Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HKIaic_v6iApoz_cEJLmEuqIrmQ.roa
File: HKIaic_v6iApoz_cEJLmEuqIrmQ.roa (raw, json)
Hash identifier: bq5r7pzucgdRyEBx6TxYn/D7l2v9NAtQCgNgR5USjdo=
Subject key identifier: 1C:A2:1A:89:CF:EF:EA:20:29:A3:3F:DC:10:92:E6:12:EA:88:AE:64
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0193AAB7A6C4DE9746EF1C7AB97DE0DD247F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HKIaic_v6iApoz_cEJLmEuqIrmQ.roa
Signing time: Mon 09 Dec 2024 09:19:42 +0000
ROA not before: Mon 09 Dec 2024 09:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
5.253.244.0/24 maxlen: 24
45.67.136.0/24 maxlen: 24
45.67.138.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
45.91.251.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
45.134.108.0/23 maxlen: 23
45.134.108.0/24 maxlen: 24
45.134.109.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
46.243.76.0/22 maxlen: 24
185.132.55.0/24 maxlen: 24
204.11.1.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:b7:a6:c4:de:97:46:ef:1c:7a:b9:7d:e0:dd:24:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 9 09:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ca21a89cfefea2029a33fdc1092e612ea88ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:a6:87:b6:58:b8:00:96:f1:2b:95:e3:43:
4d:04:01:7f:2f:07:a9:90:1e:88:da:07:35:6f:04:
6c:93:43:3b:6f:a5:a2:07:89:79:42:db:25:39:1b:
8e:5a:f1:75:12:fd:5a:c7:d1:d8:6b:b3:31:58:a5:
27:b4:78:ac:06:4a:36:fd:80:cf:53:2a:66:3c:02:
56:1b:c9:81:f6:d6:32:80:01:02:33:f7:c2:80:d8:
bf:35:b1:d9:cf:cf:04:85:5e:6a:23:79:81:14:b4:
3f:8f:a1:fd:cc:b6:b6:a0:63:d1:23:f6:1d:63:cf:
b2:c7:dc:ae:e0:eb:bf:17:46:11:b3:29:7f:2d:ef:
a1:a5:4c:47:96:43:78:4e:fc:7c:7e:d4:1d:2a:90:
f6:df:3e:d8:53:38:5a:53:f9:52:45:52:43:08:1e:
b5:9b:ae:29:6e:22:3a:93:b1:12:d6:58:75:b6:97:
eb:10:03:05:58:e8:24:75:28:17:3f:15:ac:dd:d3:
90:0f:d2:05:c0:eb:64:b9:2d:31:35:6a:5c:2d:62:
49:5a:1c:26:c3:e9:54:c6:9a:a2:30:d9:56:cb:52:
41:de:ae:95:c9:08:8e:17:3c:3a:ed:d0:e5:c5:41:
ad:b6:bd:fd:fb:01:48:63:ce:92:4a:a8:ac:9c:24:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A2:1A:89:CF:EF:EA:20:29:A3:3F:DC:10:92:E6:12:EA:88:AE:64
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HKIaic_v6iApoz_cEJLmEuqIrmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.67.136.0/24
45.67.138.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.134.108.0/23
45.137.71.0/24
45.145.224.0/23
46.243.76.0/22
185.132.55.0/24
204.11.1.0/24
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:81:65:ee:0f:fe:8d:42:20:06:b0:89:84:93:fc:46:82:53:
6e:ab:54:f0:7c:c9:4a:68:d5:ce:68:c8:36:a3:df:03:ce:6e:
dc:c7:ab:d7:08:df:e0:f9:83:40:23:96:6f:21:f0:0a:bd:d2:
df:3f:07:70:84:ad:3f:20:d1:19:71:11:0e:ee:70:d2:c6:4c:
a3:a4:fc:c8:fb:74:4f:ec:aa:b7:fe:a1:98:90:28:d3:c7:97:
ac:30:9d:9e:7c:1d:2e:d4:d5:b4:95:71:55:c5:53:7e:a3:c6:
08:af:34:51:47:d2:ae:62:bf:09:97:50:35:96:75:4a:4a:f9:
59:06:09:2c:0e:d8:41:93:d7:a1:2e:46:19:3f:1a:0c:96:5f:
54:af:8e:52:19:42:be:e9:3c:6f:a3:c6:2a:b6:8e:2f:ae:d9:
5b:aa:38:08:37:e8:73:14:3e:ca:53:59:94:c9:83:05:3a:10:
fd:6c:5b:57:eb:99:9f:64:dd:e7:34:71:82:d6:8b:fb:74:a6:
5d:e5:a1:b1:7d:a0:bf:95:8a:31:a5:9c:03:71:96:06:97:80:
18:95:6f:6a:fa:40:5a:9a:72:e0:7d:8b:d4:df:c2:c2:af:f1:
c8:27:8a:85:6d:80:5e:d8:5f:f5:d4:6a:4a:00:89:27:fc:c9:
a8:ce:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:37:08 2025 by rpki-client