Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/hzgggWdgmu35evtS7ySorIjPTzw.roa
File: hzgggWdgmu35evtS7ySorIjPTzw.roa (raw, json)
Hash identifier: GLHQ/g7OjXQdxeRetqJcvDt2PokgCKuW5oXD3tXJWvE=
Subject key identifier: 87:38:20:81:67:60:9A:ED:F9:7A:FB:52:EF:24:A8:AC:88:CF:4F:3C
Certificate issuer: /CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Certificate serial: 0193780D07D283B257053519AA45139F4538
Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/hzgggWdgmu35evtS7ySorIjPTzw.roa
Signing time: Fri 29 Nov 2024 13:12:20 +0000
ROA not before: Fri 29 Nov 2024 13:12:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31592
IP address blocks: 193.247.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:78:0d:07:d2:83:b2:57:05:35:19:aa:45:13:9f:45:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Validity
Not Before: Nov 29 13:12:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8738208167609aedf97afb52ef24a8ac88cf4f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:db:77:8d:b6:04:14:55:38:eb:69:b3:c4:
a7:3a:d8:ad:82:1e:13:f7:37:f7:ae:5b:15:c0:3d:
c0:c4:32:6e:4f:8a:e4:c5:d1:7e:f1:e5:be:dc:db:
9f:a1:75:3e:01:ff:c2:a5:23:74:55:6f:28:37:c8:
48:3a:b7:c1:41:71:07:06:ad:b5:78:a1:8d:98:5e:
33:78:11:84:f6:0b:52:9e:82:73:61:3a:2f:92:bc:
d7:f9:f7:49:f4:d1:3d:17:eb:83:60:09:cb:b0:8f:
1f:ac:ed:f5:b6:e3:3f:b1:a9:21:c2:55:ee:3c:dd:
26:45:fb:f2:49:8d:fc:05:14:d1:20:80:5d:d7:ec:
2d:81:08:8a:08:cd:8f:e1:f6:6c:cf:60:05:10:04:
52:a6:ab:ea:4e:78:40:b8:53:fc:d6:78:eb:3f:c5:
5b:9b:38:b3:d1:e0:56:52:62:4f:4f:d9:ad:ca:73:
94:55:fa:98:65:1d:c7:03:11:75:e4:54:a6:b3:c1:
25:72:4f:bf:8c:fe:a7:a1:5a:10:5a:0f:56:49:f9:
9c:1b:83:81:da:e1:bd:54:3f:4c:ef:58:0a:6e:0a:
a3:6a:62:d1:33:a6:d9:f0:8b:84:96:7a:83:5b:3b:
4e:53:4f:a7:1b:ae:bb:fc:83:91:0e:a6:d1:1f:52:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:20:81:67:60:9A:ED:F9:7A:FB:52:EF:24:A8:AC:88:CF:4F:3C
X509v3 Authority Key Identifier:
keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/hzgggWdgmu35evtS7ySorIjPTzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.95.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2f:23:d4:6c:94:3b:5c:01:60:61:ad:63:97:95:6b:f5:ec:
0c:c9:76:75:5e:09:6b:98:9b:6f:a2:57:4e:8d:c2:ce:90:15:
b2:b8:54:89:b1:31:66:24:31:66:7d:2f:4a:c3:58:aa:8e:78:
5b:0d:30:28:b3:2c:f7:35:a3:2c:90:3b:59:72:44:24:f8:ce:
85:94:04:90:70:bd:32:fa:7c:91:2d:1a:b1:c8:3c:b6:1e:c4:
84:28:cd:14:91:db:10:6b:8b:a0:00:05:c7:20:d6:68:d3:a5:
d6:42:b5:de:6a:e3:c9:e9:b2:17:f0:55:bb:d7:65:8f:eb:a1:
29:d6:d6:b8:48:83:d2:21:04:ba:70:1f:24:43:62:28:0d:6c:
a6:41:f9:93:c7:55:81:18:89:32:66:d3:88:6b:2e:c1:46:2e:
40:59:96:b9:08:d3:23:16:d0:5a:84:bc:93:ea:21:3f:0f:50:
d0:76:b1:0a:6e:2d:a6:d1:e1:ca:9c:b7:28:6f:d1:2e:21:3f:
59:7a:d6:9e:9a:5f:df:99:e7:90:1d:d0:8a:f4:34:e6:21:34:
a3:15:30:63:30:d4:8b:8c:6c:14:34:e6:1c:88:28:05:51:dd:
4e:f5:76:48:97:ea:5a:e5:b7:56:ec:36:c5:48:a8:20:ab:65:
22:8d:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:13:42 2025 by rpki-client