Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8hCX-grCQ_smvY73xh1TlrCrn8Q.roa
File: 8hCX-grCQ_smvY73xh1TlrCrn8Q.roa (raw, json)
Hash identifier: AB2mTpuwcPjF0QGkNoIwzCKeTn5G0W6Xn2KvdUfI6DE=
Subject key identifier: F2:10:97:FA:0A:C2:43:FB:26:BD:8E:F7:C6:1D:53:96:B0:AB:9F:C4
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01900AD90A0F7D54B6E3711591C54A859AB6
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8hCX-grCQ_smvY73xh1TlrCrn8Q.roa
Signing time: Wed 12 Jun 2024 05:08:34 +0000
ROA not before: Wed 12 Jun 2024 05:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 05:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0a:d9:0a:0f:7d:54:b6:e3:71:15:91:c5:4a:85:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 12 05:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f21097fa0ac243fb26bd8ef7c61d5396b0ab9fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:c1:72:7d:65:a3:ed:1f:9f:3f:9e:05:5a:
6f:47:67:7b:1e:79:ba:c9:26:64:97:77:06:f9:06:
5f:e5:cf:8b:63:d2:32:63:3c:56:21:1e:54:0f:1a:
70:13:f3:ae:85:03:e7:e1:d6:70:7b:98:25:d6:d8:
dc:05:0f:9e:43:4e:04:28:7b:11:62:2a:39:3b:f3:
fa:c3:08:41:65:a5:00:6e:7d:af:05:8f:66:37:ef:
9d:63:50:1c:e5:3d:27:64:c8:bb:17:cf:65:35:a8:
0c:98:01:fc:e3:95:02:43:5f:6a:dd:5d:5f:50:b6:
d4:73:a1:3f:11:54:87:d7:fb:c0:b9:41:1d:08:0a:
ac:d3:72:af:68:e0:17:b9:2a:96:33:c7:16:57:59:
e7:8d:c3:c5:ae:3f:77:07:f6:7d:e4:96:f2:df:b3:
df:7f:84:13:74:55:f3:2e:f1:07:65:3b:8e:75:c6:
5a:dd:da:e4:6f:20:60:c8:c7:d2:4c:c9:6d:88:6e:
7d:e5:66:90:ff:37:a5:40:2f:74:00:85:99:b0:b3:
da:2d:12:18:ff:9a:30:26:d2:c5:df:96:47:63:58:
a6:bf:68:79:73:fd:ae:59:24:c2:c1:a0:8b:d6:40:
ea:db:e3:44:b5:02:e9:d9:9e:ad:0f:c8:4c:4f:46:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:10:97:FA:0A:C2:43:FB:26:BD:8E:F7:C6:1D:53:96:B0:AB:9F:C4
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8hCX-grCQ_smvY73xh1TlrCrn8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2c:42:11:4d:9b:be:b9:5d:a6:c6:4a:4b:22:f0:62:ac:f4:
23:9d:6c:bb:3b:6f:0b:d7:5e:55:bc:f0:42:92:12:99:17:38:
a0:da:27:5c:96:d0:1a:15:47:a3:e1:ab:eb:19:24:d3:78:ae:
13:6c:0b:ac:29:46:06:8b:e2:f4:6a:19:87:ba:ab:30:45:77:
3c:54:da:38:ba:48:22:34:e9:a1:6a:6b:59:c9:0a:58:85:07:
8b:ae:38:91:14:95:fb:b3:e2:bc:65:52:4d:f2:36:1b:be:a7:
6b:68:d6:b5:f8:3e:0a:3e:2f:cc:25:40:45:73:d5:c7:34:92:
49:dc:6a:34:ab:a8:86:a2:d7:7d:0f:ff:65:36:bb:35:11:05:
eb:d1:0f:51:e5:8f:04:04:f0:22:a0:f5:43:05:e9:7c:0e:b4:
c8:2e:48:4c:58:6e:9c:a7:be:20:6b:05:b7:6f:84:d8:b4:05:
2c:da:48:59:6c:54:72:da:02:9e:1c:96:f9:3d:29:99:2a:d8:
68:1e:4d:60:0b:0d:99:da:6e:04:d4:d7:7e:c3:8c:b6:47:b8:
2a:fe:e2:05:a3:d5:9a:af:06:a9:47:dd:e9:2a:ad:ea:2c:6b:
a8:46:a1:12:c5:ce:a4:cb:da:9d:4d:bc:2b:c8:8a:6a:05:4c:
b0:39:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:44:48 2025 by rpki-client