Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/KXnPsAbmORpqdkO9AoaetqDyG4Y.roa
File: KXnPsAbmORpqdkO9AoaetqDyG4Y.roa (raw, json)
Hash identifier: C/avYkjzr2w3qWtPKjVnnAEVda7YB6htySAw8Bx1h9g=
Subject key identifier: 29:79:CF:B0:06:E6:39:1A:6A:76:43:BD:02:86:9E:B6:A0:F2:1B:86
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 01938713020BB98163403F0CB0EF524970A0
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/KXnPsAbmORpqdkO9AoaetqDyG4Y.roa
Signing time: Mon 02 Dec 2024 11:13:10 +0000
ROA not before: Mon 02 Dec 2024 11:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 178.211.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:13:02:0b:b9:81:63:40:3f:0c:b0:ef:52:49:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Dec 2 11:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2979cfb006e6391a6a7643bd02869eb6a0f21b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:ba:b1:26:2f:4a:9a:fd:3d:a7:2b:c6:6b:
2f:75:71:fb:7c:67:59:4e:7c:a5:a1:4a:97:0d:b6:
57:40:fd:d5:0f:61:2b:76:e8:f4:de:9d:73:48:d8:
57:1c:b7:c1:75:a3:1e:ec:8d:85:ba:5f:19:83:f4:
51:81:6b:b9:61:35:2d:ff:41:3a:55:6e:97:fb:95:
44:2a:ff:7e:4c:ca:3a:f2:bc:8b:dc:47:50:0d:87:
5d:69:03:45:a1:0e:40:6b:63:6d:4b:36:18:96:cd:
36:c6:3a:ee:2b:f9:db:3b:17:a9:62:3f:a2:02:fd:
96:6e:9b:ec:30:45:51:71:b8:f4:fd:e6:9e:1d:f9:
50:ff:91:52:2d:5f:17:0b:8a:f9:98:32:b4:9b:33:
3e:5d:43:3e:eb:0c:af:84:6d:06:1f:a6:8e:ba:78:
66:62:af:5b:71:7e:f5:75:8d:03:8f:82:8d:1d:6c:
d1:94:99:1c:52:29:b6:10:f0:44:69:3a:a1:41:84:
bb:a4:67:93:54:8f:c3:d6:79:08:78:38:6e:05:88:
69:7c:90:84:bd:6c:e0:c3:23:ea:05:72:fd:e3:2b:
cd:f3:9c:c3:93:4e:6f:f8:39:e5:1d:95:14:23:4d:
60:16:95:b0:d6:ed:96:56:10:38:87:79:7a:33:7a:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:CF:B0:06:E6:39:1A:6A:76:43:BD:02:86:9E:B6:A0:F2:1B:86
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/KXnPsAbmORpqdkO9AoaetqDyG4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:de:2e:89:51:c2:7e:83:39:6f:84:2f:22:96:5c:58:a5:1a:
2b:be:1b:43:c7:1a:be:fa:8a:42:bd:04:de:b1:53:08:30:39:
00:a7:bf:44:d1:32:95:3c:7d:54:3a:18:52:be:27:8e:bb:5b:
69:bb:75:59:bd:84:9c:f0:ab:64:02:0b:58:01:ab:a9:94:c7:
14:24:fb:ac:cf:d1:f7:38:3b:e8:c3:38:76:a8:38:0a:9a:7d:
fb:d9:da:4f:dc:3a:d9:32:1a:3b:e0:65:83:70:6f:47:e8:8e:
da:15:47:07:5d:53:8a:9e:2f:e3:08:d6:8c:b1:e3:24:91:26:
4a:56:b5:0b:b4:2a:59:25:40:7d:4f:4e:79:11:1f:4e:56:54:
7f:da:ea:a4:ca:52:2f:69:59:62:47:4f:0e:d1:0b:11:35:53:
5f:c0:e6:65:21:ec:8a:f1:50:e0:17:cd:d2:77:d5:b8:f8:f3:
ee:76:3e:f4:c0:a7:da:f3:36:60:89:72:3d:70:88:fd:3e:04:
b5:d1:4b:16:5a:93:d0:28:74:74:8d:35:6b:51:3a:1a:58:c7:
1d:80:65:27:a4:20:a9:71:1e:41:ea:ca:3b:2d:34:69:6e:ac:
e8:9e:11:29:22:da:8b:a0:4e:fd:4c:a1:0d:f3:26:1a:82:47:
90:04:d6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:50 2025 by rpki-client