Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/HfOEsvtTDSHZDtaQwGeZWlh-yu0.roa
File: HfOEsvtTDSHZDtaQwGeZWlh-yu0.roa (raw, json)
Hash identifier: fZ5wiV29L/HqQ3NqY1cZIDgsMKya3Tw/b9VZWfLLY5U=
Subject key identifier: 1D:F3:84:B2:FB:53:0D:21:D9:0E:D6:90:C0:67:99:5A:58:7E:CA:ED
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194B203E23A9744CCE28455E02E20184AE0
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/HfOEsvtTDSHZDtaQwGeZWlh-yu0.roa
Signing time: Wed 29 Jan 2025 12:23:06 +0000
ROA not before: Wed 29 Jan 2025 12:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.105.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 18:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:03:e2:3a:97:44:cc:e2:84:55:e0:2e:20:18:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 29 12:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1df384b2fb530d21d90ed690c067995a587ecaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:dc:a2:3c:de:d4:c8:7a:3f:40:1b:5b:d9:
16:c0:c7:f7:da:0c:cc:72:e4:0f:aa:fb:93:3d:a1:
20:94:2a:0e:32:a1:26:6e:b1:39:f6:a9:1a:a1:63:
2c:2c:f3:f9:17:fb:32:5a:88:45:be:7e:d8:80:65:
d3:43:41:35:a9:e2:4b:a5:5d:95:5f:e0:4b:b8:4c:
91:1a:58:b4:07:88:38:c0:ae:cd:e7:a4:dd:f5:f3:
3d:99:04:e5:2f:5b:74:af:0f:94:31:de:90:41:89:
71:8f:81:83:0e:6c:f2:da:17:09:ea:64:97:73:4d:
7f:30:db:b2:52:92:a3:7a:5a:87:02:d2:71:c5:ad:
e3:1c:64:87:54:23:61:d1:72:37:ff:23:24:cf:1c:
c3:0e:0d:fd:ee:1b:48:44:5e:37:5f:30:49:ec:dd:
7f:56:78:43:75:0c:a4:a4:4e:23:36:e7:85:c6:83:
72:32:a4:71:4e:64:90:7e:12:f1:51:97:83:ec:4b:
0d:14:ce:1d:71:4b:b4:e5:50:da:ce:b9:a0:4d:eb:
a5:f6:83:72:8a:f7:cc:f2:2e:b8:2f:c4:13:08:f9:
b2:b2:f3:fa:1f:a3:63:bb:c1:48:3e:0d:0c:32:c0:
75:ec:30:51:43:f7:d7:59:c5:3c:0f:e5:40:df:62:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:84:B2:FB:53:0D:21:D9:0E:D6:90:C0:67:99:5A:58:7E:CA:ED
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/HfOEsvtTDSHZDtaQwGeZWlh-yu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.199.0/24
Signature Algorithm: sha256WithRSAEncryption
09:95:e4:27:a3:8b:92:13:de:05:dc:0b:ae:90:00:80:b8:2a:
81:d7:3a:e6:1a:f4:2b:34:ea:04:43:d6:3c:e1:e2:b8:99:48:
1f:42:c7:e4:e7:f3:e6:75:b7:05:2e:31:d8:c1:27:b8:4e:5a:
68:32:7a:fb:8f:6d:59:7e:98:89:dc:04:04:1d:34:d6:9f:05:
a1:b5:a0:c1:7d:06:28:3d:bc:e4:ad:4a:0a:3c:78:e8:c5:ab:
d1:a4:ac:5e:92:17:e5:b3:af:7f:67:a6:d3:65:8e:89:83:d7:
89:fe:e7:ff:2c:02:42:db:98:0e:cf:aa:a8:59:85:e7:e4:45:
5d:e7:a2:7e:51:58:02:6d:fc:14:b2:2d:14:c8:79:f4:3d:ea:
e5:39:91:84:5e:5a:df:26:d9:85:f5:23:16:84:f3:ee:46:b5:
e5:dd:92:de:06:3d:09:91:85:d8:93:af:65:03:f8:63:d5:60:
97:98:9d:2f:ce:48:c5:23:29:b2:a3:52:0d:05:9f:cb:f9:09:
0f:1f:8c:a1:1e:28:89:4f:22:76:dc:b7:54:d6:ec:b3:fa:d0:
e1:4a:b4:b0:db:76:e8:2d:67:61:03:d3:aa:6c:ca:8a:4c:c1:
d3:89:4c:ee:4a:23:c4:02:a5:e2:bb:f9:eb:c5:19:ae:06:01:
e9:97:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:07 2025 by rpki-client