Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/ouJpfJbchWU6U6sgBZuUxXCULsE.roa
File: ouJpfJbchWU6U6sgBZuUxXCULsE.roa (raw, json)
Hash identifier: LIyE+lHXMR+QVJw3cAOXmSc+hJIgFMXccoDSifp8eXQ=
Subject key identifier: A2:E2:69:7C:96:DC:85:65:3A:53:AB:20:05:9B:94:C5:70:94:2E:C1
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 018CC94D8CB316BC990AB848FF99BA915017
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/ouJpfJbchWU6U6sgBZuUxXCULsE.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201275
IP address blocks: 178.57.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8c:b3:16:bc:99:0a:b8:48:ff:99:ba:91:50:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2e2697c96dc85653a53ab20059b94c570942ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:d5:9e:53:b0:be:74:92:9c:4c:14:64:88:
45:1a:81:7e:60:9a:4a:07:64:77:c1:79:63:3a:ef:
bd:0d:27:90:5c:29:0f:2e:23:0d:0a:18:d5:ad:27:
70:f7:78:cc:16:53:8d:4b:32:a5:5e:56:d8:c6:64:
4f:ba:59:8f:a7:31:84:f4:a5:10:52:9f:2d:75:df:
f3:68:34:35:7e:59:fb:50:99:77:6b:d6:e8:17:bd:
b3:68:3e:96:a0:00:3f:e5:7d:33:64:7c:90:f6:a1:
fc:78:77:ef:34:0a:60:c9:ca:11:5d:5f:f3:84:6d:
ad:42:7a:0e:30:fe:40:a1:61:48:b0:6c:bc:6d:43:
70:13:46:75:d8:eb:73:4b:21:48:d3:3c:04:1a:52:
3f:5d:73:92:df:31:ef:22:67:e6:20:bd:7f:d9:35:
2d:f4:e6:12:b5:8e:d6:ea:24:21:b5:cc:25:f5:84:
43:6d:a4:13:56:0a:9d:34:98:bd:87:a4:ff:1d:fe:
e7:06:63:a1:9a:82:70:39:b1:6b:17:c8:6d:80:33:
66:5d:32:8e:db:28:f3:e7:a8:40:cc:b2:3d:9a:02:
26:ec:a9:24:01:21:01:b3:37:ab:90:e7:84:27:43:
e0:d0:55:0e:c4:6c:35:a8:9d:df:92:0b:07:b6:3f:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:69:7C:96:DC:85:65:3A:53:AB:20:05:9B:94:C5:70:94:2E:C1
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/ouJpfJbchWU6U6sgBZuUxXCULsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.92.0/24
Signature Algorithm: sha256WithRSAEncryption
07:18:dd:1c:97:08:45:87:65:e3:9d:65:15:b3:00:d9:84:21:
0d:b6:a4:36:7b:b6:67:1c:37:3d:b4:00:96:34:4e:22:50:17:
aa:e9:fa:05:3f:c8:25:ae:b8:8d:27:0a:e5:3b:00:c1:e2:bc:
4f:81:74:5b:dc:e2:80:e5:26:e1:db:a7:b5:2d:7a:9a:fa:64:
4a:54:5e:59:81:61:a7:03:c0:9c:2a:e0:24:ff:4d:0e:80:6b:
ac:38:0e:fc:7f:10:b8:5b:6c:37:f5:e8:a5:58:1e:02:dd:30:
0a:bc:bd:f6:8c:ef:d9:13:c5:13:3f:67:b4:e9:f2:e3:ca:47:
84:ec:4f:7b:d4:f7:e5:b7:bc:a4:6d:31:e1:93:28:9c:46:c1:
2f:7b:6e:2b:b3:2d:b2:74:0c:74:45:0b:08:d9:b6:e0:3c:3e:
fd:65:0c:67:85:2d:76:5f:64:a2:8a:19:af:79:8b:c0:b0:3b:
cc:71:45:9a:9c:2a:0a:1e:d7:de:2d:10:29:0e:df:28:16:18:
7b:2d:37:fa:60:fd:62:85:36:68:33:98:96:98:9d:37:84:2b:
6d:1d:bf:6c:cc:5f:b0:4f:75:3f:c6:07:c5:b6:6c:d3:03:b7:
c7:83:1e:f1:e4:8c:e8:87:70:7f:d3:e8:a9:12:21:e7:92:1e:
7d:88:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:35:18 2025 by rpki-client