Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/BZxgjDSoeAq8e8Ao_jjIJ8U_Xck.roa
File: BZxgjDSoeAq8e8Ao_jjIJ8U_Xck.roa (raw, json)
Hash identifier: bOwTUH+zV9znl9WwOaOBbLVvtkZJJhEpJvySdUGodbQ=
Subject key identifier: 05:9C:60:8C:34:A8:78:0A:BC:7B:C0:28:FE:38:C8:27:C5:3F:5D:C9
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018D1C189D120B6736464B91A8008E8E5A2D
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/BZxgjDSoeAq8e8Ao_jjIJ8U_Xck.roa
Signing time: Thu 18 Jan 2024 10:23:11 +0000
ROA not before: Thu 18 Jan 2024 10:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 10:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:18:9d:12:0b:67:36:46:4b:91:a8:00:8e:8e:5a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 18 10:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=059c608c34a8780abc7bc028fe38c827c53f5dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:1e:ea:96:65:bd:1b:f3:1f:26:84:6c:e2:
50:2d:27:f2:de:66:c2:00:6c:ac:b8:e0:a8:65:9b:
2f:d0:b6:19:8b:99:33:29:d0:fc:3c:a6:50:4e:0f:
f1:ac:cf:d0:17:0e:c9:9f:84:8b:35:0f:2a:d4:f2:
02:b8:37:3f:ca:22:be:7c:67:59:73:60:57:41:7a:
5a:34:11:a3:c2:d9:8f:7b:29:6c:0b:0c:e9:24:7b:
b2:d7:68:92:ab:48:65:43:30:ae:08:4c:61:3a:c2:
17:fb:8a:d6:3f:f9:f0:f2:4c:e7:7a:90:69:2a:10:
4a:da:a8:92:f1:e6:32:f8:32:1d:ca:5b:e5:0e:01:
2e:51:66:43:bc:b4:af:2a:bb:e3:b3:4b:02:a8:a8:
66:9f:46:d6:3d:ba:8f:47:17:dc:2a:06:d0:65:d6:
bf:5c:5a:f9:f9:04:3c:62:5e:78:4a:3b:74:4b:97:
70:7d:9c:82:47:ff:13:73:1d:e4:c3:7d:a3:b9:a0:
7c:8c:8a:90:33:7a:a3:ef:28:6c:5d:85:04:cc:57:
84:61:48:74:0b:07:d1:2d:7a:eb:c0:d6:36:2b:78:
ec:8c:b2:33:99:dc:48:e0:f6:df:7d:03:2d:f6:ee:
0c:cd:54:66:3d:cf:60:b8:26:ba:7a:87:89:dc:68:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:60:8C:34:A8:78:0A:BC:7B:C0:28:FE:38:C8:27:C5:3F:5D:C9
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/BZxgjDSoeAq8e8Ao_jjIJ8U_Xck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.233.0-78.109.234.255
78.109.238.0/24
185.52.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a8:27:20:11:26:fd:29:6f:56:5b:19:40:48:dc:98:3f:12:
46:f1:d8:03:b5:91:df:47:41:97:0b:18:90:4c:fc:dd:bf:25:
2b:f6:6a:bf:d4:d8:0a:e3:ec:26:53:60:2e:5b:18:9a:a2:04:
ea:f6:ce:ae:71:bb:89:c3:29:d1:22:e7:60:42:07:cd:b6:62:
8f:67:94:6a:5b:1d:97:d8:a8:84:23:bb:ad:26:c3:1f:d9:c3:
62:bc:c8:4c:49:31:29:91:49:3c:7a:bc:18:82:c2:2f:98:7b:
29:39:64:7d:07:76:b2:75:1a:23:1f:86:ce:20:a9:28:a4:da:
25:09:00:19:01:6f:58:78:49:7e:cb:86:5f:fe:b9:75:b7:97:
0e:2f:38:71:e6:44:ff:c5:3b:c1:94:52:c0:3a:23:dc:81:82:
24:bc:00:bf:f4:9c:cb:d0:9b:e3:bf:89:bb:00:34:ba:dc:19:
73:0c:73:ff:68:02:a9:2b:5c:8a:28:b7:e1:b7:8e:7c:f8:57:
e2:b5:ee:4c:cb:2d:7d:48:6f:b3:89:b7:80:85:37:76:b9:e0:
33:e0:ac:e9:64:a2:44:2f:c7:13:ad:67:47:50:f1:74:45:e7:
ba:eb:e6:1d:f4:eb:fd:06:99:0c:a9:ab:f0:d6:b2:e4:7d:d3:
e6:91:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:50:16 2025 by rpki-client