Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/8ptVzgTDOfi2JtxRDx1UcNm_rbM.roa
File: 8ptVzgTDOfi2JtxRDx1UcNm_rbM.roa (raw, json)
Hash identifier: f2J+3e/aAHcZmIDDpYjh+oAiPkDhnhE1bH8yi1fpgMU=
Subject key identifier: F2:9B:55:CE:04:C3:39:F8:B6:26:DC:51:0F:1D:54:70:D9:BF:AD:B3
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018D1C19880069A3B7632857A100E945902D
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/8ptVzgTDOfi2JtxRDx1UcNm_rbM.roa
Signing time: Thu 18 Jan 2024 10:24:11 +0000
ROA not before: Thu 18 Jan 2024 10:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198169
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
185.52.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 10:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:19:88:00:69:a3:b7:63:28:57:a1:00:e9:45:90:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 18 10:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f29b55ce04c339f8b626dc510f1d5470d9bfadb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:f0:06:fd:73:9d:a3:01:66:5b:dd:23:cb:
0e:93:c8:e6:2d:eb:9f:88:4d:c7:94:3d:2f:b0:9f:
5f:ad:7a:b6:80:1c:5a:72:88:b8:9c:61:35:c5:4d:
b5:0e:db:5b:34:6b:54:0a:5d:47:44:d2:04:cf:8a:
a2:fc:03:05:de:ed:42:08:cd:72:35:f1:42:c2:8d:
12:8d:3b:ca:09:df:af:ab:df:34:84:d8:5c:0e:39:
a0:4f:b4:69:d2:8d:d4:5e:4a:61:e1:ad:a9:11:76:
81:09:a4:81:bc:b0:05:52:27:09:e4:69:e5:df:16:
6a:d2:7d:83:cf:12:ce:46:32:a6:c7:10:56:a0:e6:
cc:bc:75:09:4b:ff:2f:3a:22:f0:0d:bb:61:3c:e4:
84:17:cd:5a:63:bc:01:12:b4:97:5c:cd:7d:24:06:
69:17:f6:cb:3f:65:45:56:ea:61:f4:ea:cc:fe:d0:
5d:46:62:3c:b4:32:1d:a1:09:60:06:56:7f:ce:23:
aa:34:3e:9c:96:5c:94:16:ca:5d:3a:53:e3:54:77:
a0:83:01:52:19:7f:c7:33:08:b7:19:fa:e6:63:d3:
1c:7b:b5:83:ca:1c:f9:4b:8a:bc:02:fb:98:7b:17:
a4:fb:88:0f:a9:b2:22:aa:5a:36:25:2e:b1:e5:46:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:55:CE:04:C3:39:F8:B6:26:DC:51:0F:1D:54:70:D9:BF:AD:B3
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/8ptVzgTDOfi2JtxRDx1UcNm_rbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.233.0-78.109.234.255
78.109.238.0/24
185.52.101.0-185.52.102.255
Signature Algorithm: sha256WithRSAEncryption
69:d8:23:26:de:65:ba:5a:83:f4:07:de:4b:d0:fb:6f:54:02:
0c:21:55:c7:ba:95:9f:ae:e1:b5:ce:32:4e:0d:2e:61:27:83:
8c:cb:f1:2d:4a:0e:d9:da:6a:f9:54:e6:08:67:64:cf:8f:b8:
48:8f:d8:d0:b8:6a:c4:4e:34:d0:3a:e0:43:3a:79:0f:60:cc:
d6:00:1a:b6:92:0b:f0:19:8d:57:c2:32:07:87:a2:0f:fa:74:
3c:e6:8b:bb:12:f2:33:8d:ca:71:22:0b:d0:ac:ab:d5:e3:6a:
41:a7:56:2e:2b:27:bb:39:5e:58:08:ce:40:1c:82:97:93:78:
b3:f4:cb:01:70:f8:b1:a7:9e:c3:93:eb:00:db:f1:60:9b:0b:
4b:0f:50:6a:cb:d9:52:5c:4c:ba:30:3d:5c:aa:dc:d9:66:e2:
98:40:aa:96:cc:71:2e:1a:81:4b:42:c7:86:8b:9d:9b:f2:2c:
2f:67:20:39:94:57:c5:a5:94:54:24:33:67:14:d5:62:14:2e:
76:f2:d9:4f:56:34:16:41:cb:89:51:a5:98:ff:ad:06:87:cf:
e6:2e:e5:ef:3f:06:a6:dd:14:ab:46:13:35:dc:bb:c0:58:43:
3f:9f:f2:11:66:28:76:2b:82:53:29:ed:b4:c8:5f:8c:a3:9c:
41:97:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:52:40 2025 by rpki-client