Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/7RsfCj5U-Ns2btcVZbGsGU4d6Gs.roa
File: 7RsfCj5U-Ns2btcVZbGsGU4d6Gs.roa (raw, json)
Hash identifier: qZK+Rip5+OKXUK2D3CiHWJMAEYnqluDS8d0QoUrpupc=
Subject key identifier: ED:1B:1F:0A:3E:54:F8:DB:36:6E:D7:15:65:B1:AC:19:4E:1D:E8:6B
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018DAD58AA4D8472AEA29BBC8BCBF167215A
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/7RsfCj5U-Ns2btcVZbGsGU4d6Gs.roa
Signing time: Thu 15 Feb 2024 15:18:05 +0000
ROA not before: Thu 15 Feb 2024 15:18:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205906
IP address blocks: 78.109.225.0/24 maxlen: 24
78.109.226.0/24 maxlen: 24
78.109.227.0/24 maxlen: 24
78.109.228.0/24 maxlen: 24
78.109.229.0/24 maxlen: 24
78.109.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 18:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:58:aa:4d:84:72:ae:a2:9b:bc:8b:cb:f1:67:21:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Feb 15 15:18:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed1b1f0a3e54f8db366ed71565b1ac194e1de86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:18:6b:b5:56:35:cb:cd:27:a4:a9:ca:ce:4f:
40:04:1d:c0:d7:73:fd:8f:fb:8c:62:53:3e:fe:07:
bf:58:0c:e7:94:60:7b:e2:0f:b1:9f:72:a7:4c:66:
3d:9f:7f:ee:fb:a3:40:1b:1e:3b:16:fe:2e:89:fc:
2a:4f:d7:6a:7c:5c:20:a8:9c:90:f5:08:5b:da:c6:
63:47:4a:20:8d:cf:d8:6a:32:5e:e8:37:a8:63:46:
e1:e6:15:2b:cd:7d:e0:04:54:fb:a9:78:7e:eb:75:
49:cd:2c:ad:f0:64:57:4e:2b:1a:b4:1c:bc:93:a2:
1a:c1:25:52:ea:5a:af:14:92:df:37:7a:e4:4a:72:
29:e0:a7:2c:ca:c2:bc:f4:62:0c:e4:6c:41:85:ff:
5e:d9:3c:53:51:a0:2c:68:28:fe:0c:60:71:7b:b8:
b5:0e:76:84:ee:ae:cb:e4:0b:bc:3c:8b:8d:07:4b:
91:2f:0a:7e:de:fc:92:c9:24:40:9f:63:83:eb:72:
be:0d:ec:d3:b1:cb:4c:39:cd:c7:f5:bb:db:7e:5b:
a5:6b:54:91:4a:00:c6:37:89:75:e2:3f:1a:1a:18:
1f:9b:c4:9d:60:fc:3d:eb:08:d9:60:70:43:a0:b9:
3a:88:49:53:8c:42:23:3e:17:78:b1:6b:0f:78:f7:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:1F:0A:3E:54:F8:DB:36:6E:D7:15:65:B1:AC:19:4E:1D:E8:6B
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/7RsfCj5U-Ns2btcVZbGsGU4d6Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.225.0-78.109.230.255
Signature Algorithm: sha256WithRSAEncryption
09:ff:96:d4:e9:98:bc:50:25:40:d8:a9:8e:18:67:43:f7:b8:
07:bf:64:03:a6:8b:41:38:d8:75:d4:87:3a:a7:9d:da:dd:03:
d0:38:05:0e:84:f0:bc:df:fd:0e:45:ed:14:a1:d2:69:ab:ec:
a0:bd:bd:ac:e2:bd:f1:97:90:f1:c2:35:b7:51:c5:1f:af:43:
4f:47:75:22:2d:58:c7:f1:f8:50:6f:a2:d4:7d:dc:98:02:f3:
4d:82:84:da:ba:59:f8:63:a8:a8:33:fc:be:3a:52:76:e2:59:
aa:53:f4:7a:8f:2e:2b:06:b8:36:35:a3:37:63:ce:c0:40:8f:
86:ed:f5:bc:43:ee:8a:ef:86:8d:09:82:c1:74:67:69:88:db:
39:dc:ce:4f:8a:50:59:b4:41:f2:c0:44:f1:6f:77:3f:9b:2c:
4f:9e:4c:87:a9:b4:8f:f6:1a:75:87:25:fb:fb:6d:da:e6:9a:
d5:ca:f7:2d:80:40:b2:8c:d9:95:32:4a:fb:9c:3e:5c:85:2d:
93:b9:b2:e3:38:29:3f:48:6f:30:c8:da:aa:84:31:64:89:2d:
e6:8a:e3:cd:f5:a7:3c:c7:83:48:47:10:92:41:21:58:08:d5:
76:89:ec:cc:82:ba:ce:ca:dc:c5:4e:88:97:7c:29:d9:29:26:
ca:ac:96:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:46 2025 by rpki-client