Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EtYLsCTGVwsd70iGV6y9hEDb2Cc.roa
File: EtYLsCTGVwsd70iGV6y9hEDb2Cc.roa (raw, json)
Hash identifier: W1ixWXo0HgGIqNYFlMe77Sfxz/CVbJ93AIUd+l2Ys8U=
Subject key identifier: 12:D6:0B:B0:24:C6:57:0B:1D:EF:48:86:57:AC:BD:84:40:DB:D8:27
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0193B076C1D0586D5204F5602F083FA32E72
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EtYLsCTGVwsd70iGV6y9hEDb2Cc.roa
Signing time: Tue 10 Dec 2024 12:06:33 +0000
ROA not before: Tue 10 Dec 2024 12:06:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 178.239.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 07:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:76:c1:d0:58:6d:52:04:f5:60:2f:08:3f:a3:2e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 10 12:06:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12d60bb024c6570b1def488657acbd8440dbd827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:f0:59:ee:68:0c:e2:00:1e:ad:ed:03:be:
87:0b:79:5e:7e:ed:0a:88:8a:d8:07:0e:9f:0b:df:
ae:66:d2:0a:d6:85:6d:73:8e:2d:af:52:a2:64:25:
e7:38:3a:99:92:ab:dc:91:fe:6b:e6:32:c9:d9:6f:
02:ee:52:62:6d:18:fe:36:66:4a:05:ce:16:c5:a1:
d9:dd:2e:af:c3:9a:8c:4e:cb:cc:32:75:ac:0a:c2:
55:e9:0d:2e:74:0d:f1:d4:2e:b0:2b:e2:53:7e:33:
21:2a:58:58:41:34:42:08:12:c6:a5:e7:94:6e:50:
0d:59:9b:61:49:87:a2:45:fd:51:37:5d:0b:7c:16:
6b:ec:ea:4d:be:cf:5b:4f:17:67:16:e5:fd:19:17:
6d:5f:7e:d2:32:01:90:45:b1:92:86:e6:4a:fd:08:
6a:57:67:c8:ce:b0:f1:ba:d3:72:ff:a2:2c:ba:63:
ac:eb:42:31:68:a9:c4:12:33:77:b8:1a:cc:e2:8b:
d4:80:a3:2f:0b:4d:62:49:8f:9b:f0:b4:6d:a2:3b:
42:14:fc:52:89:97:b0:8b:9f:23:9f:98:6a:9c:ea:
c6:87:23:3e:ae:6a:0c:3e:f9:aa:9f:00:b8:ee:33:
3f:bd:96:ab:26:01:df:95:d1:97:38:ae:89:08:0a:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:0B:B0:24:C6:57:0B:1D:EF:48:86:57:AC:BD:84:40:DB:D8:27
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EtYLsCTGVwsd70iGV6y9hEDb2Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:79:a3:1f:fb:ec:2d:42:cd:ed:8b:10:af:01:15:d8:4d:cf:
79:67:a5:cb:8b:3b:17:85:2e:ab:a9:96:4f:9e:0e:e8:b6:f3:
bc:12:f5:98:de:d2:d6:6c:da:b0:0a:06:f9:9b:a1:dd:01:75:
44:14:99:c0:a4:d3:d0:53:1c:d3:69:5c:8f:be:bc:82:63:f4:
86:54:1e:d3:86:f2:1c:ea:35:b6:e1:dd:d1:af:8a:06:40:2f:
13:0f:75:0d:a4:47:3b:70:49:3c:1a:9c:3a:4d:72:d7:9d:2e:
1f:f6:14:1c:8a:19:1b:82:ea:50:bc:8e:b4:7b:13:2e:2a:17:
45:b0:d5:05:ba:eb:72:77:e8:4f:11:01:d6:97:59:98:27:5e:
6b:2d:0b:ff:97:30:45:a7:25:e1:7b:c3:12:47:23:ca:a7:4b:
6f:12:00:e9:e0:d8:86:13:ce:9e:ae:8d:a7:1d:8a:e0:3d:2b:
7d:a0:d4:d6:00:a9:0b:a4:ae:2e:d1:ed:62:40:7e:d3:10:5b:
71:a3:28:4d:3e:d5:be:b2:35:a8:7b:3e:61:eb:d6:4a:30:6c:
f1:fe:87:0d:90:ff:e4:ac:12:81:a5:10:33:95:db:61:8c:21:
92:a8:47:3b:d7:7d:e4:03:f4:81:d7:2d:90:d9:78:49:f0:9e:
b2:04:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:37:36 2025 by rpki-client