Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/Hx3rgeH5wkHruJbrRF7L6RtsSU0.roa
File: Hx3rgeH5wkHruJbrRF7L6RtsSU0.roa (raw, json)
Hash identifier: 3tN9NCae+HEMbbgseRLL95nqkRDMgQky9P5w9RSIrBA=
Subject key identifier: 1F:1D:EB:81:E1:F9:C2:41:EB:B8:96:EB:44:5E:CB:E9:1B:6C:49:4D
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 018CC26D7BCFE0DA69D19213D3B1B83B3591
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/Hx3rgeH5wkHruJbrRF7L6RtsSU0.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9171
IP address blocks: 193.47.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7b:cf:e0:da:69:d1:92:13:d3:b1:b8:3b:35:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f1deb81e1f9c241ebb896eb445ecbe91b6c494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:ae:df:33:05:75:c7:d6:2b:e9:00:09:0c:
df:81:e9:ba:a3:66:e6:95:82:95:46:f6:5f:b7:34:
5f:5c:74:97:5a:79:56:0b:94:db:2f:ae:b9:ff:26:
b3:2b:be:e8:28:3b:8b:6b:e7:45:ba:3d:77:66:0f:
66:f1:4b:a4:76:71:98:53:3f:9c:8a:22:95:d5:bf:
b4:b9:4b:1b:c3:25:45:41:f5:d0:14:de:2f:e2:8e:
20:92:e4:49:1a:ef:bb:4b:cd:c6:95:f3:34:63:77:
94:c2:65:dd:07:04:52:5b:3f:ae:93:4e:b9:53:7a:
9f:cc:22:ca:95:bd:e8:3b:16:fd:a5:85:30:83:91:
b0:d4:71:2f:32:c4:aa:00:cd:a4:cf:08:00:4f:38:
9a:2e:dc:4f:7e:b6:2d:02:49:7e:cd:fb:2e:e2:60:
34:b8:2f:4f:be:06:13:80:2f:e4:8c:8e:1b:ff:9f:
8b:2d:ad:7b:fd:9f:4e:9c:a8:02:85:3e:89:03:d6:
c1:ea:bf:07:ea:eb:d2:34:8f:dd:69:c2:ce:64:94:
ca:81:5a:01:0b:9a:23:e8:14:0a:5e:2c:95:51:0d:
b4:d5:2c:8c:40:8c:65:da:78:c6:d5:61:8c:56:40:
11:52:dc:2d:1c:e3:76:97:24:79:dc:1f:5f:6e:c6:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1D:EB:81:E1:F9:C2:41:EB:B8:96:EB:44:5E:CB:E9:1B:6C:49:4D
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/Hx3rgeH5wkHruJbrRF7L6RtsSU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a8:33:12:26:c4:75:fc:9c:d7:86:c4:66:ad:7b:86:94:f5:
bb:7c:1f:c2:ec:cc:8c:ee:e5:50:93:db:70:a1:ba:b6:56:e6:
b9:c4:06:02:f2:8a:1a:95:d9:6f:91:e1:31:ca:bc:b1:09:1c:
f8:9f:3c:8a:3e:04:fc:50:d3:8e:b5:24:32:3b:f6:6e:c2:e0:
c0:77:b4:d1:03:23:38:bc:ba:a1:9c:87:a5:c8:6e:db:79:a1:
55:30:8c:b6:17:6b:69:ab:44:08:51:c4:46:b8:de:15:9d:32:
66:55:3b:d4:43:b0:98:12:e0:6e:ab:c4:52:c0:9f:48:a1:03:
70:2d:9b:89:96:d9:d7:31:79:54:a9:b3:9a:84:93:b0:92:de:
fb:bf:8d:08:2c:cf:30:75:f4:a7:d3:4d:51:b3:88:aa:28:e1:
75:08:5a:df:bd:f1:ed:03:3f:0d:c8:09:76:b5:cc:fd:c7:84:
79:26:ee:e1:5f:f9:9c:0d:9c:2a:07:76:20:53:90:93:f1:99:
c9:5f:aa:c7:e2:e6:ac:59:b9:cc:dd:b9:22:06:ec:40:b3:3d:
62:8d:4d:46:46:63:c1:54:e8:e4:7a:cd:2f:b6:5a:15:4c:bd:
b6:d6:90:24:d5:58:19:66:60:55:5c:cb:f7:87:32:15:13:68:
9b:f4:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:18 2025 by rpki-client