Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/61500ZJUIEc_uRVbojMCiFv8Dfs.roa
File: 61500ZJUIEc_uRVbojMCiFv8Dfs.roa (raw, json)
Hash identifier: x3vax1nTRdbekJYkTKHNlANvE4BTuad2+U0kgf0cZg0=
Subject key identifier: EB:5E:74:D1:92:54:20:47:3F:B9:15:5B:A2:33:02:88:5B:FC:0D:FB
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0192F32A7EDCA7975370799D1254F44CE19C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/61500ZJUIEc_uRVbojMCiFv8Dfs.roa
Signing time: Sun 03 Nov 2024 17:55:01 +0000
ROA not before: Sun 03 Nov 2024 17:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214567
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
185.215.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 14:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f3:2a:7e:dc:a7:97:53:70:79:9d:12:54:f4:4c:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 3 17:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb5e74d1925420473fb9155ba23302885bfc0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:85:9c:c2:50:65:0c:7c:82:01:be:91:95:
81:78:62:c5:de:f0:03:03:ba:66:2c:b4:5b:a3:b0:
9a:8c:f3:92:f6:5f:9b:da:2a:da:f1:3b:bd:a7:0d:
d4:b8:19:55:a8:a1:05:f2:b6:6c:61:e2:a4:63:59:
6c:94:b0:ef:b3:49:2f:99:b5:6f:cc:ef:b8:af:4f:
e1:2f:d3:00:76:7d:dc:76:ac:80:66:e1:83:ec:2f:
07:f6:b7:ba:e9:db:89:80:00:43:3d:a3:9c:dc:fa:
ad:17:f8:6c:fa:4e:74:a4:c9:46:b4:70:ac:4a:84:
4c:f7:de:fe:86:66:37:c3:6a:1c:52:7a:06:82:d4:
68:17:06:8e:d0:e4:48:9e:71:4c:62:27:e8:42:7c:
38:bb:8e:63:21:f3:c3:71:39:92:cc:8f:1a:7d:c3:
ef:55:67:5a:88:a3:05:2f:88:77:4a:7f:95:66:e3:
ab:ac:9e:5f:82:8c:49:8a:d3:94:16:29:e0:65:92:
c8:5f:15:ee:ab:15:c1:2f:70:f9:be:51:67:72:ad:
9f:08:20:c0:94:30:95:a7:95:36:8e:43:ed:69:48:
42:a3:7b:7d:d0:67:d4:5d:66:4e:b2:d5:8d:21:65:
dc:77:67:c0:df:6c:59:66:4f:3d:0f:d3:d9:bc:b5:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:74:D1:92:54:20:47:3F:B9:15:5B:A2:33:02:88:5B:FC:0D:FB
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/61500ZJUIEc_uRVbojMCiFv8Dfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
185.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:e5:f8:91:a4:34:a1:5c:78:b9:12:9f:c8:19:26:69:9a:66:
14:40:c0:c0:d5:90:48:0c:40:d4:48:43:59:e5:7d:dc:78:45:
20:b2:5b:62:5d:7c:f1:f0:f9:cc:bb:ce:11:e3:86:b4:f9:93:
ec:cb:5a:48:3a:55:65:0f:78:4a:1f:a5:c7:fe:2c:fc:5e:59:
b5:eb:cb:9b:4a:c9:ad:a9:ba:05:a3:a7:72:b9:86:cf:6d:73:
04:77:07:c5:65:fc:73:04:77:0f:2d:88:db:08:86:db:e7:1b:
ca:96:0b:da:cf:6a:4b:5e:c8:da:97:cb:c5:66:d3:49:60:6d:
e1:88:a3:94:e8:97:cb:44:03:fc:73:50:06:4b:ea:20:cf:93:
bb:8f:f3:d9:bd:4c:74:cd:6d:8d:fe:20:be:b1:a5:88:53:80:
be:5b:9d:df:e4:dc:bf:1b:6f:71:ec:dd:4a:45:0b:43:e4:2f:
4f:f2:1d:ca:a7:21:4a:d8:a9:23:09:9b:61:f5:d5:cb:4e:ab:
81:6e:c3:de:65:40:1e:92:2b:fa:e6:be:bb:41:2a:17:ac:ec:
19:31:cc:c6:f4:eb:20:f4:30:88:d7:12:9f:df:b2:9d:12:2d:
77:5a:da:f3:d5:8a:3b:d1:ed:b2:bc:ed:60:e3:61:12:07:e2:
85:5c:86:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:06:39 2025 by rpki-client