be:b7:38:83:
da:82:53:ea:d1:c3:b9:8d:81:cd:fe:9d:49:54:72:
15:03:fd:90:7e:42:17:2e:27:13:7f:d5:a7:b8:18:
39:d3:28:59:6f:22:87:3c:d8:7c:b5:fe:f6:bb:27:
e0:f7:5f:b3:5f:6b:5b:fc:5a:42:93:89:e1:98:d3:
53:2c:5b:4f:4b:7e:f2:35:26:c2:29:0f:5e:b7:4f:
29:51:a0:cc:88:29:fb:a5:71:ce:e6:04:50:28:58:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:76:6E:BE:20:C9:43:96:36:DB:3A:BC:CF:3D:D0:7E:9A:D8:57
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vfZ2br4gyUOWNts6vM890H6a2Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
178.239.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:60:d1:26:59:33:66:f4:fb:4c:10:91:c9:b9:9f:d1:04:64:
5c:db:49:3c:51:52:9e:bf:c4:d4:2b:a3:97:10:da:46:a3:99:
43:d0:4f:d0:ca:62:8e:3d:ee:4b:7d:39:18:8c:34:f6:2d:10:
dc:d3:59:f4:00:98:86:4c:48:b7:b4:3a:8f:c3:1b:c3:d7:61:
38:ec:7b:e0:ee:55:92:9f:c1:07:59:c6:1c:12:42:f4:d1:f8:
e6:ce:a6:c6:89:ad:cc:63:54:74:0e:5d:79:87:13:97:b0:d1:
2b:50:a7:cc:a0:10:04:af:c2:ef:81:d3:a0:6c:97:4c:4f:81:
16:39:6c:2d:a6:7d:14:5b:8e:42:c5:38:8d:7d:08:37:da:7b:
2c:b1:b1:a5:ef:50:c8:09:38:e3:d9:a2:34:b4:5b:01:d4:7c:
b7:6e:f3:8d:85:07:fd:d7:d2:14:bd:68:0f:f1:ea:83:4a:37:
19:69:94:f1:3e:ac:27:49:9e:74:5d:2c:42:03:fe:2b:e8:8a:
80:93:6a:3e:f8:a4:6d:b6:b2:48:6a:a9:d9:2d:3c:e2:4a:6d:
19:8d:df:ac:06:3b:ce:64:8a:4b:06:fd:dd:c0:9c:7f:fb:95:
7e:e1:bb:62:76:a6:9c:ca:e8:ce:be:ef:bb:33:a2:e1:ec:66:
3c:42:30:c6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZA2pmwL+/796dr7tjJgrW03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjQwNjIwMTcxNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGY2NzY2ZWJlMjBjOTQzOTYzNmRiM2FiY2NmM2RkMDdlOWFkODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKssICOYY/KqKPwcAKjGMR4UJgfl
xznHCBC6BXBsd+I1pMH9EwYLSmaQtTlsj8b/2wprfDYt7i91ifrrD2JVYOjGLtp/
KpTX9wD477z/TBZZ1Xw7GKtvwNf4YHBihPMzMCAuykCWUTCbOYiMsBTE/F8vTSrI
F1TsKK7bCGmJIHbY+VJBLsXa8fd8SlNg/l3tevdcvVGWq+7MKkCrK25GyL63OIPa
glPq0cO5jYHN/p1JVHIVA/2QfkIXLicTf9WnuBg50yhZbyKHPNh8tf72uyfg91+z
X2tb/FpCk4nhmNNTLFtPS37yNSbCKQ9et08pUaDMiCn7pXHO5gRQKFhOvwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL32dm6+IMlDljbbOrzPPdB+mthXMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvdmZaMmJyNGd5VU9XTnRzNnZNODkwSDZhMkZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsu+TAwQA
su+WAwQAsu+ZMA0GCSqGSIb3DQEBCwUAA4IBAQBMYNEmWTNm9PtMEJHJuZ/RBGRc
20k8UVKev8TUK6OXENpGo5lD0E/QymKOPe5LfTkYjDT2LRDc01n0AJiGTEi3tDqP
wxvD12E47Hvg7lWSn8EHWcYcEkL00fjmzqbGia3MY1R0Dl15hxOXsNErUKfMoBAE
r8LvgdOgbJdMT4EWOWwtpn0UW45CxTiNfQg32nsssbGl71DICTjj2aI0tFsB1Hy3
bvONhQf919IUvWgP8eqDSjcZaZTxPqwnSZ50XSxCA/4r6IqAk2o++KRttrJIaqnZ
LTziSm0Zjd+sBjvOZIpLBv3dwJx/+5V+4btidqacyujOvu+7M6Lh7GY8QjDG
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:37 2025 by rpki-client