Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/HkWfb2MNzddMhRJkrMcUjIAFAss.roa
File: HkWfb2MNzddMhRJkrMcUjIAFAss.roa (raw, json)
Hash identifier: DBTOJ4ompYTACYHyJV2u5eDfVRksfwr/LtqW1KdBKKE=
Subject key identifier: 1E:45:9F:6F:63:0D:CD:D7:4C:85:12:64:AC:C7:14:8C:80:05:02:CB
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019619EB48789EF73B8BBC14B67B4E023D41
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/HkWfb2MNzddMhRJkrMcUjIAFAss.roa
Signing time: Wed 09 Apr 2025 09:39:32 +0000
ROA not before: Wed 09 Apr 2025 09:39:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51161
IP address blocks: 91.235.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 07:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:eb:48:78:9e:f7:3b:8b:bc:14:b6:7b:4e:02:3d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Apr 9 09:39:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e459f6f630dcdd74c851264acc7148c800502cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:2d:14:fa:be:90:07:3d:b5:2f:49:c1:bd:
61:f7:6a:78:8d:fa:6c:1b:9a:a9:4d:5a:96:87:d0:
4c:37:1a:6d:c1:ef:05:0b:d0:52:98:b5:88:ca:8e:
06:4f:54:76:e2:19:18:2e:44:66:fc:e6:0d:64:0e:
6a:95:07:b1:7d:cb:22:63:b8:8c:fe:b3:50:df:76:
05:89:af:8c:73:fa:29:80:bc:99:1a:e5:83:aa:32:
63:81:aa:9e:54:38:0d:1c:40:f2:dd:cd:73:dc:bd:
b9:9c:ad:b4:8d:48:25:81:ad:28:6d:26:2f:99:e0:
21:16:b1:81:7b:f2:a2:e0:9c:26:49:d2:0e:05:5a:
33:f1:df:41:36:f8:57:cf:80:d8:50:83:2e:25:31:
5a:e0:1f:0d:a8:48:74:76:1d:35:70:68:2b:2e:70:
ef:0a:4f:4d:5c:4b:48:e6:82:14:01:47:1a:8d:ab:
1d:0c:31:9c:a6:67:0a:43:08:4b:6b:e3:87:69:f2:
b2:53:5f:33:f5:18:bc:20:86:2a:3c:d8:71:25:5b:
83:91:2c:92:59:cd:d4:64:00:a4:08:4a:18:54:dd:
b1:e9:e4:3e:ba:4c:bf:16:95:eb:5f:1e:ca:df:f1:
ec:81:e1:36:f6:78:85:ba:a2:64:0f:1c:3d:6d:0d:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:9F:6F:63:0D:CD:D7:4C:85:12:64:AC:C7:14:8C:80:05:02:CB
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/HkWfb2MNzddMhRJkrMcUjIAFAss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ea:f7:6c:ea:d9:e5:2b:98:c7:3e:e3:4c:a5:8c:d6:bd:f1:
a3:cb:bc:cc:2d:ad:5d:fd:e3:0e:29:70:b3:8d:96:fc:1a:c6:
13:ac:41:aa:3b:0e:5b:c8:10:34:63:26:3a:fd:26:4f:89:70:
d3:56:5a:0c:e5:99:2e:9a:3c:d4:63:ac:de:a8:9a:31:31:5e:
c4:a6:27:bd:e7:2a:98:0c:be:e5:bd:eb:bd:c4:9e:30:f6:a1:
c1:df:40:a0:d4:93:a3:53:fd:97:d3:39:3d:37:c8:12:7a:9c:
5f:b3:e0:a4:67:06:9f:70:48:8a:c2:dd:45:e6:97:bc:49:37:
e2:e1:bc:82:3f:f7:b8:5b:9a:24:47:97:07:54:4d:b1:e0:b8:
b0:b1:d4:a2:2a:df:2b:6f:f7:97:d7:86:cc:39:aa:69:6c:6a:
d3:a0:ca:49:2c:cb:77:42:9a:a6:96:da:02:e8:a5:f3:29:6f:
b1:62:7f:78:e6:23:00:eb:81:4a:85:f6:c3:01:52:30:ff:6b:
d6:80:d0:ff:6c:79:bb:c9:49:d0:e0:45:37:cc:72:0f:b2:b0:
7b:5a:2f:8d:13:ee:e4:85:89:79:eb:d1:77:6a:ca:91:c2:c5:
cb:3c:7e:e8:cf:9b:b6:8d:89:e7:c6:a7:ec:79:05:17:48:c5:
3b:8d:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:06 2025 by rpki-client