Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/HQcznznXUAmZBidUeprmLtJyrIc.roa
File: HQcznznXUAmZBidUeprmLtJyrIc.roa (raw, json)
Hash identifier: 8lvKh7D4ubgkg8m263wG6vlR4etXqta/88nVf/PB+xw=
Subject key identifier: 1D:07:33:9F:39:D7:50:09:99:06:27:54:7A:9A:E6:2E:D2:72:AC:87
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 018CC8DDF68709F707017199E8B6EE417346
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/HQcznznXUAmZBidUeprmLtJyrIc.roa
Signing time: Tue 02 Jan 2024 06:30:38 +0000
ROA not before: Tue 02 Jan 2024 06:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41151
IP address blocks: 194.140.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:f6:87:09:f7:07:01:71:99:e8:b6:ee:41:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Jan 2 06:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d07339f39d75009990627547a9ae62ed272ac87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:7e:6e:b2:02:b2:a9:7c:c3:76:38:4d:e0:
c7:9e:80:bf:c0:80:da:13:ec:82:32:58:2a:3d:3d:
64:a0:d9:7f:28:d5:4b:bf:7b:44:de:bb:85:2d:49:
4b:0d:00:97:9f:44:19:99:d8:86:8f:41:58:05:30:
7d:23:a7:16:98:f9:76:fd:dc:4d:b0:a0:11:db:aa:
ad:a4:2c:3b:70:24:7b:59:f1:0e:e6:69:d3:a8:ab:
3e:f1:8a:2b:2a:f7:19:4e:28:26:a4:da:8d:2b:81:
ff:48:af:19:c5:e2:ef:59:59:1b:32:db:f1:9f:2f:
2b:02:65:96:1a:82:00:f8:e3:42:70:36:51:bb:6c:
87:43:f7:a9:b5:fa:af:a7:17:4a:e0:1a:45:38:c8:
3f:44:ec:49:e3:52:00:53:5d:f0:0a:5f:0a:62:ed:
d9:ae:7e:96:b9:f9:d3:de:97:30:61:b0:38:7b:c8:
e0:66:be:71:af:fe:3b:5e:91:4d:38:57:55:ba:15:
8f:35:b2:df:83:cc:ae:42:e9:44:16:c6:70:ec:1f:
41:38:1b:9d:5c:26:4a:03:48:26:cb:5d:77:7e:01:
60:38:9b:56:b1:b8:7d:ff:50:5b:03:b7:12:e1:e7:
67:14:76:dc:76:d1:14:22:b0:d8:35:63:dd:cc:73:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:33:9F:39:D7:50:09:99:06:27:54:7A:9A:E6:2E:D2:72:AC:87
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/HQcznznXUAmZBidUeprmLtJyrIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d0:64:aa:68:87:a2:f8:95:5b:cd:b8:2d:57:3a:19:75:5d:
b0:a2:89:59:fa:9a:e0:b0:3d:0f:12:9a:e9:3b:b5:8d:1c:cc:
ad:3c:1b:70:af:3b:ee:c7:bc:79:d8:d6:43:d5:ba:34:71:56:
6b:30:41:42:7c:7c:65:37:e7:5c:97:65:47:e0:bb:90:b1:98:
2c:59:95:d7:18:a2:94:88:ed:14:6e:b8:ce:eb:9d:15:00:1c:
ed:bf:7b:e4:ae:41:74:6d:ec:fc:d2:63:3b:f5:d9:a6:c9:35:
c6:44:97:37:e7:57:0b:c0:2a:1b:f9:aa:9f:a3:74:71:31:fb:
49:01:0a:c5:46:35:ce:83:d1:8b:f1:28:2d:a8:5b:04:64:6d:
3b:ca:d3:71:94:5c:82:0f:1c:4e:39:43:3f:02:83:43:65:65:
85:ce:c1:f6:02:05:f5:a2:8c:aa:79:f0:2a:96:59:ba:16:83:
8a:57:9e:42:fe:35:a5:f5:ea:c9:e3:3c:b5:47:f0:1d:65:20:
53:a3:6c:32:eb:8c:8c:c6:b9:e9:66:15:95:32:3a:66:d9:0c:
8b:03:17:f5:52:56:cc:38:2c:27:b8:70:b7:e2:61:64:ed:80:
8e:cd:8e:d8:80:96:33:55:02:63:86:23:2a:90:64:85:8b:5d:
5e:1e:44:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3faHCfcHAXGZ6LbuQXNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OGYyMDMwOTk2MmY3YzZlMWMzMjY3ZjA4M2UxMjRkODNk
ZDc2ZmMwHhcNMjQwMTAyMDYzMDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDA3MzM5ZjM5ZDc1MDA5OTkwNjI3NTQ3YTlhZTYyZWQyNzJhYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtN+brICsql8w3Y4TeDHnoC/wIDa
E+yCMlgqPT1koNl/KNVLv3tE3ruFLUlLDQCXn0QZmdiGj0FYBTB9I6cWmPl2/dxN
sKAR26qtpCw7cCR7WfEO5mnTqKs+8YorKvcZTigmpNqNK4H/SK8ZxeLvWVkbMtvx
ny8rAmWWGoIA+ONCcDZRu2yHQ/eptfqvpxdK4BpFOMg/ROxJ41IAU13wCl8KYu3Z
rn6WufnT3pcwYbA4e8jgZr5xr/47XpFNOFdVuhWPNbLfg8yuQulEFsZw7B9BOBud
XCZKA0gmy113fgFgOJtWsbh9/1BbA7cS4ednFHbcdtEUIrDYNWPdzHNzgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0HM58511AJmQYnVHqa5i7ScqyHMB8GA1UdIwQY
MBaAFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjIt
NjIzMzg0ZjNlMTI1LzEvSFFjem56blhVQW1aQmlkVWVwcm1MdEp5ckljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjItNjIzMzg0ZjNlMTI1
LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoz1MA0G
CSqGSIb3DQEBCwUAA4IBAQCK0GSqaIei+JVbzbgtVzoZdV2woolZ+prgsD0PEprp
O7WNHMytPBtwrzvux7x52NZD1bo0cVZrMEFCfHxlN+dcl2VH4LuQsZgsWZXXGKKU
iO0UbrjO650VABztv3vkrkF0bez80mM79dmmyTXGRJc351cLwCob+aqfo3RxMftJ
AQrFRjXOg9GL8SgtqFsEZG07ytNxlFyCDxxOOUM/AoNDZWWFzsH2AgX1ooyqefAq
llm6FoOKV55C/jWl9erJ4zy1R/AdZSBTo2wy64yMxrnpZhWVMjpm2QyLAxf1UlbM
OCwnuHC34mFk7YCOzY7YgJYzVQJjhiMqkGSFi11eHkSs
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:11 2025 by rpki-client