Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jzapnCAQwLXCHxS-FmpZ_PcurtA.roa
File: jzapnCAQwLXCHxS-FmpZ_PcurtA.roa (raw, json)
Hash identifier: BvzOEntjmK+0abNBOPJPh98uMUw6Tlg522TWI8Vo7bU=
Subject key identifier: 8F:36:A9:9C:20:10:C0:B5:C2:1F:14:BE:16:6A:59:FC:F7:2E:AE:D0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195136ECAA0151C236534DEAF826F6220A9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jzapnCAQwLXCHxS-FmpZ_PcurtA.roa
Signing time: Mon 17 Feb 2025 10:23:02 +0000
ROA not before: Mon 17 Feb 2025 10:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 78.135.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Feb 2025 21:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:6e:ca:a0:15:1c:23:65:34:de:af:82:6f:62:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 17 10:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f36a99c2010c0b5c21f14be166a59fcf72eaed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:f4:f9:4f:bf:f4:ef:88:a8:f1:ce:b5:f2:
82:54:4a:b9:5f:60:bc:65:f9:70:e4:c8:8d:28:5c:
16:93:28:40:73:88:d6:dd:0d:fe:f0:24:89:46:44:
ee:71:76:92:f1:75:d1:8d:0f:6b:11:4a:a9:c5:4d:
82:cd:6a:09:16:90:53:b4:e8:4b:7c:e2:80:89:e9:
46:bc:ad:70:16:ff:0e:44:53:1b:a0:03:a3:2b:95:
f9:a3:ca:30:f9:89:b2:67:48:4a:e0:30:33:3e:fa:
a5:55:b4:b7:10:93:9b:ab:59:93:c4:62:93:cd:63:
33:33:90:86:a8:53:8b:f6:91:20:48:ef:2f:15:c3:
a6:b6:77:19:a4:2e:f4:7b:b3:a1:a1:77:d8:6d:c5:
6f:24:ed:21:d9:88:8b:0a:d0:b3:9a:2a:53:d4:ec:
6e:8f:40:06:78:0d:e7:61:bc:e8:27:5e:93:1b:a5:
ed:47:13:3c:2a:48:de:6a:d2:94:d4:64:5e:df:ff:
f9:ab:67:e7:9a:df:59:86:72:70:37:a3:10:bf:c1:
49:e8:f8:a7:db:85:09:97:52:9f:14:bd:c3:21:25:
da:53:05:6e:6d:ce:32:1e:d6:94:62:0f:5a:93:c5:
95:44:b9:80:af:38:1e:38:3d:8a:61:6f:3a:f3:cc:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:A9:9C:20:10:C0:B5:C2:1F:14:BE:16:6A:59:FC:F7:2E:AE:D0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jzapnCAQwLXCHxS-FmpZ_PcurtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.111.0/24
Signature Algorithm: sha256WithRSAEncryption
67:45:b9:4e:46:6c:c2:1f:e8:d8:26:42:f8:51:2e:dd:ab:4c:
f5:24:fe:cb:9f:63:0d:62:ba:9e:1b:59:12:75:6a:fd:ac:1c:
96:1b:2f:cd:d9:8d:1d:92:62:6f:1a:4d:63:99:8e:4a:c9:58:
30:dc:c9:80:8a:6c:2c:d6:e1:42:7d:45:15:60:04:b8:be:01:
1a:fe:24:4d:66:38:e8:4a:3e:8f:9c:3a:fb:f7:bf:d3:c6:88:
94:ce:7b:09:5c:c3:2c:d4:bd:86:05:01:6e:9d:96:c1:cc:fb:
d3:7d:8e:cd:21:2d:b0:57:0d:48:1b:b8:77:11:7b:b7:28:e7:
5d:fd:4a:b6:c7:78:42:ae:f3:f9:74:57:ac:13:7b:af:5e:3b:
d4:68:a5:b2:90:3b:9e:50:03:b8:e2:2f:4f:a3:1f:c1:f2:4d:
b5:8a:71:e1:fe:c1:b8:42:d9:07:73:aa:fb:ea:c6:e3:7d:a2:
9d:fb:c3:a8:c0:88:8b:44:9b:90:44:92:6f:f5:50:70:48:61:
03:3d:e7:45:45:08:35:16:b1:33:07:c6:cf:c0:2a:c4:3e:86:
7d:b3:60:69:9c:50:f4:6e:34:37:49:9f:bd:73:c0:0e:98:ca:
ec:fb:9e:cc:27:dc:76:46:9c:5b:d7:a5:d5:ee:75:52:2d:85:
6f:ee:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:59:20 2025 by rpki-client