Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/HyBEcX1zL9Cbbv_UlfEMHzHys7Y.roa
File: HyBEcX1zL9Cbbv_UlfEMHzHys7Y.roa (raw, json)
Hash identifier: 2FGwQkBeFWu30o2c75HYKMAMSzHY8YIMvqjFYIbepxM=
Subject key identifier: 1F:20:44:71:7D:73:2F:D0:9B:6E:FF:D4:95:F1:0C:1F:31:F2:B3:B6
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 019421B2168FD6E86D0870F3FCE57FE2258E
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/HyBEcX1zL9Cbbv_UlfEMHzHys7Y.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 156.83.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:8f:d6:e8:6d:08:70:f3:fc:e5:7f:e2:25:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f2044717d732fd09b6effd495f10c1f31f2b3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:40:90:5a:12:8c:86:87:6f:9e:2b:d6:7a:
01:cf:61:cc:1e:64:f5:42:07:47:c3:08:7d:ad:51:
61:a9:97:6b:3b:a4:bd:6e:b0:6a:8a:38:d5:9b:33:
b5:11:1f:fb:fd:37:1d:36:94:7a:4f:1b:84:95:26:
7c:c8:0a:f9:9f:d2:a7:04:bc:ae:87:ae:ba:f0:1b:
7d:c9:b2:b7:f7:05:ae:81:8d:4a:b6:a6:0d:37:03:
95:b4:72:7b:0a:01:1a:38:15:98:a9:36:15:d5:53:
e3:ce:e1:fe:12:05:bc:31:9a:44:05:8f:95:e6:31:
1e:c2:51:88:d3:fc:6b:a9:9f:92:40:90:43:ea:12:
a1:c0:12:0a:16:7f:58:6e:e7:3c:4c:23:ad:af:cb:
d7:67:32:58:17:69:62:93:31:19:85:3e:1d:1c:9c:
58:e7:bb:6b:1c:9b:1c:3a:50:bf:f7:b9:e9:44:fa:
7e:00:8b:d3:c9:da:b5:d3:8b:3e:42:7d:a9:4f:dd:
7f:b1:65:d7:74:a3:e7:e3:40:0e:58:b9:70:89:83:
5d:46:49:b2:40:78:c7:ef:59:6e:a8:4c:cf:d1:50:
be:f8:3d:b3:5e:8d:50:51:ab:c5:4a:95:04:7d:be:
16:e1:ce:50:6a:03:16:d8:23:b0:6b:0f:91:8f:10:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:44:71:7D:73:2F:D0:9B:6E:FF:D4:95:F1:0C:1F:31:F2:B3:B6
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/HyBEcX1zL9Cbbv_UlfEMHzHys7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:68:5d:fc:2b:37:81:37:58:2e:e7:ee:84:5d:cc:8c:66:c5:
0b:81:26:b5:34:00:8d:cd:9f:8a:01:b3:86:9b:ce:26:83:73:
39:80:40:9c:0f:1b:87:c5:4c:63:a1:9e:ac:cf:db:39:c5:36:
c9:9f:c2:09:83:3b:82:c2:bd:7e:06:fc:d1:b5:b7:33:8a:c3:
19:22:79:bf:e2:ca:da:c9:ac:58:74:33:5a:a8:ec:76:42:21:
87:9c:86:73:14:59:6f:10:a8:27:96:36:ba:31:18:66:27:92:
b7:75:8c:83:97:3c:2d:8b:7d:09:1f:45:68:7d:48:ab:c4:09:
1f:7e:0c:3f:15:93:a6:6d:a2:ca:60:e7:80:c5:e4:3e:09:6f:
e5:88:92:9a:41:fc:56:14:c7:23:70:cb:24:a6:0f:9a:21:4a:
cf:b5:2e:1f:96:6f:92:ad:56:09:ca:df:f6:b7:65:19:f1:18:
35:3d:b7:ec:b7:5c:8c:83:41:0c:4f:43:3d:f3:0b:67:82:30:
aa:bc:c2:de:02:4d:cf:e3:9e:23:37:c5:c1:9d:9d:11:18:a3:
bf:c8:e0:ad:cf:75:8f:72:9e:4e:76:55:9c:42:62:9d:41:b8:
58:64:43:3b:df:81:51:2c:4e:a6:7a:80:c9:53:b3:2e:86:f6:
aa:ff:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:42:45 2025 by rpki-client