Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/ezZ4_2m0--7_vLsE9xiKGqTnXS4.roa
File: ezZ4_2m0--7_vLsE9xiKGqTnXS4.roa (raw, json)
Hash identifier: bn4UK7lrhvHbW5R5e5tm2xLAaoxVx2SkN0TmSTzbXw0=
Subject key identifier: 7B:36:78:FF:69:B4:FB:EE:FF:BC:BB:04:F7:18:8A:1A:A4:E7:5D:2E
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 0194228D1DD1B183F0F2B4AF8FBDD53B77A7
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/ezZ4_2m0--7_vLsE9xiKGqTnXS4.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 78.24.32.0/21 maxlen: 21
185.88.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1d:d1:b1:83:f0:f2:b4:af:8f:bd:d5:3b:77:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b3678ff69b4fbeeffbcbb04f7188a1aa4e75d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:2d:f7:29:d6:ba:d5:cd:30:4d:1e:28:03:
3f:c4:3b:e0:8d:01:0a:00:82:65:9a:d0:92:1a:c8:
ea:46:82:56:3b:8b:9c:6d:87:19:e1:36:da:3a:3e:
20:7f:cc:82:ba:6b:53:f8:f4:f4:3d:c3:44:64:c1:
c8:21:30:10:a3:a7:01:fc:70:70:67:f4:4c:e0:cb:
cd:27:c1:0d:80:f5:94:c1:4e:d5:bf:05:26:a1:25:
ab:5e:f3:a9:61:9e:e0:4b:35:4c:3d:27:6d:49:18:
b9:e1:52:c4:2f:3e:69:e2:c5:39:80:9e:0e:5a:9f:
48:13:63:e6:89:fa:3a:ef:18:ac:0b:dc:aa:93:a3:
94:c9:4c:78:ec:49:01:1e:9c:e5:17:27:af:10:68:
01:9b:4b:fc:c9:77:ed:5d:19:3a:63:cb:3f:49:cc:
4d:51:35:07:93:18:99:90:76:74:d0:c3:c1:60:c8:
32:26:69:eb:a5:45:96:57:61:03:a7:e2:02:71:1d:
84:89:6b:c6:ce:02:b3:31:4d:ec:e5:69:08:70:e3:
5a:6b:f6:b0:25:1d:8c:69:db:0c:72:26:d4:84:80:
68:75:5b:78:4f:33:c7:a3:d6:4a:72:97:f6:df:26:
87:ec:c4:4f:50:8f:37:b6:1e:a2:ae:62:bf:91:ea:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:78:FF:69:B4:FB:EE:FF:BC:BB:04:F7:18:8A:1A:A4:E7:5D:2E
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/ezZ4_2m0--7_vLsE9xiKGqTnXS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.32.0/21
185.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1c:24:a8:56:62:54:5a:1f:d6:3e:aa:a4:fd:fc:f2:37:26:
39:6b:0c:c5:20:3f:78:04:75:22:5c:f5:ce:5d:b4:65:64:27:
5f:53:22:d1:fd:78:57:d3:a0:f4:b8:c5:29:3b:76:4d:a2:62:
c7:4b:08:7e:a7:27:75:36:0d:11:0d:8c:4f:cb:42:e3:51:3e:
56:f2:ab:06:32:3d:72:54:c7:c6:96:2c:17:9f:b0:e6:09:5a:
1a:2e:7a:9c:d8:87:1e:6b:cb:7a:c9:ba:51:b9:9a:c7:fc:f8:
5f:9b:3a:cb:e6:ab:f0:f5:d1:7d:04:6c:f6:95:fa:b0:75:39:
e5:6c:fb:ae:7f:9b:12:16:44:6c:50:da:2c:6f:6f:7e:ce:cd:
9a:2d:47:3f:62:e4:7c:6b:65:78:63:b7:87:01:80:a5:96:5d:
cd:b8:ab:9b:26:fb:fb:c4:20:09:10:81:8d:bf:2a:47:8e:0f:
9d:d1:30:04:d7:f6:bb:b4:f5:9f:b8:7d:66:8c:7e:9f:d7:36:
db:a4:3b:fa:0d:e8:ee:e4:a9:f0:75:7a:59:11:f4:00:bf:31:
97:2a:da:52:2b:cb:78:77:ce:da:0d:c1:6b:aa:84:4b:fc:aa:
9e:4d:2f:94:1c:0b:7e:a3:31:d1:86:75:31:5b:9c:60:aa:53:
75:b1:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:16 2025 by rpki-client