Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/C-oAlmkgKppV_0pbElIv7zxlVIA.roa
File: C-oAlmkgKppV_0pbElIv7zxlVIA.roa (raw, json)
Hash identifier: J7c8Qc93SQw2Jl0bV+quAyAXoQlxiYMaVe9XjmecRG8=
Subject key identifier: 0B:EA:00:96:69:20:2A:9A:55:FF:4A:5B:12:52:2F:EF:3C:65:54:80
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 018CC94E3F7B49325D958A45E35F4B8F44B6
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/C-oAlmkgKppV_0pbElIv7zxlVIA.roa
Signing time: Tue 02 Jan 2024 08:33:17 +0000
ROA not before: Tue 02 Jan 2024 08:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41227
IP address blocks: 78.111.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3f:7b:49:32:5d:95:8a:45:e3:5f:4b:8f:44:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 2 08:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bea009669202a9a55ff4a5b12522fef3c655480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:8c:d2:94:84:6d:a0:55:e2:c9:ea:0e:e7:
3d:e1:7c:c5:1d:46:1d:80:07:9d:c9:5a:9a:51:24:
e5:0d:d5:e6:35:e2:44:22:d3:40:57:19:8a:68:87:
33:d6:fa:a7:b5:b2:49:9a:6c:31:e2:1b:19:f8:23:
00:1d:40:e0:00:d3:b0:aa:5e:89:37:4e:d3:e6:c9:
18:50:62:10:5a:1c:b0:01:7b:eb:c9:f6:70:1c:dd:
b8:9e:1b:3c:24:b9:a4:64:35:26:97:2b:0c:ee:68:
8f:e9:9a:4c:2a:ab:7b:ad:b8:f9:9d:fc:ba:2f:46:
a8:9d:3f:3b:2a:71:b4:98:1e:ef:1a:c4:b4:07:32:
d2:db:fe:71:84:46:77:3a:1c:ed:f4:2c:14:8a:de:
1e:58:97:98:0b:8f:e0:d7:a8:34:e4:55:4e:ca:6c:
b6:7d:72:e0:5f:6d:14:98:d8:cd:cc:0c:36:ee:f1:
f6:73:21:e6:1c:61:12:60:ee:75:5a:39:4b:f8:7b:
ca:5c:04:8d:93:21:8a:9d:0f:ae:e6:97:19:8d:24:
d9:72:25:17:33:38:63:97:52:7c:45:29:18:7f:e1:
04:2f:c7:3e:f3:e7:93:3d:18:12:9b:27:b3:d2:be:
11:93:7d:5e:a6:83:cf:00:f7:dd:01:c8:98:da:bc:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:00:96:69:20:2A:9A:55:FF:4A:5B:12:52:2F:EF:3C:65:54:80
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/C-oAlmkgKppV_0pbElIv7zxlVIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:13:5f:f8:2f:89:2a:c0:05:e4:97:24:5e:8d:46:12:f0:71:
4a:fa:df:26:2e:fc:64:22:a6:ac:3d:ea:f4:d0:a6:ae:49:17:
b8:d7:4e:86:04:94:48:fe:ef:c0:4c:a7:1a:7d:8d:57:ac:33:
02:97:c7:1b:dd:ab:0d:e2:70:e5:32:46:fd:4a:cc:2e:2f:94:
15:72:b4:bf:ff:55:13:1c:0f:80:ed:c3:50:ef:c9:46:ee:ca:
77:bd:d7:72:fa:11:37:e0:29:6f:42:84:5f:7d:3c:95:2b:f3:
67:bb:74:4f:c4:cc:89:ff:05:fd:17:21:14:ea:2c:5d:21:49:
fa:7c:b2:52:1a:72:b5:4c:d9:15:d4:46:00:08:55:66:73:dc:
ae:74:23:a2:82:06:5c:55:b1:38:f5:65:96:c8:00:94:ad:e5:
4a:2c:50:ab:0a:82:b3:1b:39:cd:aa:df:68:87:db:b2:78:83:
5a:4a:28:d3:f2:d2:36:2b:fe:e1:e4:51:d3:84:64:74:d7:3b:
2b:6c:6d:96:57:7b:72:27:9b:d3:63:30:36:a3:01:b3:c2:ba:
0c:ca:69:4d:b8:5e:59:b5:47:f9:b5:7a:50:6d:c1:2a:d3:3b:
7f:02:57:e8:dc:85:76:c5:1d:e9:d2:f0:22:e0:08:bb:38:39:
27:a3:49:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:13 2025 by rpki-client