Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/M2KjOFw7GajIgM8eUhfaicUWRbw.roa
File: M2KjOFw7GajIgM8eUhfaicUWRbw.roa (raw, json)
Hash identifier: OIOaZ1cLDxM4w1xt+8EG+WZV3TQpBrLvYRvXHzz7zdI=
Subject key identifier: 33:62:A3:38:5C:3B:19:A8:C8:80:CF:1E:52:17:DA:89:C5:16:45:BC
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 018DC09F9BD93FD69B5989737B7A59B88DA8
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/M2KjOFw7GajIgM8eUhfaicUWRbw.roa
Signing time: Mon 19 Feb 2024 09:08:21 +0000
ROA not before: Mon 19 Feb 2024 09:08:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6697
IP address blocks: 178.159.240.0/21 maxlen: 21
2a0c:b1c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:9f:9b:d9:3f:d6:9b:59:89:73:7b:7a:59:b8:8d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Feb 19 09:08:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3362a3385c3b19a8c880cf1e5217da89c51645bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:55:df:9f:2d:0e:10:38:f4:26:2d:53:50:
a7:d0:71:44:e6:5c:b6:9d:0a:71:0c:f5:d6:8e:a9:
76:23:82:72:47:13:88:21:7c:3e:85:a4:80:84:67:
08:4d:e4:fc:c7:41:8b:01:a9:ef:c9:a5:3e:0d:e8:
a0:b5:1c:e0:d1:34:0b:dd:f9:1d:b4:83:27:27:9c:
86:fa:c6:63:15:28:5c:10:00:9f:69:b3:25:da:2f:
65:ad:72:85:01:13:59:1a:05:7c:33:7a:89:18:62:
9f:6c:73:4e:36:47:ca:68:fe:2c:35:3e:91:3e:99:
59:94:09:ff:e9:47:67:08:0a:fc:f6:ce:7a:34:41:
20:6b:29:98:7f:d7:28:f8:a4:3a:d0:e3:ea:d2:63:
66:31:a8:6f:61:bc:76:dc:23:d5:e2:6b:fb:d8:7c:
75:13:15:74:d5:70:7c:d5:76:df:fe:0f:b7:c1:20:
18:f9:e5:39:7b:2a:99:75:67:e7:2f:fb:28:5f:ad:
ad:dd:9f:89:c3:bf:bb:04:31:be:61:df:b0:91:ff:
0a:d5:d2:95:a5:ea:3b:8d:c1:bb:e0:04:19:1c:e8:
eb:ed:5c:ed:7b:2d:e1:50:e0:57:73:47:20:9a:a7:
4d:59:99:88:bc:85:a0:9c:76:73:36:44:35:9c:93:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:A3:38:5C:3B:19:A8:C8:80:CF:1E:52:17:DA:89:C5:16:45:BC
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/M2KjOFw7GajIgM8eUhfaicUWRbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.240.0/21
IPv6:
2a0c:b1c2::/32
Signature Algorithm: sha256WithRSAEncryption
08:01:ad:11:3b:85:c2:0d:00:a5:18:26:8b:9e:4e:e2:97:59:
2b:bd:1a:58:ea:58:f2:77:8b:f7:b7:cf:4c:b2:94:e7:bd:9f:
32:08:54:e7:8a:02:2b:89:cc:24:ca:82:df:bb:19:10:df:e9:
b4:2a:65:eb:b5:1d:42:9b:69:7e:d3:ef:99:ff:50:53:39:7e:
90:43:f3:3f:2b:cd:68:e2:7f:73:73:a6:1f:7b:e9:04:48:06:
52:22:ae:9b:04:2c:cb:77:ab:7b:b2:77:50:bd:bf:4f:6e:d7:
72:f1:48:b1:76:69:b6:49:8a:2e:80:f5:b6:70:6b:0e:e6:75:
89:f9:e2:df:83:8d:ad:a4:92:2d:81:f8:92:73:81:b3:78:f3:
3e:ca:18:11:d4:ad:f4:59:08:7f:2c:ac:a3:de:d6:2a:06:79:
dc:f4:8d:f8:fe:cc:d8:10:20:c6:eb:fc:2d:89:4d:09:4b:9d:
33:4f:d3:c3:58:b9:3b:2d:37:36:45:1d:4a:3f:8a:93:60:e2:
1f:45:82:21:28:07:0b:a0:47:13:26:89:84:84:11:61:09:2d:
bc:12:f7:7c:51:17:8e:65:01:fc:ee:5c:2f:64:a8:fa:c4:68:
8b:16:36:19:9c:f5:32:b6:b3:6c:39:57:c3:11:32:aa:88:0c:
44:22:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:41 2025 by rpki-client