Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/kEFSuRnfvzSj5hlKNGkx2zMzd50.roa
File: kEFSuRnfvzSj5hlKNGkx2zMzd50.roa (raw, json)
Hash identifier: Li2gtMu2Yduaquhij37dOOsnuou2Sno5mIqqyuE+MVc=
Subject key identifier: 90:41:52:B9:19:DF:BF:34:A3:E6:19:4A:34:69:31:DB:33:33:77:9D
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 0193B1E961D92FAA3725A5A1F9CDDC07F25F
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/kEFSuRnfvzSj5hlKNGkx2zMzd50.roa
Signing time: Tue 10 Dec 2024 18:51:22 +0000
ROA not before: Tue 10 Dec 2024 18:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50331
IP address blocks: 178.217.192.0/21 maxlen: 21
178.217.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:e9:61:d9:2f:aa:37:25:a5:a1:f9:cd:dc:07:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Dec 10 18:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=904152b919dfbf34a3e6194a346931db3333779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:07:3a:4e:18:9f:85:ab:1b:a7:51:b8:17:
2b:f6:cb:e6:e6:8c:d2:2e:2e:8d:91:55:8c:ec:07:
c4:99:0f:b5:a3:8d:0d:22:fc:79:cf:b3:47:96:5b:
d2:ad:d9:69:b5:85:5d:e0:8d:e0:c5:e6:73:08:2c:
82:cb:4f:06:2b:6f:6b:91:ee:8d:9a:ba:04:0c:13:
1c:eb:40:28:25:2b:77:51:38:53:5a:b3:ad:2e:4d:
1a:80:74:1f:4c:4a:87:cf:e6:90:01:87:d8:0c:d1:
48:35:b3:f2:43:6d:e4:0f:69:96:0c:14:d2:21:5f:
76:03:26:fb:10:b6:75:ae:05:0f:41:be:61:a9:9d:
69:a4:7c:3d:e1:1a:e8:ff:60:a5:62:6a:a9:cf:36:
7e:2c:cd:6c:06:76:03:ab:57:93:8e:d3:f7:df:dd:
dd:c6:9f:a1:ac:a4:c7:de:a5:db:06:c2:bf:2f:e0:
4d:f3:98:ed:3b:da:61:2b:9e:f7:a3:49:0d:c0:b2:
2d:ab:bc:57:4a:95:3c:c7:51:27:48:45:23:75:87:
97:44:3b:fb:e7:97:aa:f3:66:44:3b:e8:16:66:f9:
60:51:34:a7:fb:ff:61:84:f6:c8:3f:31:65:f3:0e:
80:b0:a4:58:7a:e8:8a:17:cb:0a:be:c1:fb:8d:69:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:52:B9:19:DF:BF:34:A3:E6:19:4A:34:69:31:DB:33:33:77:9D
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/kEFSuRnfvzSj5hlKNGkx2zMzd50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.192.0/21
Signature Algorithm: sha256WithRSAEncryption
53:ae:fd:3d:32:0f:b9:b6:17:6f:44:ce:72:64:51:c1:ca:af:
f3:51:79:80:8a:9f:c7:b4:d7:2a:a9:be:97:24:b6:8b:de:47:
a4:4f:6d:6c:39:ba:2f:d7:e1:ac:56:f9:b9:3a:47:14:13:cd:
da:14:72:05:d2:f0:b3:07:cb:36:a0:c6:4b:d3:ca:48:b5:cf:
60:4a:67:38:f4:44:c8:1c:96:94:a6:62:7c:28:2b:0b:50:6e:
4a:9f:c5:3d:20:bf:ab:be:58:b0:1f:e0:e6:2d:b5:aa:70:7a:
14:71:0f:fc:f6:0d:0c:02:39:2b:ce:fe:1e:0a:da:81:ca:d9:
d7:5b:ba:db:7d:03:5b:24:f1:7c:9a:b6:1c:26:d3:dc:6e:11:
c7:72:4a:b0:00:46:e4:65:b1:37:89:57:4e:e9:10:c1:20:2c:
2e:9f:93:16:56:62:18:c3:37:7c:f0:f3:7f:50:da:b7:02:26:
cc:72:0b:bd:d6:66:40:40:1d:b4:e9:ff:5d:87:36:90:11:68:
85:2b:c9:46:53:59:74:30:ba:a9:ab:75:2a:28:7e:a0:41:fc:
ec:8f:50:4b:62:fc:99:9e:23:86:69:ee:85:13:53:d2:01:26:
71:70:fa:75:67:43:42:d2:27:a4:e7:68:20:90:c0:65:76:52:
c6:26:d9:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOx6WHZL6o3JaWh+c3cB/JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzQyMTZiM2JkOTIxYjZjNjYxODdhOGM4NmE0YTRiYjBl
ZTUyM2YwHhcNMjQxMjEwMTg1MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDQxNTJiOTE5ZGZiZjM0YTNlNjE5NGEzNDY5MzFkYjMzMzM3NzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEsHOk4Yn4WrG6dRuBcr9svm5ozS
Li6NkVWM7AfEmQ+1o40NIvx5z7NHllvSrdlptYVd4I3gxeZzCCyCy08GK29rke6N
mroEDBMc60AoJSt3UThTWrOtLk0agHQfTEqHz+aQAYfYDNFINbPyQ23kD2mWDBTS
IV92Ayb7ELZ1rgUPQb5hqZ1ppHw94Rro/2ClYmqpzzZ+LM1sBnYDq1eTjtP3393d
xp+hrKTH3qXbBsK/L+BN85jtO9phK573o0kNwLItq7xXSpU8x1EnSEUjdYeXRDv7
55eq82ZEO+gWZvlgUTSn+/9hhPbIPzFl8w6AsKRYeuiKF8sKvsH7jWkpdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJBBUrkZ3780o+YZSjRpMdszM3edMB8GA1UdIwQY
MBaAFNo0IWs72SG2xmGHqMhqSkuw7lI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjct
MGJmNTkwNWIzNWVmLzEva0VGU3VSbmZ2elNqNWhsS05Ha3gyek16ZDUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MWVlN2MtM2MwNC00YTljLTlkZjctMGJmNTkwNWIzNWVm
LzEvMmpRaGF6dlpJYmJHWVllb3lHcEtTN0R1VWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstnAMA0G
CSqGSIb3DQEBCwUAA4IBAQBTrv09Mg+5thdvRM5yZFHByq/zUXmAip/HtNcqqb6X
JLaL3kekT21sObov1+GsVvm5OkcUE83aFHIF0vCzB8s2oMZL08pItc9gSmc49ETI
HJaUpmJ8KCsLUG5Kn8U9IL+rvliwH+DmLbWqcHoUcQ/89g0MAjkrzv4eCtqBytnX
W7rbfQNbJPF8mrYcJtPcbhHHckqwAEbkZbE3iVdO6RDBICwun5MWVmIYwzd88PN/
UNq3AibMcgu91mZAQB206f9dhzaQEWiFK8lGU1l0MLqpq3UqKH6gQfzsj1BLYvyZ
niOGae6FE1PSASZxcPp1Z0NC0iek52ggkMBldlLGJtlV
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:18 2025 by rpki-client