Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/hwa5xbgP08TO46VEs3-lcbjgnI8.roa
File: hwa5xbgP08TO46VEs3-lcbjgnI8.roa (raw, json)
Hash identifier: xkitIVQV6nkfxblAwfu84sWOad3Px4rWB8L2FQ2OYsg=
Subject key identifier: 87:06:B9:C5:B8:0F:D3:C4:CE:E3:A5:44:B3:7F:A5:71:B8:E0:9C:8F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D1D7E97266BA3E0B06F7617124A4CB9B2
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/hwa5xbgP08TO46VEs3-lcbjgnI8.roa
Signing time: Thu 18 Jan 2024 16:54:11 +0000
ROA not before: Thu 18 Jan 2024 16:54:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/20 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.168.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
94.74.190.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 12:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:7e:97:26:6b:a3:e0:b0:6f:76:17:12:4a:4c:b9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 18 16:54:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8706b9c5b80fd3c4cee3a544b37fa571b8e09c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:29:30:86:48:ad:cd:8d:c8:11:ca:51:f0:
08:25:ca:8b:70:1e:32:41:f7:73:bf:30:31:f6:55:
8a:80:8c:b0:3a:92:d6:a2:e9:3d:24:02:31:e0:64:
87:84:46:af:ca:50:ff:4a:29:59:03:6b:7d:15:f6:
9e:0a:91:95:cb:4c:81:74:a3:40:f4:52:6f:35:9e:
f8:a4:6d:7f:be:a9:d7:3c:e9:61:8b:26:80:bc:b8:
76:5a:0d:a0:c8:df:cd:2f:1f:90:4a:43:e7:a1:29:
bb:40:3a:82:98:fb:8f:c2:af:5a:84:5f:f7:4b:a7:
e1:67:85:15:23:a1:3c:20:69:3a:88:27:48:48:59:
09:b8:c3:d8:ee:e6:4a:7c:16:cb:27:aa:07:82:49:
b7:67:5a:60:54:f9:e9:18:10:94:32:bf:55:7b:21:
02:d6:c7:44:41:a1:0c:99:71:40:2e:e7:49:d7:53:
d4:9d:e9:79:e7:17:07:dd:2a:1d:8c:49:eb:1b:2e:
fe:4e:eb:fa:d6:94:74:f6:3a:72:d7:0a:ae:68:7c:
74:20:63:12:b7:8c:08:29:c0:46:07:09:3c:4c:4e:
87:df:2e:5b:96:a2:cd:6a:40:19:c4:41:40:0d:5d:
5c:8d:d3:c1:43:8b:60:23:b8:69:ff:85:cc:e4:01:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:B9:C5:B8:0F:D3:C4:CE:E3:A5:44:B3:7F:A5:71:B8:E0:9C:8F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/hwa5xbgP08TO46VEs3-lcbjgnI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.145.0-37.49.147.255
94.74.128.0/18
109.203.161.0/24
109.203.164.0/24
176.46.129.0-176.46.130.255
176.46.133.0-176.46.135.255
Signature Algorithm: sha256WithRSAEncryption
4e:ac:64:d9:26:1c:ca:a0:5a:f7:d8:96:71:cb:70:83:84:df:
79:1c:a9:8f:b3:60:d9:6a:4e:10:e2:c1:d6:fb:4b:30:3a:ef:
fc:62:2c:b8:1c:a5:a8:75:39:4e:c7:8b:c3:0a:dc:4c:f0:de:
78:e3:63:27:8f:db:4f:8c:5a:0b:44:54:e8:aa:33:35:1c:34:
1a:fc:f1:5e:b2:b2:72:fd:b8:da:dc:3d:9b:91:ab:70:3b:22:
21:93:c4:55:cc:19:f6:09:0e:8e:3a:2a:8f:21:04:b7:a1:e3:
97:37:d3:63:ca:27:cc:a9:9e:d9:05:7b:de:71:f7:f2:81:02:
86:b8:69:3b:48:42:9b:45:06:db:c5:0d:ba:e0:cc:cb:be:16:
bf:c2:b6:6f:2e:d1:76:cd:29:4a:5f:99:78:19:d0:3e:ae:53:
f1:5c:e3:8c:56:6e:08:ad:3c:d5:69:3e:5d:2d:3a:eb:86:16:
c4:82:d9:c2:97:1c:0f:69:a3:b7:6f:00:ef:95:26:9a:ae:8b:
19:d4:0e:6a:12:e6:04:c8:25:9a:96:44:56:c3:31:e8:55:b1:
51:f8:fd:53:c5:9d:8c:21:c6:a3:08:3c:5c:66:9d:e8:4f:22:
91:8e:e3:c7:9b:c1:cb:04:b0:42:18:a1:f2:fd:a1:24:ca:01:
d2:54:7b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:40 2025 by rpki-client