Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HK19H_Gzxxuw4tLjFK33Dk6smsE.roa
File: HK19H_Gzxxuw4tLjFK33Dk6smsE.roa (raw, json)
Hash identifier: Ow3I5kpCqM7K3KJiq83HPpGwr7mymQs/Zb3SEgRZfgk=
Subject key identifier: 1C:AD:7D:1F:F1:B3:C7:1B:B0:E2:D2:E3:14:AD:F7:0E:4E:AC:9A:C1
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB14D4EFBD79ACEFDAEE40F4C3FED
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HK19H_Gzxxuw4tLjFK33Dk6smsE.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199853
IP address blocks: 178.156.32.0/24 maxlen: 24
88.148.58.0/23 maxlen: 23
84.232.106.0/23 maxlen: 23
37.72.8.0/24 maxlen: 24
94.76.176.0/24 maxlen: 24
185.27.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b1:4d:4e:fb:d7:9a:ce:fd:ae:e4:0f:4c:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cad7d1ff1b3c71bb0e2d2e314adf70e4eac9ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:a1:c9:f3:a3:7d:c7:39:b4:c1:c9:a5:7a:
37:86:43:9a:8c:29:ad:c2:c8:08:99:97:60:b9:ef:
73:de:bc:db:8b:37:09:6a:0b:15:61:bf:60:52:cc:
64:3b:0a:2f:a1:78:37:c2:cf:ea:a3:26:06:03:ad:
05:ce:55:3d:34:cd:ea:0d:c5:03:f3:a9:64:ef:71:
24:8e:06:cd:dd:6d:6a:84:2e:23:d7:a5:dd:0e:10:
60:1b:6b:40:d3:c0:bb:e6:ee:6c:2f:09:de:f7:03:
81:c4:3b:21:61:85:8f:7f:dc:7d:e2:8b:eb:49:98:
a5:20:93:45:95:0c:a4:bc:9e:67:d7:3f:1b:bd:6b:
33:aa:92:67:d7:d9:38:92:3f:cb:a2:02:0e:df:a1:
30:0e:8d:70:f7:dd:64:47:f5:ea:be:96:c5:d3:f4:
d0:71:bd:39:4f:fe:be:2f:36:46:49:0f:bd:8a:4a:
22:19:bd:db:2f:02:cc:03:77:fe:ad:0d:1d:89:e4:
ee:51:51:07:f8:9f:34:4b:de:97:31:50:dc:3c:fd:
b9:2c:aa:e8:2d:e2:5e:7b:4a:40:1b:51:9e:5b:f3:
7f:4e:4b:68:43:b2:0e:cb:12:a2:3d:9e:16:6d:cc:
6c:84:09:e0:26:9e:c1:31:60:1c:a7:18:66:08:35:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:7D:1F:F1:B3:C7:1B:B0:E2:D2:E3:14:AD:F7:0E:4E:AC:9A:C1
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HK19H_Gzxxuw4tLjFK33Dk6smsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.8.0/24
84.232.106.0/23
88.148.58.0/23
94.76.176.0/24
178.156.32.0/24
185.27.126.0/24
Signature Algorithm: sha256WithRSAEncryption
19:bf:22:98:c2:02:d4:9c:cb:7c:da:8e:de:81:32:78:3b:96:
26:1b:c0:b2:83:5d:ee:01:09:f8:99:d2:81:45:fb:0b:ed:36:
73:ce:96:5c:2f:37:6b:1d:ec:28:78:6f:4c:dd:bb:16:2c:82:
85:ea:18:5b:c0:6b:46:b7:d4:3c:5f:9a:59:e6:54:3c:25:50:
f8:24:9c:b2:63:84:99:a3:d6:e8:df:02:29:f8:3a:1f:ca:03:
26:ae:9e:a3:78:d4:e4:06:c3:19:e3:c6:67:5b:65:e8:af:f0:
ec:80:69:c5:2e:96:66:b9:1e:57:08:5c:2d:de:7a:45:62:ba:
c7:69:cc:14:f0:4c:2b:32:7c:4c:4a:e9:31:2b:dc:8c:89:ea:
ed:77:45:17:42:d8:c3:c7:7f:1c:0d:dd:9c:f5:4e:4d:c5:35:
2e:fd:b7:59:83:a3:d9:8f:e4:59:5b:8f:7d:3e:cd:84:c7:b0:
56:c3:39:ac:65:9f:f2:d3:e7:cf:72:f7:fd:07:13:2c:a9:32:
33:d5:a2:ff:39:ef:ad:bc:c0:05:30:eb:f9:7f:58:f4:37:24:
14:83:a4:44:85:f7:9e:eb:10:7d:a3:90:a1:8c:13:aa:62:d0:
ca:5c:ca:87:46:e5:4f:bb:77:3c:03:16:8c:e7:b3:72:66:1d:
7c:eb:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:16:43 2025 by rpki-client