Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Fv7k4HMxWuFmDhcjG0H3HfEgGxg.roa
File: Fv7k4HMxWuFmDhcjG0H3HfEgGxg.roa (raw, json)
Hash identifier: zAFALK/58KrN1XVrD9wpuws/BnZPvtb+bk8um3xl4r8=
Subject key identifier: 16:FE:E4:E0:73:31:5A:E1:66:0E:17:23:1B:41:F7:1D:F1:20:1B:18
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC795251FAD9DF0B7A37F7004725D2993
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Fv7k4HMxWuFmDhcjG0H3HfEgGxg.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59831
IP address blocks: 217.78.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:25:1f:ad:9d:f0:b7:a3:7f:70:04:72:5d:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16fee4e073315ae1660e17231b41f71df1201b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:6e:36:2d:d4:72:0d:43:1a:f5:89:36:57:
a1:6e:4b:ea:a4:68:e4:74:ca:e0:1e:cd:8c:12:af:
b5:a1:94:58:79:9f:72:b8:94:32:3f:41:d5:55:fe:
16:3c:fe:fe:3e:80:aa:c0:f4:ac:f2:dd:a6:3d:fc:
14:98:d0:9d:78:0c:69:02:f9:71:f4:b6:4e:38:db:
fe:af:65:b3:dc:a7:ea:07:2e:73:dd:ac:e9:0d:f3:
65:54:0e:e3:bb:37:89:a8:d1:bc:79:a7:a7:c5:b8:
eb:73:4a:32:4f:c7:36:73:8a:03:b8:5b:9a:9d:7a:
49:e6:3c:0d:2a:8a:f7:d7:68:48:07:f3:27:b5:5a:
f7:fa:b3:15:4a:37:2d:50:7e:dd:3c:25:fa:29:0b:
e5:ed:6c:63:49:95:04:9e:a0:87:07:8f:22:55:66:
a1:56:3c:d3:c2:af:51:4d:36:2c:b6:0f:0a:a0:2b:
11:0b:b2:4c:d5:c0:ba:a6:92:10:b1:15:cd:c0:11:
4f:6a:0b:28:95:6d:dc:fa:f0:29:7b:85:0d:83:cb:
25:c0:cc:27:64:60:11:80:ed:35:9b:21:69:80:87:
de:35:88:64:4f:cb:b8:93:87:77:5a:ad:2a:f8:35:
1d:e6:6d:93:0c:35:c5:9d:c6:d9:9d:94:bf:63:01:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:E4:E0:73:31:5A:E1:66:0E:17:23:1B:41:F7:1D:F1:20:1B:18
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Fv7k4HMxWuFmDhcjG0H3HfEgGxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.235.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7b:31:c7:c7:bd:b0:f8:e5:9c:f1:7f:f6:4a:bf:02:3f:b9:
1d:eb:2f:f4:63:98:5a:75:ff:19:7d:b3:42:d8:ad:96:25:da:
a2:a4:1d:70:f3:80:f5:ee:d4:98:63:75:6b:11:74:e8:ed:54:
40:48:78:c6:3b:06:89:75:76:3f:14:8a:2a:19:44:9f:15:bd:
d4:b1:01:75:b5:2c:30:f1:bb:9d:50:a7:e1:a8:06:fd:1f:83:
22:b9:43:3d:83:e5:51:b4:5e:c6:73:ea:e9:57:df:19:ff:d2:
5d:40:89:28:22:be:e8:e3:29:a3:ba:58:6f:ba:f0:28:09:3d:
e3:cf:82:57:cf:76:10:5d:d0:2f:36:2a:bb:00:a1:95:9f:8c:
c9:37:5f:49:a2:2a:3f:58:43:77:42:a0:9e:ac:02:42:d9:86:
77:4d:98:93:0c:57:a9:6e:1b:94:97:dd:88:e6:c5:a1:77:20:
f0:6a:b0:e7:ed:db:6b:d5:79:ae:45:bb:64:6b:31:3b:c6:0f:
58:69:7b:46:f0:cb:90:7b:7f:44:a7:3e:2c:be:df:9c:48:13:
74:13:6d:3d:ec:7f:c4:3b:7b:ef:d1:d8:f4:67:53:43:03:8a:
df:b6:92:ec:0b:77:b2:50:de:e6:0b:4d:e4:9e:e2:0a:27:e1:
a5:d2:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:56:31 2025 by rpki-client