Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/S4j3d4rl5qxz8kgpupNG7fBkDJc.roa
File: S4j3d4rl5qxz8kgpupNG7fBkDJc.roa (raw, json)
Hash identifier: 0MbJVpGCOsLi5dmZpR28JLISESTmm9M/Yn/f6d8vwSU=
Subject key identifier: 4B:88:F7:77:8A:E5:E6:AC:73:F2:48:29:BA:93:46:ED:F0:64:0C:97
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01903B9406B0E8A897C0FCCCD5918B42BEA6
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/S4j3d4rl5qxz8kgpupNG7fBkDJc.roa
Signing time: Fri 21 Jun 2024 16:14:35 +0000
ROA not before: Fri 21 Jun 2024 16:14:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 09:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:94:06:b0:e8:a8:97:c0:fc:cc:d5:91:8b:42:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 21 16:14:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b88f7778ae5e6ac73f24829ba9346edf0640c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:f5:2f:f8:ff:7e:72:41:b5:fe:18:42:75:
ac:99:b4:61:ba:0c:85:5f:54:3d:e1:28:a0:fb:e9:
fc:8b:88:c4:2b:08:3c:15:eb:c8:22:56:f2:9f:aa:
af:fc:54:5f:b2:74:7b:08:9f:2a:aa:7a:04:dd:e9:
fc:87:4b:00:c2:2e:8d:35:84:4c:6c:df:f6:35:3a:
e5:4a:eb:1f:6c:31:b6:10:82:a5:5b:4a:21:c1:9c:
5c:65:eb:e4:7c:ed:9e:66:04:39:0d:f1:7c:52:b9:
0c:34:43:f7:95:f9:4b:76:9f:c4:38:e5:b1:dc:25:
7e:67:4b:3f:10:f9:2f:62:3f:32:d6:da:cf:2b:40:
cb:4c:1b:59:f4:4a:ba:ff:a3:90:bd:bd:07:85:c5:
78:f1:62:fe:cb:76:fa:33:92:23:7d:32:4e:4c:44:
8a:53:9c:b3:8a:a4:39:13:64:7b:fe:0b:13:db:78:
ec:34:2a:35:14:43:e0:07:a1:8d:5b:d5:b8:6c:ac:
e1:bc:e3:75:42:14:21:ac:d4:8b:0f:de:a6:10:1d:
fa:32:8f:34:cc:02:60:47:0f:12:a7:1e:fb:a9:46:
31:49:0e:a5:72:66:8c:c7:3b:64:98:55:7d:10:b2:
95:99:e3:c1:49:fd:e7:db:a1:97:e0:6d:35:c1:4f:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:F7:77:8A:E5:E6:AC:73:F2:48:29:BA:93:46:ED:F0:64:0C:97
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/S4j3d4rl5qxz8kgpupNG7fBkDJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:06:53:f8:c1:f8:3e:6e:90:da:d7:b0:50:c6:c1:f0:cc:9c:
68:51:9f:60:d2:88:ac:42:a7:4d:5e:03:3d:a7:f0:17:50:39:
96:c7:a6:1e:7b:62:98:6c:75:8d:5e:9e:02:4d:91:13:e9:88:
ef:fa:41:24:24:59:60:16:a8:2f:d6:01:a7:d6:ee:2f:2a:33:
07:d4:fb:f3:e8:11:06:e0:ab:d8:8f:37:03:5e:6d:37:c9:1e:
a1:83:b8:47:cf:74:89:5f:1b:7a:29:03:e8:12:55:cd:c5:b1:
9c:15:bf:a3:9d:6d:a7:3d:23:29:45:15:b5:57:db:4c:9c:9f:
78:66:95:00:a1:44:a1:56:f8:88:b2:30:ab:66:5d:4a:dd:6b:
89:a6:2e:b6:9b:56:3c:20:33:dc:b0:92:31:3f:1c:6f:b5:bb:
59:d9:1b:32:b7:42:d4:25:12:f7:47:ae:f5:9b:99:c5:0d:0a:
e0:35:41:bd:b2:24:9e:1a:a8:e9:21:e3:af:d1:b2:ab:06:32:
ab:5c:ab:6e:6e:8d:2c:5e:f9:aa:b5:5b:8e:b1:f1:8d:7c:57:
6b:e1:cc:98:81:14:d8:50:a8:9b:4a:24:e9:60:ce:3e:a6:31:
08:1c:6b:8e:c7:1d:57:c8:03:a5:e3:7b:3c:d8:1a:c9:d3:b0:
51:2b:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:52:36 2025 by rpki-client