Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2-vyuQVyaSMcjDuoVA-dFbTgaiI.roa
File: 2-vyuQVyaSMcjDuoVA-dFbTgaiI.roa (raw, json)
Hash identifier: D5pQ2io+6d1P7A0pZx00sKlqd4x3mvtFwDqRwJKk5PE=
Subject key identifier: DB:EB:F2:B9:05:72:69:23:1C:8C:3B:A8:54:0F:9D:15:B4:E0:6A:22
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 018CC9BC7043E9BBD9A86AC07D55C57FDDA9
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2-vyuQVyaSMcjDuoVA-dFbTgaiI.roa
Signing time: Tue 02 Jan 2024 10:33:39 +0000
ROA not before: Tue 02 Jan 2024 10:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 217.147.180.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
217.147.180.0/23 maxlen: 24
2a0b:2900:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Apr 2024 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:70:43:e9:bb:d9:a8:6a:c0:7d:55:c5:7f:dd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jan 2 10:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbebf2b9057269231c8c3ba8540f9d15b4e06a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:ae:ba:47:65:09:3f:47:e3:f7:02:30:86:
0f:65:6b:ae:7d:60:4b:f1:41:b0:ad:77:4a:80:9b:
a4:53:e7:02:f2:d2:99:57:ae:bf:be:99:61:95:20:
0d:cd:c8:03:1b:65:52:c5:f8:a0:c0:fa:14:7d:b1:
2f:7d:32:ac:f0:26:35:28:5c:32:4b:49:da:e2:79:
b3:a9:4a:53:f0:7c:56:a7:c3:26:aa:73:e5:bc:33:
90:11:23:76:20:8b:ef:4e:6e:47:43:3c:3f:03:35:
41:f8:1a:70:6a:97:95:cf:7f:11:f6:fd:a1:a6:f9:
25:5c:ac:8f:d2:49:c7:89:59:16:f5:c3:83:89:bd:
f1:ec:06:94:ad:ba:41:81:68:ab:3e:a8:49:81:5f:
25:0a:7a:93:d7:da:60:f4:52:ee:34:cf:e8:f4:a5:
fa:c2:ca:80:5f:57:0e:39:68:a0:fa:95:d6:81:0f:
28:bf:7b:5d:27:03:b3:be:78:fe:17:66:93:94:c3:
f5:e9:87:c4:d7:96:98:eb:20:24:bd:0f:67:2c:2f:
75:13:69:05:f1:56:27:b5:67:3c:82:ef:08:5b:92:
30:e4:3e:90:fb:67:9e:e9:15:52:77:7f:1b:72:d5:
09:7e:2e:72:ec:86:be:e6:af:4b:ee:6e:0b:81:00:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EB:F2:B9:05:72:69:23:1C:8C:3B:A8:54:0F:9D:15:B4:E0:6A:22
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2-vyuQVyaSMcjDuoVA-dFbTgaiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.180.0/23
IPv6:
2a0b:2900:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
05:32:95:4b:0c:6f:3d:39:65:9f:0d:92:14:29:eb:1b:3d:32:
5e:90:41:78:13:81:6e:18:5b:76:2c:28:ab:58:dc:6e:b0:d7:
12:10:92:2a:36:f0:85:4c:38:4d:23:86:bf:17:74:34:4b:90:
d6:b3:c1:0e:df:5a:f7:eb:c9:66:99:40:38:0e:3f:94:27:d6:
1f:99:f0:b5:7c:02:c2:f6:a7:73:94:f6:a6:79:32:95:f0:f9:
41:f8:1a:60:73:ba:b9:a0:f9:21:98:d7:cc:b0:0b:21:6a:ec:
35:9f:2c:83:a7:01:ca:11:f0:74:49:98:ab:97:de:3a:b7:da:
a4:a9:64:b9:45:fd:50:e9:8f:60:1e:9c:2b:68:d8:da:97:3a:
36:aa:35:76:ea:b6:d7:8e:f8:2d:28:88:e1:47:c3:a1:5a:41:
49:b4:9f:9d:7b:aa:ce:41:d6:b3:ea:e2:1b:ae:87:1b:22:2f:
98:c8:26:b1:55:c3:00:0a:c6:a0:c8:eb:c7:70:08:4d:8b:b3:
9f:cb:4f:03:5d:34:de:ff:1a:cd:10:b3:4c:12:a6:0a:a9:6b:
af:ae:e9:05:67:4c:1e:bd:a3:f1:b3:b3:6f:72:71:cf:09:a3:
10:ac:c9:c0:e0:07:9f:44:05:b1:85:c5:3f:c8:8f:f2:c4:df:
03:37:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:58 2025 by rpki-client