Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/E9BJec97nazB_7okVfOe05UVaIk.roa
File: E9BJec97nazB_7okVfOe05UVaIk.roa (raw, json)
Hash identifier: TPHnqPEOAJPw1Wxis9Xkl/rWXwsjq95cInqHu2qtT8U=
Subject key identifier: 13:D0:49:79:CF:7B:9D:AC:C1:FF:BA:24:55:F3:9E:D3:95:15:68:89
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 0194FF500866D9AC5B01B15513A2081078B1
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/E9BJec97nazB_7okVfOe05UVaIk.roa
Signing time: Thu 13 Feb 2025 12:37:02 +0000
ROA not before: Thu 13 Feb 2025 12:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214785
IP address blocks: 178.216.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 02:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:50:08:66:d9:ac:5b:01:b1:55:13:a2:08:10:78:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Feb 13 12:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13d04979cf7b9dacc1ffba2455f39ed395156889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:c8:bc:fb:dd:2d:23:95:cb:13:05:41:56:
e9:04:99:e2:1c:bb:6d:bc:30:44:0a:32:a9:c4:81:
36:20:fd:a8:c0:23:14:ed:f2:0a:c1:3d:7a:29:c9:
47:52:1e:7b:55:4d:bc:3f:1b:50:93:d1:d3:70:56:
3a:e7:3d:e8:a6:64:26:41:53:c2:90:99:6b:65:7a:
ae:31:ef:ee:55:d4:68:aa:81:e3:e7:92:3b:1e:7e:
5d:f7:c1:f9:df:01:92:e6:6f:9a:25:32:ca:47:29:
bc:e0:eb:3c:46:41:5b:95:5a:be:f5:4b:ac:a9:13:
aa:2b:0b:e3:c5:f7:10:d4:a8:c7:7b:9c:58:33:bb:
27:09:6f:0c:0d:4f:69:0f:05:29:bc:54:09:59:7b:
38:df:1d:37:b2:32:da:47:c1:0c:49:61:8b:85:37:
db:b6:ee:c3:8c:18:24:8b:44:71:d0:fb:11:36:7e:
ff:3f:b6:ed:43:98:7a:6c:59:11:47:eb:95:c2:68:
bd:04:5d:25:e4:08:fa:42:8e:0f:1c:35:ea:e8:56:
54:47:ef:ae:1e:23:c1:fc:1d:ce:1b:46:99:42:2c:
49:98:49:96:5a:41:d6:e7:2f:18:d4:ee:8f:e7:bd:
29:8d:1f:1f:d5:02:84:30:06:79:b6:24:da:b9:02:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:49:79:CF:7B:9D:AC:C1:FF:BA:24:55:F3:9E:D3:95:15:68:89
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/E9BJec97nazB_7okVfOe05UVaIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:eb:22:ac:e3:5d:fb:89:79:28:0a:f2:46:c3:45:28:31:48:
91:d6:59:4a:16:98:38:b6:a3:19:5c:6c:1a:85:31:b5:08:b8:
6e:74:5b:1c:97:f3:96:55:95:04:75:c8:ab:e9:91:53:13:8f:
0c:2f:86:92:63:be:03:ee:4c:77:2a:3e:fe:a7:ae:71:ca:05:
7b:f0:15:54:fb:60:f3:61:b3:bf:83:67:84:73:53:35:ef:12:
b5:b0:0f:2d:56:b6:45:e1:07:ba:7c:cd:41:20:a0:dc:f8:9d:
79:38:39:08:7d:fc:db:35:31:13:bc:6d:64:0a:7c:8c:4c:73:
e7:95:93:7b:43:55:48:2b:80:da:38:53:92:4c:38:cc:60:18:
ea:2d:fb:5b:05:23:77:23:c4:c2:50:b7:26:4b:a7:28:97:73:
1d:72:04:90:b8:cb:73:19:f0:69:d7:1e:94:22:c4:9d:a6:49:
b0:c7:1b:e5:9c:c5:3c:8a:b6:74:f1:2c:5c:d3:14:47:08:9f:
4f:da:b0:6f:a9:fc:2d:55:66:2e:db:f7:f1:43:da:4a:de:7f:
3a:10:b2:70:00:63:d4:7c:a1:23:2b:39:3e:13:e1:2f:b5:91:
37:81:15:df:c5:30:15:f8:5a:9f:8c:7f:6b:c2:24:8b:16:38:
5b:75:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:01:35 2025 by rpki-client