Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/bJvCxyevsxUGBHU8eQ1f-CyvdN4.roa
File: bJvCxyevsxUGBHU8eQ1f-CyvdN4.roa (raw, json)
Hash identifier: aCWjsLz2q+/GnprK7ZvYW0eVcgn/GgeUWHqGPSURpiw=
Subject key identifier: 6C:9B:C2:C7:27:AF:B3:15:06:04:75:3C:79:0D:5F:F8:2C:AF:74:DE
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 018CC793EDF1E3D13E562CF715B78CA8B871
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/bJvCxyevsxUGBHU8eQ1f-CyvdN4.roa
Signing time: Tue 02 Jan 2024 00:30:09 +0000
ROA not before: Tue 02 Jan 2024 00:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199345
IP address blocks: 176.124.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:ed:f1:e3:d1:3e:56:2c:f7:15:b7:8c:a8:b8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Jan 2 00:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c9bc2c727afb3150604753c790d5ff82caf74de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:4c:ad:09:b3:9c:7b:93:1a:e4:0b:2d:b3:
be:24:a9:a4:2e:59:99:c4:64:74:55:74:83:8e:43:
dc:21:9d:56:4c:a7:16:96:b4:72:b5:80:15:f5:28:
c8:1c:60:21:6f:5d:00:6e:a4:9b:8c:5b:9d:82:3a:
1c:e0:4b:00:27:e2:de:68:0b:86:4b:fe:1b:d1:50:
9e:97:0c:ff:85:88:dc:c9:93:8e:61:47:f3:72:bb:
90:82:72:97:bb:82:45:d6:35:52:45:a7:b0:7d:c4:
09:da:50:4d:ad:8b:a5:f6:aa:b3:ef:72:7f:fe:6d:
ef:32:63:84:25:b0:4c:27:42:7f:10:23:f8:f2:4b:
d0:43:9f:e4:7b:6c:22:ce:57:a1:ea:b5:7e:25:c8:
ed:82:33:28:b1:ee:48:05:71:ee:66:99:c8:5b:68:
1c:e5:72:a7:e5:5a:0d:86:38:e7:29:3b:b5:24:6f:
eb:e0:e0:68:91:27:b1:4b:e6:6b:44:c2:73:a4:53:
32:2d:8c:17:fe:d1:e6:7a:e8:ae:db:b4:30:51:00:
74:24:a3:c5:ee:f8:99:aa:e3:ee:6b:56:78:b3:c4:
9c:41:05:b9:89:22:9a:ce:3d:44:eb:a4:1b:58:7c:
89:79:6f:4f:db:0f:a0:44:21:e0:d4:c7:1f:b9:76:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:C2:C7:27:AF:B3:15:06:04:75:3C:79:0D:5F:F8:2C:AF:74:DE
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/bJvCxyevsxUGBHU8eQ1f-CyvdN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.148.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c9:ee:2f:5a:9f:d3:66:99:19:f8:8c:8a:e7:b2:4d:9e:c7:
58:76:46:53:d7:e7:5e:36:00:fc:40:d0:e1:37:5e:25:8c:fe:
6b:14:59:73:8c:55:72:c6:45:82:21:aa:fb:d6:a4:46:2c:a8:
f9:ba:7f:f0:5f:e9:90:2b:c1:0d:4b:76:a4:b0:b3:4c:d3:95:
3c:ef:a4:12:aa:6a:d1:50:3c:d2:29:5c:d8:29:dc:f9:0b:92:
36:78:ee:95:e0:f0:8f:84:00:ab:9c:29:5d:03:b7:1f:8f:0a:
2c:cc:a4:fe:06:d7:59:31:ee:a6:60:ec:f8:7b:56:a3:1c:ef:
80:ee:d9:1c:e6:36:72:fa:f9:2c:bc:19:90:24:e9:b0:06:48:
ed:99:70:62:ee:dc:01:e2:a4:7d:6b:ca:ae:dc:09:c9:d5:e4:
21:aa:4e:e4:ba:03:99:5e:dd:84:2e:6b:a4:e7:64:90:f6:fc:
42:eb:f9:56:4d:77:3c:38:c9:75:91:e7:0f:68:43:64:d1:55:
2f:4f:97:67:fc:5d:3e:e0:35:6f:e3:cf:29:c1:21:46:93:54:
b5:40:9f:37:a7:67:77:62:83:ea:09:30:28:97:cc:ba:84:70:
7e:82:65:ba:ea:5b:8d:ac:3d:b9:52:3b:15:61:23:86:2d:85:
f0:52:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:42:59 2025 by rpki-client