Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/A1guMuAVVPzFAlZ1kvL2s23Xp5E.roa
File: A1guMuAVVPzFAlZ1kvL2s23Xp5E.roa (raw, json)
Hash identifier: Cez++p4i/mbLT8G62B+feBdbGZsbaAt0xOgP1g59e1A=
Subject key identifier: 03:58:2E:32:E0:15:54:FC:C5:02:56:75:92:F2:F6:B3:6D:D7:A7:91
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0194A1E8590A9B3E70B555CC4CFF04574AF1
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/A1guMuAVVPzFAlZ1kvL2s23Xp5E.roa
Signing time: Sun 26 Jan 2025 09:19:06 +0000
ROA not before: Sun 26 Jan 2025 09:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 178.17.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 11:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a1:e8:59:0a:9b:3e:70:b5:55:cc:4c:ff:04:57:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 26 09:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03582e32e01554fcc502567592f2f6b36dd7a791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:1f:80:e9:63:6c:78:d5:15:e8:99:ab:34:
7b:5f:8f:cc:70:ef:e3:08:9c:97:f3:e9:b7:3e:11:
4c:c2:d9:f3:41:23:e4:bf:b5:b4:e9:22:ad:45:f3:
8a:3c:22:93:51:12:9e:25:cc:70:ec:b2:5c:1a:79:
93:85:fd:e7:f8:1f:8f:ba:05:77:cf:cb:07:39:db:
fb:49:93:ee:a3:86:1d:6e:3a:7a:c6:c3:12:2c:b8:
34:16:f3:57:ec:05:83:1c:82:d0:cf:fe:62:ce:d2:
d1:0f:8c:c7:a1:d8:2f:5a:fc:fc:b8:58:ec:78:05:
88:a5:32:43:c4:3d:62:41:40:a7:92:91:7f:95:44:
02:ac:d7:5a:f6:0c:5a:d9:90:c6:34:df:24:9b:82:
cc:a2:e8:8a:9f:49:57:84:08:ac:73:8a:bf:d4:99:
43:7d:b4:a8:3a:fe:49:08:12:31:43:3b:b0:f4:18:
aa:4b:99:39:6d:ba:12:15:63:81:c1:96:aa:b3:6e:
3f:9e:7f:e4:6b:91:86:67:bb:5b:13:48:16:5c:b3:
c3:eb:31:c4:a3:12:03:cd:c9:82:4d:c5:f3:90:fd:
48:28:f9:83:2b:77:13:28:df:6c:7a:bd:bd:0f:ca:
7a:a1:dd:fe:da:83:6f:0e:e6:74:3a:59:02:8f:86:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:2E:32:E0:15:54:FC:C5:02:56:75:92:F2:F6:B3:6D:D7:A7:91
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/A1guMuAVVPzFAlZ1kvL2s23Xp5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.50.0/24
Signature Algorithm: sha256WithRSAEncryption
97:05:85:57:bf:a7:7f:10:32:a2:c6:54:a2:9d:6c:e1:93:2f:
b7:e9:ba:f1:da:77:8a:ba:64:e2:b8:cb:63:88:37:82:24:ea:
8c:1c:ea:0d:96:07:ac:22:04:ca:b9:18:2f:8d:20:54:01:32:
1f:cb:c9:99:30:06:df:c9:83:93:96:4d:ab:5e:99:55:03:d4:
4e:d9:90:ea:b8:ed:b2:98:f9:ef:d0:9e:89:f6:d5:87:01:a7:
e9:4a:7b:d8:c0:33:42:6f:dc:39:2d:f9:b7:05:bc:66:24:26:
54:c9:21:54:34:13:27:2d:ca:5b:5a:06:ed:c3:eb:8e:40:f2:
f3:bc:a8:ce:67:6e:9f:c9:8c:47:bd:3e:10:f7:ad:74:f5:af:
f1:fd:79:8c:6b:e9:1d:00:6d:1d:b6:c3:f7:a2:88:a1:47:1a:
17:e7:40:21:e2:0a:63:cc:6a:ff:c4:0c:93:b5:2f:4d:a9:08:
92:3a:c5:1d:61:c9:d7:e5:14:99:e9:ba:8a:8d:d5:2a:38:1a:
2f:29:1a:f8:72:dd:a3:37:b3:92:4f:02:cb:56:96:60:ed:48:
62:ed:60:cd:4e:26:4f:fb:f4:fa:b4:5a:6e:7e:d4:5d:79:6b:
f7:59:df:ab:09:33:08:5e:ef:d7:2f:d9:7a:f0:29:dc:78:89:
3f:09:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:32 2025 by rpki-client