Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/HkWP5vnYwlyEr3j9JB80nj6ROiQ.roa
File: HkWP5vnYwlyEr3j9JB80nj6ROiQ.roa (raw, json)
Hash identifier: 03oMLZ70qwJ7EWy/V+LehWjs7rJIa1Wj3TBR/gKna4g=
Subject key identifier: 1E:45:8F:E6:F9:D8:C2:5C:84:AF:78:FD:24:1F:34:9E:3E:91:3A:24
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 019363C97F38720D6FBF6BC700A89311500E
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/HkWP5vnYwlyEr3j9JB80nj6ROiQ.roa
Signing time: Mon 25 Nov 2024 14:46:09 +0000
ROA not before: Mon 25 Nov 2024 14:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56443
IP address blocks: 185.127.176.0/22 maxlen: 22
185.199.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 25 Nov 2024 16:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:c9:7f:38:72:0d:6f:bf:6b:c7:00:a8:93:11:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Nov 25 14:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e458fe6f9d8c25c84af78fd241f349e3e913a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:11:1d:1e:51:22:2f:1e:25:0b:c1:ce:84:
0c:1a:22:64:af:df:6e:a3:52:dd:bd:54:6c:1d:60:
46:fa:5e:67:e7:18:3f:54:d6:68:db:cd:89:e3:33:
71:94:27:41:dd:07:34:54:8a:bd:de:a0:2c:b7:09:
56:06:34:c8:4c:c4:88:07:13:a8:f9:c7:37:23:aa:
14:72:a3:f2:dc:68:02:e4:48:a9:8a:2d:bd:8a:c7:
46:97:2a:18:d9:ce:10:f3:34:e0:e3:31:24:06:9c:
91:8c:67:de:a1:79:67:23:c0:b6:95:3a:22:6a:f7:
e4:31:7c:59:04:e6:88:7c:fa:2a:9c:98:91:36:a0:
5b:8d:fb:22:20:53:54:93:5c:aa:e2:4c:44:1b:45:
16:5a:80:ee:ce:e3:47:45:c9:a7:90:6b:0b:b8:cb:
e3:9c:05:b6:ba:d8:7f:1c:41:48:34:32:aa:32:93:
83:7e:27:1f:49:b7:6f:2d:b8:1c:00:3f:a6:e8:6d:
55:f6:dc:7c:9e:eb:d7:c7:2a:46:29:3b:08:5e:f1:
18:4f:4f:07:b4:08:52:7e:19:c4:ab:63:86:0b:af:
13:92:a1:42:77:b9:ad:15:17:5d:78:ac:94:3e:4f:
a7:35:c4:68:97:e0:5c:4a:15:94:a4:af:0e:e3:22:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:8F:E6:F9:D8:C2:5C:84:AF:78:FD:24:1F:34:9E:3E:91:3A:24
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/HkWP5vnYwlyEr3j9JB80nj6ROiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.176.0/22
185.199.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:e0:bf:17:5b:b3:1a:b8:60:c9:94:69:73:50:d1:e6:0a:c4:
11:04:b8:e5:51:c7:49:b7:cf:88:4e:15:70:13:eb:75:b4:14:
e5:8d:c4:9e:3f:38:5d:c9:0c:79:1a:a4:14:6d:e0:ca:16:85:
58:48:f1:5d:b3:fa:16:26:73:ae:16:cb:8c:df:19:45:47:5c:
9d:67:d7:ab:40:e5:f9:95:33:43:61:1f:ff:7c:e2:dd:d0:0b:
e5:8a:0e:bc:57:2e:47:49:92:6b:63:d9:68:b9:e9:75:c9:ea:
ca:2a:48:1a:15:16:7f:13:30:36:1d:60:53:f3:64:c3:87:51:
48:9b:0e:13:25:2f:67:47:7f:db:b2:72:ae:ff:a9:1e:d8:e0:
08:72:eb:d1:78:a1:e4:f7:28:f5:2b:3f:83:63:2e:48:83:84:
f1:ec:f0:87:26:4a:05:a8:92:12:09:46:98:c2:94:63:76:29:
59:dd:38:49:73:58:ad:4e:56:69:16:41:65:b2:8c:e6:5a:70:
da:2a:a8:f3:3b:c6:89:83:69:e1:6d:5d:66:19:bd:bc:54:13:
58:0f:f7:56:18:14:42:c0:04:00:5f:a9:54:41:34:b9:83:bc:
fc:26:a8:ce:39:c4:9f:89:78:dc:31:fc:b2:18:b1:13:0b:26:
07:ea:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:00:50 2025 by rpki-client