Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/FXBPWHUwq4-r1Cldd1Ibb1muu78.roa
File: FXBPWHUwq4-r1Cldd1Ibb1muu78.roa (raw, json)
Hash identifier: TVME9gwmKz5K782+pcXzSO9E1izaSuE6P0O4H9naP1c=
Subject key identifier: 15:70:4F:58:75:30:AB:8F:AB:D4:29:5D:77:52:1B:6F:59:AE:BB:BF
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 01949886012A9E1F61303DB8F21C9E17B970
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/FXBPWHUwq4-r1Cldd1Ibb1muu78.roa
Signing time: Fri 24 Jan 2025 13:35:06 +0000
ROA not before: Fri 24 Jan 2025 13:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213556
IP address blocks: 78.41.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 11:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:86:01:2a:9e:1f:61:30:3d:b8:f2:1c:9e:17:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Jan 24 13:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15704f587530ab8fabd4295d77521b6f59aebbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:b4:3e:7f:1c:4e:c9:18:b3:86:e9:eb:55:
0e:44:d0:ad:46:89:74:31:d3:a0:83:ee:bd:b7:3f:
1b:4c:48:98:bb:d9:dc:18:14:ed:7d:40:2a:21:2f:
72:c5:fc:66:75:ce:86:a5:42:83:e7:1c:c3:44:77:
53:23:0e:80:33:c5:94:84:3f:65:83:2e:9e:26:d3:
cb:be:a7:5f:5b:98:19:ca:ad:55:a1:d6:72:65:78:
5a:8d:26:d6:81:b5:7e:83:a5:90:5d:4e:bc:12:b2:
2e:3c:7f:d1:f1:a4:20:21:1a:5c:e0:7c:61:be:72:
f0:9d:0a:23:83:48:08:68:f1:4f:7d:f1:f1:3c:d5:
a5:0d:1f:9d:02:f0:61:bb:ef:33:b1:c6:f8:45:99:
84:3c:7f:fa:ec:b3:2e:ce:91:10:a4:10:fd:2f:2e:
e7:7a:8a:87:e4:18:2d:c5:c8:7c:b2:35:36:5a:db:
b3:a1:eb:e5:22:b2:47:32:f3:d8:83:6a:6b:a2:82:
0c:b8:01:a2:17:4c:d7:75:ae:9f:ac:f7:d6:68:41:
2b:b5:d4:1b:36:95:d1:8b:a0:92:ca:fa:8d:77:bd:
56:e6:ed:89:4a:c6:9b:78:dc:15:4b:52:5e:70:62:
b9:c7:a8:7d:90:ba:27:bc:6e:77:b1:c4:3e:de:05:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:4F:58:75:30:AB:8F:AB:D4:29:5D:77:52:1B:6F:59:AE:BB:BF
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/FXBPWHUwq4-r1Cldd1Ibb1muu78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.59.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2c:33:6b:63:38:b2:b3:d9:de:16:a0:81:ad:5c:21:a3:07:
4c:36:04:0a:0f:6a:1b:a4:0c:dd:a2:23:7d:12:c2:a0:d0:48:
4c:ad:18:c2:68:96:46:4b:ec:03:3e:ac:24:e8:47:de:92:30:
d1:ae:6e:ff:b6:a6:fe:83:a2:73:97:b9:36:68:f0:e3:6c:c9:
69:b4:d8:bf:37:b4:68:d9:e0:87:94:5b:b9:89:26:10:c0:58:
bf:f4:72:bf:63:72:6a:d4:e7:f7:55:3e:39:8a:4c:52:f3:a2:
62:e1:30:87:b4:c4:51:37:15:3d:ca:10:f0:b1:73:59:0f:45:
bd:d9:70:6b:3f:61:e8:71:c6:69:a4:3e:1f:f8:f2:ea:93:59:
5e:7c:3f:5c:29:32:33:05:9a:1c:1d:d9:38:37:2b:bf:ba:6c:
74:8a:f6:69:54:71:1f:46:9f:12:4f:bf:70:2d:5a:76:23:e9:
97:6c:a4:f2:b8:6f:f2:14:66:d4:27:94:3b:51:89:b3:23:21:
02:7d:5f:d5:3a:a9:2a:6d:ba:f1:90:b4:ae:73:2e:94:59:41:
34:53:d1:95:5d:56:ff:13:da:14:74:6c:6b:17:94:6a:ef:4f:
67:8b:fc:68:23:2a:16:39:74:45:06:c8:7c:50:b7:9d:f1:02:
a9:6f:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:25:09 2025 by rpki-client