Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/J0HDJ67bFeJVxRj9nQxTBviS7V8.roa
File: J0HDJ67bFeJVxRj9nQxTBviS7V8.roa (raw, json)
Hash identifier: 07vop6ejKCn9bBS11+amjcMGKtNIVjKNGzJSGw0/dDc=
Subject key identifier: 27:41:C3:27:AE:DB:15:E2:55:C5:18:FD:9D:0C:53:06:F8:92:ED:5F
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 0192AFA76847AC69B52FC0CDAB4283693DBE
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/J0HDJ67bFeJVxRj9nQxTBviS7V8.roa
Signing time: Mon 21 Oct 2024 15:17:16 +0000
ROA not before: Mon 21 Oct 2024 15:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213996
IP address blocks: 178.214.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:a7:68:47:ac:69:b5:2f:c0:cd:ab:42:83:69:3d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Oct 21 15:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2741c327aedb15e255c518fd9d0c5306f892ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:2c:b1:a5:c7:bd:c7:90:79:13:65:40:92:
49:f9:0d:16:5f:ea:81:6a:5a:f2:52:4f:d0:5e:08:
70:1d:ca:3e:e0:8a:d4:ae:8e:6d:ab:a1:64:71:4e:
fe:25:99:d4:7c:b6:d9:bd:e6:c5:32:dc:11:c7:36:
85:ae:8b:d3:c9:2f:e7:66:0b:42:04:9d:20:b9:8d:
de:75:74:b9:7d:59:c1:d3:fb:d6:4d:de:79:3e:86:
fb:6c:f6:40:2e:ca:25:c7:0f:2c:e3:97:24:d7:7c:
b0:a7:3d:94:c4:4d:9f:2f:4d:5d:45:87:b3:0c:6e:
15:a8:6f:7c:47:96:b0:b2:1f:46:16:1b:19:cd:fe:
3d:38:63:45:2f:39:55:1e:d1:81:7b:9f:7b:65:e2:
f4:36:01:b1:1d:ae:fe:ed:7a:c1:1a:6f:9d:bc:72:
31:4e:e5:f6:43:b9:98:e8:8c:0c:d1:52:0a:dc:ec:
70:44:6c:40:c3:aa:de:6d:60:8e:a9:05:1e:f7:42:
41:af:cd:5b:0d:18:30:03:38:ea:85:b8:b0:d0:2b:
dc:88:ff:c9:d9:08:bc:66:3e:d6:af:fe:7e:42:3f:
b0:d9:93:1d:58:98:39:81:91:a7:bc:62:12:58:01:
4a:27:b4:45:cf:df:c3:a1:e7:83:07:ab:a6:01:cb:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:C3:27:AE:DB:15:E2:55:C5:18:FD:9D:0C:53:06:F8:92:ED:5F
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/J0HDJ67bFeJVxRj9nQxTBviS7V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:02:66:f5:03:5d:1e:b3:b2:9f:1c:8a:b4:3d:b6:af:ad:0a:
c8:5b:94:c9:e3:eb:0d:5b:0b:8d:e9:60:e2:91:82:76:a6:0a:
61:09:6f:d7:d8:3e:d1:52:99:e0:a6:c6:aa:f9:b3:49:29:c0:
62:26:9c:79:a1:a9:71:3a:ba:0e:f9:44:06:d5:95:c7:36:ab:
96:b6:d8:91:7d:8c:20:6d:25:3b:ec:ef:82:a5:02:d2:b3:ce:
8b:30:02:8a:f9:1d:1b:d0:bc:43:9d:da:b9:d0:9b:38:9b:ec:
29:73:e2:82:cd:91:45:df:4c:69:04:77:26:f1:6a:89:78:e7:
56:d0:3f:ca:e3:d0:9e:c1:c5:30:89:98:b2:b7:ec:4c:88:67:
2b:76:ad:ff:52:73:76:e8:15:02:e5:f8:44:fb:6b:3d:41:d2:
73:61:be:15:3c:82:9a:1c:2a:64:3a:6c:31:67:78:6f:0c:c0:
37:cc:04:5d:ae:31:a7:fd:e7:78:8c:75:45:5b:39:92:ac:d4:
54:90:4f:f0:ca:49:26:4d:ad:d2:bb:ee:a2:ec:bb:a0:3d:f3:
92:79:48:06:68:b6:36:8d:15:25:3a:46:96:97:1c:73:b8:c7:
76:29:d4:1c:76:79:72:e3:bf:33:36:50:04:ff:99:5f:9b:e2:
22:af:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:29:52 2025 by rpki-client