Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/IpYosLv5bgQnbYgy8hBrKIxyH5c.roa
File: IpYosLv5bgQnbYgy8hBrKIxyH5c.roa (raw, json)
Hash identifier: Is7dn2uLsbqG+OYqBzC9CYqz6UQrFg5nlmTf9Dad6Ng=
Subject key identifier: 22:96:28:B0:BB:F9:6E:04:27:6D:88:32:F2:10:6B:28:8C:72:1F:97
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0190307026DF59EA35FD259154AE187F0650
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/IpYosLv5bgQnbYgy8hBrKIxyH5c.roa
Signing time: Wed 19 Jun 2024 12:19:34 +0000
ROA not before: Wed 19 Jun 2024 12:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15434
IP address blocks: 178.255.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:70:26:df:59:ea:35:fd:25:91:54:ae:18:7f:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jun 19 12:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=229628b0bbf96e04276d8832f2106b288c721f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:4b:9a:fe:b7:c7:6e:be:e4:15:cb:00:11:
eb:b0:c7:db:a9:cd:e0:fa:71:65:ed:e1:d7:41:af:
35:1a:66:62:14:2a:c0:94:78:df:08:c8:43:18:35:
f1:05:fb:04:b8:79:89:99:9c:8c:4c:33:0b:f0:62:
f2:e5:1b:8b:aa:6e:e0:55:cd:b6:e8:8d:ba:db:56:
bc:a7:8b:b4:8e:d9:64:4f:d5:b2:34:ef:17:c8:f5:
8b:f9:00:08:33:c7:d9:3d:10:79:98:43:47:4b:f1:
82:f6:dd:f4:2e:8c:54:06:28:3d:67:d5:50:ce:6b:
1b:d4:63:96:8d:dd:ac:61:5b:30:24:83:bf:93:85:
e5:84:5d:c4:72:6d:bc:49:9a:03:3e:1d:a0:45:89:
3a:0a:34:87:d7:24:9d:73:19:6c:29:1f:8b:68:e0:
e9:63:5a:2f:b2:0c:35:79:7a:03:f3:b5:59:35:2e:
c8:46:9a:a2:e4:23:cc:40:a2:dd:13:2b:13:20:34:
77:c9:ce:79:3a:fb:36:87:58:2e:1b:02:e3:43:04:
bc:a1:61:cf:38:b2:d8:2e:d6:d1:57:8d:2f:d7:f1:
88:81:a5:c7:73:d1:fa:1a:45:c3:f2:22:2e:2d:7e:
c8:52:a5:23:6a:cd:de:43:6a:ac:71:cc:bd:1c:9c:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:28:B0:BB:F9:6E:04:27:6D:88:32:F2:10:6B:28:8C:72:1F:97
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/IpYosLv5bgQnbYgy8hBrKIxyH5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:19:ab:e8:6f:8b:b1:ec:24:61:08:1c:54:17:a9:94:0a:ac:
54:53:db:4b:9f:ed:41:23:af:d3:0e:f2:88:eb:5c:dc:88:ed:
44:b2:a2:0f:e3:94:6b:70:66:51:97:8d:e8:37:2c:e2:85:2a:
56:de:1a:97:01:a0:80:52:12:09:4e:2a:a0:fb:f7:04:7c:4e:
8a:4f:7c:d8:c7:21:c0:6a:89:df:db:c8:dd:89:b6:22:d7:62:
59:5f:ca:c0:6c:6c:ce:cc:96:67:ce:85:6f:d0:28:ac:59:3d:
16:2a:a8:68:18:91:82:6c:4a:2b:26:4c:61:e5:94:ec:1e:7b:
63:0d:bb:a2:a7:ef:d4:93:13:1c:d6:34:ea:8d:48:d5:70:29:
c8:ee:24:8a:4a:b4:d2:60:62:51:f2:6a:8d:b2:d8:f2:2c:79:
e4:ba:8f:38:12:c1:40:55:76:35:8d:e1:61:f4:bb:d4:1b:41:
ab:47:1b:34:39:2d:0c:94:a9:26:ed:83:74:fc:3e:78:e3:82:
f9:2e:b1:54:4b:6c:b1:e4:66:80:d5:02:de:dc:63:e6:4c:38:
d5:70:01:0c:b6:a1:1f:34:c3:dd:23:62:d9:ae:8b:aa:b8:cf:
6a:0a:fc:26:03:d2:d8:02:2a:f8:7c:cd:bf:b6:71:df:37:40:
7a:a0:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:40 2025 by rpki-client