Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/XrVoIgy1S_BdtsysqVLW8ZiH2kg.roa
File: XrVoIgy1S_BdtsysqVLW8ZiH2kg.roa (raw, json)
Hash identifier: e0RQb2qbB2ocnesXsyEtAcqHAjUcNrmK014SX6gal40=
Subject key identifier: 5E:B5:68:22:0C:B5:4B:F0:5D:B6:CC:AC:A9:52:D6:F1:98:87:DA:48
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 018CC6B8E1F24AA338DAF0C8307F07F9228E
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/XrVoIgy1S_BdtsysqVLW8ZiH2kg.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52070
IP address blocks: 178.21.41.0/24 maxlen: 24
178.21.40.0/24 maxlen: 24
178.21.40.0/23 maxlen: 23
2a01:9800::/35 maxlen: 35
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e1:f2:4a:a3:38:da:f0:c8:30:7f:07:f9:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eb568220cb54bf05db6ccaca952d6f19887da48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:00:44:10:9a:e4:42:5d:e0:f8:2f:dc:c8:
db:5d:d9:0e:5f:53:60:a4:7e:75:15:69:85:51:56:
fa:b6:0c:10:b9:20:c0:6a:bd:0e:f8:45:62:95:a2:
96:be:9d:ff:b2:12:63:07:dc:a3:fc:a1:c5:60:b9:
6a:03:58:44:ad:19:71:ff:6d:6c:35:44:e8:7d:47:
05:5d:4c:b0:4e:c2:c0:a3:c9:94:84:a1:45:f0:51:
40:57:9f:e2:3b:e0:0d:65:90:1b:be:54:ac:72:1d:
8c:79:bd:e4:3a:8f:26:4e:03:ce:97:35:55:48:b1:
23:79:ac:52:b4:a3:d3:92:78:5a:0f:5b:9a:c7:b4:
5c:68:e7:13:0b:34:fe:d2:a2:c5:da:2a:b4:a8:cf:
81:a7:b8:82:53:3d:de:0c:29:b0:aa:33:ce:f9:b7:
d1:01:8a:99:08:41:51:22:37:c9:d4:a5:ab:59:e8:
8a:1a:ac:9d:ec:b4:9b:3a:32:f6:66:9a:85:81:12:
8c:7a:69:ed:b4:d9:0e:78:de:16:5e:33:5f:b8:82:
bb:ad:02:24:b0:79:e4:40:36:18:17:11:74:0e:05:
ca:4a:d2:e1:a3:cd:53:b5:ad:aa:ba:1c:1b:96:fb:
2d:9f:81:f5:8e:6e:e1:9d:91:32:5b:4d:cf:ed:59:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:68:22:0C:B5:4B:F0:5D:B6:CC:AC:A9:52:D6:F1:98:87:DA:48
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/XrVoIgy1S_BdtsysqVLW8ZiH2kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.40.0/23
IPv6:
2a01:9800::/35
Signature Algorithm: sha256WithRSAEncryption
71:ff:b8:09:1b:38:77:0f:0c:52:33:d5:d6:aa:08:a1:3f:98:
45:54:cb:a2:3d:c7:1c:3a:5a:dc:10:4d:79:c1:49:fa:ac:9b:
6c:32:e4:8f:32:d5:cf:48:b0:36:3f:55:24:f9:82:36:bb:92:
70:ea:13:85:f1:88:f2:76:19:77:66:08:65:55:79:cb:ff:e3:
1b:22:1a:76:c3:bf:b4:2d:36:c9:aa:a8:5e:7a:63:4b:d1:c5:
49:70:75:12:a9:cb:1a:07:2a:91:29:68:83:1a:b1:94:41:e1:
48:27:63:dd:db:2b:69:c3:3a:c0:8e:28:26:0d:a4:5a:fa:6b:
86:c1:14:d5:fc:91:ff:34:fd:fd:9f:ee:61:74:f5:a2:d6:a6:
a1:64:e2:cb:0b:50:64:ee:24:db:72:41:ed:aa:c1:db:a8:3d:
d5:18:fc:1c:e7:2b:f4:3f:ee:bc:b7:ed:e6:84:1c:f0:9d:a7:
c5:bf:0b:a8:4d:a8:82:71:7a:88:70:a3:3e:ea:0b:eb:a6:c5:
2c:d0:b6:bf:33:cd:8b:a1:43:87:82:cc:6c:aa:b9:08:54:8a:
b5:57:ea:0d:22:f9:b6:0a:6b:02:c5:60:90:74:45:04:45:8e:
f4:bb:89:61:8c:68:d5:47:a0:a6:32:fd:04:9a:12:1e:87:8c:
47:b9:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:10 2025 by rpki-client