Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/hQwJnlC67mTudSNyzrX49Lss3uA.roa
File: hQwJnlC67mTudSNyzrX49Lss3uA.roa (raw, json)
Hash identifier: H+ojcUpWtI3K1NsXXOJktiubgKOtNU5lsWn/d3ZiNYk=
Subject key identifier: 85:0C:09:9E:50:BA:EE:64:EE:75:23:72:CE:B5:F8:F4:BB:2C:DE:E0
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 018D3B73F5327A00E7B4247332B8086E6BB2
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/hQwJnlC67mTudSNyzrX49Lss3uA.roa
Signing time: Wed 24 Jan 2024 12:31:11 +0000
ROA not before: Wed 24 Jan 2024 12:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58007
IP address blocks: 82.117.245.0/24 maxlen: 24
95.141.249.0/24 maxlen: 24
194.8.28.0/24 maxlen: 24
2a13:4380::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Feb 2024 22:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:73:f5:32:7a:00:e7:b4:24:73:32:b8:08:6e:6b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Jan 24 12:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=850c099e50baee64ee752372ceb5f8f4bb2cdee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:82:5a:17:d2:55:59:c7:d5:83:e7:cb:cb:
e1:0e:38:b3:50:75:0d:49:63:3e:44:f9:38:ed:5b:
59:94:69:e8:6c:8e:c8:3c:1a:f5:a5:11:f8:11:58:
cb:f6:8f:27:e8:0d:38:44:86:d7:2c:58:38:92:0a:
74:df:b6:e1:fe:a1:36:2f:4b:fe:6a:19:ed:18:db:
82:b3:97:82:d3:47:9d:e8:21:19:b0:d2:5e:b1:0e:
b5:11:7f:2e:6f:cc:b9:18:69:e6:ef:05:ce:5d:c7:
f6:e6:59:52:62:ad:5b:ab:ef:22:ca:c8:23:ab:f7:
c0:d7:d0:87:1e:3c:11:d3:ca:7f:0f:ac:ba:1b:4a:
da:b8:d9:92:96:50:fc:43:8d:d9:a0:2e:6d:45:b4:
c6:cb:ca:4d:c1:b8:8d:bc:6e:b0:cc:d6:7b:1b:dd:
6f:9c:50:76:6a:8f:c7:75:9b:4e:9e:63:bd:f2:3b:
37:4d:08:4e:0b:20:c7:57:8a:19:f4:1a:16:87:22:
d6:48:4f:d1:4a:8c:3f:2b:f5:62:0c:34:1c:20:55:
8e:dc:84:9e:e4:83:34:76:73:a3:ef:c9:a9:dd:52:
ea:c8:39:f6:ef:8f:44:fc:3f:54:e6:f3:25:fd:8b:
ac:6b:af:41:2b:31:f3:10:df:df:58:4e:a2:22:67:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:09:9E:50:BA:EE:64:EE:75:23:72:CE:B5:F8:F4:BB:2C:DE:E0
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/hQwJnlC67mTudSNyzrX49Lss3uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.245.0/24
95.141.249.0/24
194.8.28.0/24
IPv6:
2a13:4380::/32
Signature Algorithm: sha256WithRSAEncryption
54:62:9d:ce:25:00:2b:71:4f:cd:49:be:5b:5d:97:6d:13:b6:
5d:06:39:88:18:6d:af:5b:5c:20:63:fd:b2:fb:80:88:ca:a7:
c3:27:b8:1f:de:88:66:c8:59:86:c0:4f:5f:d7:ad:15:71:ac:
39:bc:39:51:30:9a:da:0c:1d:75:57:19:f0:43:25:bc:83:41:
1b:0c:92:ad:5d:e0:86:15:59:d0:b6:d1:a6:bb:f5:43:15:6f:
6f:e6:49:02:7f:66:db:42:5e:da:6a:a7:70:77:00:88:11:4d:
8d:20:8b:32:25:d3:1c:bc:0a:7b:c8:f0:e0:d5:e3:21:57:79:
79:f8:e9:d4:b9:1a:14:7c:a1:13:1a:5a:14:6d:00:45:f1:1f:
7a:0f:65:ca:8e:c7:d8:28:2c:01:42:10:64:bb:1a:48:2a:8f:
c4:8c:14:6e:10:d9:0e:1a:fa:9f:03:ca:20:3b:2a:4b:e8:bc:
89:10:87:b5:47:08:f3:56:44:8c:fc:fb:31:b8:47:11:41:d1:
91:38:0d:28:9d:b7:ea:fa:73:9f:78:84:aa:68:88:66:51:96:
ed:0c:ff:d0:d4:d2:d8:d2:2b:4c:67:24:9f:6f:53:a3:b3:54:
01:ee:78:97:80:0f:c9:70:69:e2:3a:32:5d:c7:5d:9e:bf:e2:
8c:06:da:1f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY07c/UyegDntCRzMrgIbmuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl
YzJkNjgwHhcNMjQwMTI0MTIzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTBjMDk5ZTUwYmFlZTY0ZWU3NTIzNzJjZWI1ZjhmNGJiMmNkZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3WCWhfSVVnH1YPny8vhDjizUHUN
SWM+RPk47VtZlGnobI7IPBr1pRH4EVjL9o8n6A04RIbXLFg4kgp037bh/qE2L0v+
ahntGNuCs5eC00ed6CEZsNJesQ61EX8ub8y5GGnm7wXOXcf25llSYq1bq+8iysgj
q/fA19CHHjwR08p/D6y6G0rauNmSllD8Q43ZoC5tRbTGy8pNwbiNvG6wzNZ7G91v
nFB2ao/HdZtOnmO98js3TQhOCyDHV4oZ9BoWhyLWSE/RSow/K/ViDDQcIFWO3ISe
5IM0dnOj78mp3VLqyDn2749E/D9U5vMl/Yusa69BKzHzEN/fWE6iIme48wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFIUMCZ5Quu5k7nUjcs61+PS7LN7gMB8GA1UdIwQY
MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt
NmJiYjI3MDgxZGUyLzEvaFF3Sm5sQzY3bVR1ZFNOeXpyWDQ5THNzM3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy
LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUnX1AwQA
X435AwQAwggcMA0EAgACMAcDBQAqE0OAMA0GCSqGSIb3DQEBCwUAA4IBAQBUYp3O
JQArcU/NSb5bXZdtE7ZdBjmIGG2vW1wgY/2y+4CIyqfDJ7gf3ohmyFmGwE9f160V
caw5vDlRMJraDB11VxnwQyW8g0EbDJKtXeCGFVnQttGmu/VDFW9v5kkCf2bbQl7a
aqdwdwCIEU2NIIsyJdMcvAp7yPDg1eMhV3l5+OnUuRoUfKETGloUbQBF8R96D2XK
jsfYKCwBQhBkuxpIKo/EjBRuENkOGvqfA8ogOypL6LyJEIe1RwjzVkSM/PsxuEcR
QdGROA0onbfq+nOfeISqaIhmUZbtDP/Q1NLY0itMZySfb1Ojs1QB7niXgA/JcGni
OjJdx12ev+KMBtof
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:15:47 2025 by rpki-client