Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/uA_CdxCFMHAyN2RK4Ndmzk2kaqk.roa
File: uA_CdxCFMHAyN2RK4Ndmzk2kaqk.roa (raw, json)
Hash identifier: 9x27sECZ0BikuiDanUAqdOEFbYmSK2YBhHtdCupOLZE=
Subject key identifier: B8:0F:C2:77:10:85:30:70:32:37:64:4A:E0:D7:66:CE:4D:A4:6A:A9
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 01912DFCC00AA6264E671EE494F7C4916EF7
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/uA_CdxCFMHAyN2RK4Ndmzk2kaqk.roa
Signing time: Wed 07 Aug 2024 17:57:04 +0000
ROA not before: Wed 07 Aug 2024 17:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51579
IP address blocks: 178.213.112.0/21 maxlen: 21
178.213.112.0/22 maxlen: 22
178.213.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 Aug 2024 18:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:fc:c0:0a:a6:26:4e:67:1e:e4:94:f7:c4:91:6e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Aug 7 17:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b80fc277108530703237644ae0d766ce4da46aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:54:83:80:c5:13:14:fe:2e:16:aa:21:10:83:
8c:c2:8e:05:09:0f:c4:c2:b7:de:55:66:e4:8b:03:
18:e2:ec:e0:92:fb:4e:5c:cc:db:d7:b7:25:5d:c8:
e9:e2:d3:57:08:b9:ca:d7:f4:4f:20:71:dc:0a:c9:
68:e7:38:eb:37:d8:a4:7c:da:69:7c:74:de:33:71:
dc:69:08:7a:48:5a:04:1c:0d:67:92:e9:93:4d:40:
fe:ba:c5:05:1d:ad:d0:16:53:40:12:88:22:83:8e:
4d:00:7f:01:48:d0:8a:85:c9:f4:6d:59:4d:32:19:
8b:22:27:30:44:f8:f3:e4:b7:d9:58:cc:37:3e:71:
61:58:ad:04:36:3d:ea:e0:9e:89:1c:fc:08:31:22:
46:c3:ff:23:b0:90:61:d5:44:d7:7b:e5:e8:c2:8f:
82:f7:15:46:c2:d4:8e:37:10:53:6e:94:da:59:99:
2e:8c:e6:24:1a:e8:db:b5:63:cf:45:c0:9c:c8:cb:
31:37:64:4e:49:6d:1f:13:90:94:85:2d:fc:18:94:
e2:25:9b:7c:19:f0:cd:7f:e2:55:bf:93:2d:de:20:
66:3f:9b:b5:3f:54:11:d3:a0:a1:9e:cb:98:8d:c8:
9d:95:2d:21:66:21:58:c9:66:6c:b9:a7:07:ee:10:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:C2:77:10:85:30:70:32:37:64:4A:E0:D7:66:CE:4D:A4:6A:A9
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/uA_CdxCFMHAyN2RK4Ndmzk2kaqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:a7:85:e8:bd:ee:a5:80:e0:9f:10:6f:98:65:50:14:0c:0b:
78:a6:d9:dc:e3:35:63:7b:e1:c2:74:6b:21:14:67:25:0e:de:
eb:38:9d:cd:ef:48:b1:9b:aa:a9:8c:e1:fe:00:1b:ed:91:c2:
5a:c4:42:12:bb:a2:db:17:a8:9f:09:56:78:33:4e:98:31:a1:
22:71:93:de:c1:23:9f:4a:ff:6b:0d:b0:de:64:9c:17:5a:1c:
fa:87:41:00:5b:42:00:08:fc:84:d2:11:0a:a1:24:da:40:c4:
d4:8f:99:48:64:be:78:5f:04:18:a5:bb:c1:b2:89:7c:23:3d:
6f:63:d0:18:ff:3b:27:7a:42:09:10:cc:6a:d1:94:23:54:3c:
c2:5e:01:ee:5b:db:8b:61:e4:bf:49:67:f4:b5:97:bb:db:d5:
e8:f6:c9:30:8b:3b:32:66:19:aa:7f:87:49:64:70:14:d6:56:
d4:50:b5:b8:30:2c:4c:c1:22:2f:7f:5b:e5:5f:53:2c:ce:9a:
fb:da:70:8a:3f:6b:4e:ba:40:9e:5f:e7:6e:88:88:48:47:fb:
aa:80:e4:bf:d6:d8:7a:1c:95:b2:1e:21:79:6f:f1:8f:c9:5d:
5f:18:14:47:0e:f2:23:20:e8:b9:87:0f:f7:e7:ce:f9:60:29:
63:fa:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:54:32 2025 by rpki-client