Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/C8w9xsVvQdCe_P55QBinbbharHw.roa
File: C8w9xsVvQdCe_P55QBinbbharHw.roa (raw, json)
Hash identifier: sAWiB/w2NrICpIxJrvTkVI0zjtPfSmv7Z5+YfBNSkHE=
Subject key identifier: 0B:CC:3D:C6:C5:6F:41:D0:9E:FC:FE:79:40:18:A7:6D:B8:5A:AC:7C
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01958F3FFB4D337301627DE3BBE43839A4AA
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/C8w9xsVvQdCe_P55QBinbbharHw.roa
Signing time: Thu 13 Mar 2025 11:24:49 +0000
ROA not before: Thu 13 Mar 2025 11:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43586
IP address blocks: 78.24.72.0/24 maxlen: 24
78.24.75.0/24 maxlen: 24
78.24.76.0/24 maxlen: 24
78.24.77.0/24 maxlen: 24
78.24.78.0/24 maxlen: 24
2a00:1908::/35 maxlen: 35
2a00:1908:2000::/35 maxlen: 35
2a00:1908:4000::/35 maxlen: 35
2a00:1908:6000::/35 maxlen: 35
2a00:1908:8000::/35 maxlen: 35
2a00:1908:a000::/35 maxlen: 35
2a00:1908:c000::/35 maxlen: 35
2a00:1908:c000::/36 maxlen: 36
2a00:1908:d000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 13 Mar 2025 19:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:3f:fb:4d:33:73:01:62:7d:e3:bb:e4:38:39:a4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Mar 13 11:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bcc3dc6c56f41d09efcfe794018a76db85aac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:8d:c6:4b:c1:f9:42:29:8d:ce:1d:52:fa:
9e:fc:1b:c3:9e:57:a1:d4:5d:be:ae:5d:8e:7e:e2:
5f:93:ba:fd:71:08:8e:0a:7c:95:3b:15:c8:32:b5:
f2:ca:2e:68:06:6a:fb:3b:fa:58:53:a0:6e:5a:f3:
30:28:2d:2c:eb:88:aa:d3:29:d9:35:47:e4:60:d3:
de:18:f2:2f:56:3f:a7:53:cc:16:bc:0e:4d:46:a9:
a3:0d:e3:38:c1:9d:d2:60:8c:39:63:dc:51:f4:2c:
84:2e:34:5a:95:10:93:8c:33:b7:19:f5:bb:0a:64:
73:bc:5e:98:0f:07:e6:67:d4:a7:33:05:1a:b8:4b:
df:79:dd:11:b2:0d:af:f9:b4:8a:64:86:6b:90:7a:
b0:65:f4:03:ce:e4:63:11:f9:56:78:62:a8:7a:bf:
7b:c1:4a:d7:bf:22:af:e6:e2:02:c7:ec:eb:dc:24:
dd:0e:93:36:fd:da:f9:ed:07:01:66:a1:51:4c:2a:
39:8b:30:43:42:ca:eb:c8:e5:8f:b8:e9:86:a7:98:
30:52:06:f3:48:49:7d:7d:dc:13:29:56:8b:6c:1c:
e9:5b:0f:b6:b6:d1:10:14:1c:fd:f8:5b:d3:cc:c8:
35:5c:fa:99:a1:58:28:f0:e4:4e:47:51:67:9e:a5:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:3D:C6:C5:6F:41:D0:9E:FC:FE:79:40:18:A7:6D:B8:5A:AC:7C
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/C8w9xsVvQdCe_P55QBinbbharHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.72.0/24
78.24.75.0-78.24.78.255
IPv6:
2a00:1908::-2a00:1908:dfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:57:c5:02:63:30:79:c7:a0:83:1b:e3:1b:99:98:af:a6:a9:
6c:2f:8f:03:fb:be:0a:15:9d:13:cd:ef:8d:ae:ec:46:c5:1d:
9a:7b:d4:af:83:f8:28:db:96:1c:d6:c3:72:ae:69:c8:03:7d:
37:9a:3a:ba:01:50:bb:ed:ea:38:04:68:65:37:4c:e6:f1:d5:
9a:b0:58:5e:bd:85:4c:ce:d0:02:b9:e5:76:cb:e1:fe:f5:24:
cc:67:a2:0e:2a:ff:d1:e6:83:c7:8e:1c:47:3e:d2:4a:8c:30:
1e:34:44:00:0c:60:ce:3e:8d:7a:bb:0c:e4:3e:54:63:b2:ef:
c6:59:58:62:0d:df:bd:ae:4c:eb:70:92:df:c8:30:b9:b9:a8:
1b:c9:da:82:12:9b:da:43:05:39:00:27:b3:52:32:45:19:59:
50:c4:25:88:a4:9d:b3:ca:e0:f4:4c:4a:2b:d3:d8:0d:61:fb:
b3:3b:9a:74:89:4e:36:1b:31:9b:d4:6c:7d:b4:f7:7e:d0:e8:
41:f3:51:da:e3:01:a6:da:8f:bd:99:b2:cd:69:b9:b8:a8:d8:
34:b6:d0:fd:e3:ac:49:42:1d:0d:28:59:5d:5d:24:09:82:a2:
af:ff:2c:34:e4:4d:17:54:f2:22:ed:1b:49:ac:0b:b3:a4:6a:
28:88:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:50:47 2025 by rpki-client