Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/hGJIpQ_U6rHzdBbxdxCRU3EKi9s.roa
File: hGJIpQ_U6rHzdBbxdxCRU3EKi9s.roa (raw, json)
Hash identifier: 56yTkpbvqtLAss4FJPnWOdXbzn0GLqt8NeXdn1/I+/c=
Subject key identifier: 84:62:48:A5:0F:D4:EA:B1:F3:74:16:F1:77:10:91:53:71:0A:8B:DB
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 018CC4938522F03ABEC4F4F375460AE14D2D
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/hGJIpQ_U6rHzdBbxdxCRU3EKi9s.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3308
IP address blocks: 195.110.16.0/24 maxlen: 24
195.110.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:85:22:f0:3a:be:c4:f4:f3:75:46:0a:e1:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=846248a50fd4eab1f37416f177109153710a8bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:8c:a5:8d:b7:e3:e2:c4:19:21:3d:e7:d1:
68:50:6b:4b:c5:4d:23:47:36:20:23:30:71:2d:1c:
bd:94:68:07:cc:37:7e:46:92:b3:c0:f0:65:b7:7b:
5e:2b:28:d4:16:12:f1:11:e6:80:8c:f7:08:d7:db:
ee:7c:5c:ae:62:47:cb:f1:be:5b:8c:f3:6e:ea:c8:
df:43:4a:fc:6a:7b:1e:e1:04:6f:db:ed:2f:31:9f:
83:2b:5e:be:f6:56:e0:b9:28:6a:7f:d3:7d:fc:91:
5a:73:aa:05:6c:91:ef:f3:98:86:6b:d2:ae:f6:7e:
4f:ec:a1:93:50:09:2e:c5:68:92:83:51:3b:3a:12:
a6:c8:ac:d9:4f:24:13:4a:07:51:d3:8a:32:7d:4b:
e0:c5:d8:ee:e6:89:39:8b:7d:ee:56:8e:6d:b8:26:
9d:5a:fa:01:fc:da:e7:c2:2a:8c:12:a7:02:19:0c:
fd:40:1e:95:3d:36:47:5e:42:fa:4e:02:06:59:7f:
e4:c8:dd:c8:5b:32:c7:0d:46:27:4f:f4:94:06:bb:
fc:20:95:30:9d:ff:88:7a:11:0f:dc:04:27:b1:9e:
72:af:fb:90:12:96:17:ad:ec:1d:ed:7a:9b:ce:c2:
65:cc:57:b0:10:44:be:ba:73:c4:8e:da:3a:dc:bf:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:48:A5:0F:D4:EA:B1:F3:74:16:F1:77:10:91:53:71:0A:8B:DB
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/hGJIpQ_U6rHzdBbxdxCRU3EKi9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.16.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:0d:b0:11:2c:df:54:0c:f3:69:24:62:83:57:24:8d:38:39:
cd:57:41:23:e0:4d:f0:cb:bc:d6:e6:c2:bc:4a:6b:e2:72:6f:
01:9f:e3:9c:ad:48:a9:88:cf:44:6c:71:98:10:ea:93:f1:4e:
af:a1:b4:e2:92:2d:80:4f:86:b3:fa:b6:3d:75:e8:a1:61:e5:
8a:d7:8d:34:24:8c:eb:a0:eb:29:c5:25:58:64:61:0d:4a:81:
74:3e:7a:29:24:ee:30:58:86:a9:f8:eb:4e:09:d8:bf:b5:a0:
8e:84:41:de:db:c2:75:b2:da:9e:ad:f1:40:4a:d7:4e:77:9c:
e7:f7:58:e8:ad:0e:46:48:60:5d:4b:59:3e:6b:1a:f1:e0:f8:
80:69:61:5c:01:e5:3d:97:61:f8:7e:19:16:41:95:82:fd:61:
50:13:54:f0:87:92:62:79:96:f2:74:27:c5:20:76:1f:0c:06:
8c:d4:b4:9c:d6:e3:06:bc:87:51:4f:8f:ea:3a:87:64:25:1e:
37:68:54:76:a4:4c:26:4c:fc:93:c9:87:65:a5:3f:d7:72:02:
fa:62:86:f4:41:44:cf:f8:9d:ed:f7:98:2a:52:7f:3f:46:ec:
49:e8:d0:5c:f8:dd:d4:ca:c3:b7:a2:ca:13:e0:da:9a:e2:33:
df:c6:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:28 2025 by rpki-client