Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/TVAiVXD3D_VmdU5SUD6j21Op-Dk.roa
File: TVAiVXD3D_VmdU5SUD6j21Op-Dk.roa (raw, json)
Hash identifier: rAIeHEjC2x9LQRFY61VDu5rFDAkN/jKTk2Fo3B9m6ak=
Subject key identifier: 4D:50:22:55:70:F7:0F:F5:66:75:4E:52:50:3E:A3:DB:53:A9:F8:39
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 018CC5000E0466B4F93B0EFCA11920682E10
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/TVAiVXD3D_VmdU5SUD6j21Op-Dk.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205257
IP address blocks: 178.17.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0e:04:66:b4:f9:3b:0e:fc:a1:19:20:68:2e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d50225570f70ff566754e52503ea3db53a9f839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:ce:b6:c6:3a:45:68:df:d3:48:35:ca:59:
5c:e1:13:e3:fe:04:cb:3c:f8:90:61:b2:9b:28:e8:
f6:46:8f:b4:e0:a1:56:0a:ed:9e:1d:53:e4:fa:0f:
7f:77:4b:12:e3:f0:fa:0d:54:36:9d:25:08:68:b5:
53:52:4c:44:70:3f:d2:bb:88:5a:e6:39:35:05:53:
25:a0:3f:f1:c2:46:20:22:be:dd:f9:75:f8:b7:b1:
2b:d1:e1:8f:9e:5e:2e:e1:4e:f4:b7:cf:1f:53:f1:
c5:b3:ec:42:07:76:4d:7a:8e:69:98:32:9e:cd:d4:
f0:54:a0:48:8d:ad:d0:f7:85:3d:27:a0:39:70:7f:
ae:41:46:89:20:e1:6a:8c:df:22:8b:6b:64:a2:a8:
c4:64:a1:1c:e3:30:43:35:98:7a:a1:c7:96:37:0e:
f8:9d:4f:20:45:6d:da:8c:2d:d1:c6:31:c6:e4:97:
21:6b:98:ee:bd:cd:4f:ae:17:4f:f6:1b:fa:66:7b:
f6:97:ce:b9:af:10:b1:84:f3:15:c6:3a:b1:a2:dd:
0f:05:7a:ae:1c:db:f5:25:36:52:13:c4:18:28:9c:
9b:ad:df:10:63:64:07:d5:e5:ab:aa:45:f4:29:df:
c1:e3:28:e4:d6:23:47:99:8d:8d:9b:65:aa:d8:d2:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:50:22:55:70:F7:0F:F5:66:75:4E:52:50:3E:A3:DB:53:A9:F8:39
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/TVAiVXD3D_VmdU5SUD6j21Op-Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.217.0/24
Signature Algorithm: sha256WithRSAEncryption
47:76:63:14:29:7b:f3:57:b3:3d:57:fa:06:5e:2d:b2:80:eb:
18:cd:8e:7d:5a:34:bc:16:1f:f0:55:5b:3e:68:eb:6f:27:38:
41:99:57:cf:53:cd:77:59:e3:c2:73:a5:a3:cf:bd:35:d2:ab:
0d:40:96:92:be:3c:d4:20:47:aa:03:a4:c2:15:49:b1:77:ac:
48:c6:e9:36:95:96:80:ba:84:5c:50:bb:01:a7:11:5d:f2:c9:
82:e7:68:b6:bf:80:4b:53:d4:3a:5d:e5:36:87:d0:e3:33:92:
64:99:9a:18:18:1b:4a:a8:de:51:19:84:25:f5:4e:46:42:35:
7d:0c:04:50:65:a2:5f:5e:dc:e1:d2:cd:e1:60:69:f5:f7:c1:
13:f9:4b:3f:02:46:49:f9:02:7f:c4:de:5e:0a:08:ea:fe:4a:
e1:7f:57:80:6b:38:35:25:01:0c:e9:78:9f:91:4a:7c:ef:46:
74:21:f9:5b:31:cd:e9:01:a0:b3:a0:35:3c:ae:e9:86:b8:ad:
a4:7a:3e:41:30:c1:ff:8f:a8:02:8e:ed:7c:dd:57:cb:20:ad:
76:85:e9:b4:07:34:a9:a7:10:af:e2:3f:30:33:a0:70:a1:dc:
ed:5d:f8:ff:58:e2:8f:ce:96:f6:d2:0f:a1:9c:08:a6:7d:9a:
b3:02:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:16:57 2025 by rpki-client