Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/HCLdU_HfM0bW9ONYN9G91eU6Poc.roa
File: HCLdU_HfM0bW9ONYN9G91eU6Poc.roa (raw, json)
Hash identifier: nBmqwm2LnqwHpcIAkp3gVISW8lbkiXpKQwEv3/SNeGQ=
Subject key identifier: 1C:22:DD:53:F1:DF:33:46:D6:F4:E3:58:37:D1:BD:D5:E5:3A:3E:87
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 0195B2528F0C60D30164A103ACF615B203FB
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/HCLdU_HfM0bW9ONYN9G91eU6Poc.roa
Signing time: Thu 20 Mar 2025 06:51:49 +0000
ROA not before: Thu 20 Mar 2025 06:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212315
IP address blocks: 194.164.239.0/24 maxlen: 24
195.200.23.0/24 maxlen: 24
2a14:2040::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:52:8f:0c:60:d3:01:64:a1:03:ac:f6:15:b2:03:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Mar 20 06:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c22dd53f1df3346d6f4e35837d1bdd5e53a3e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:6e:aa:36:b2:e4:e8:c8:8f:88:da:88:98:
08:a4:86:23:cb:7f:51:18:7d:05:18:da:49:05:41:
2d:b5:05:47:8c:24:9e:68:28:a9:c5:41:c8:b2:94:
ae:23:39:56:bb:c2:f6:8e:67:92:91:b3:c1:b0:71:
27:c5:09:27:e5:5c:f0:47:5b:2e:76:51:36:a7:0b:
04:b7:89:e1:75:20:f4:8e:b9:1a:1c:2f:9e:e0:60:
7a:05:56:08:33:d0:e9:f5:f1:88:c7:ea:e2:38:5e:
d4:0f:b2:7f:1f:7f:16:c6:11:7b:69:09:5d:2a:1e:
cb:c3:02:f5:08:49:9c:43:07:91:83:dd:b3:7b:bf:
96:cf:88:d4:e2:78:ac:2e:57:08:a5:fd:c1:18:97:
fc:63:94:ff:2e:06:8c:73:a3:02:40:76:a5:db:48:
f0:55:18:68:72:4d:3b:50:49:b4:73:a2:14:73:dc:
44:c1:0f:46:c8:b5:21:26:a0:17:d0:50:d9:84:68:
6c:10:71:33:a2:d6:34:d4:1c:12:1d:32:5d:3a:3c:
e9:82:68:55:ad:00:52:3c:33:46:c1:55:a3:03:65:
c6:34:5e:61:f4:c8:55:41:b2:8f:bb:96:0e:23:1b:
54:d5:f2:09:38:f1:c6:63:39:08:07:89:da:31:bf:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:DD:53:F1:DF:33:46:D6:F4:E3:58:37:D1:BD:D5:E5:3A:3E:87
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/HCLdU_HfM0bW9ONYN9G91eU6Poc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.239.0/24
195.200.23.0/24
IPv6:
2a14:2040::/29
Signature Algorithm: sha256WithRSAEncryption
60:4e:51:9a:4e:80:93:69:92:a2:74:6c:46:fd:3c:af:23:01:
6b:7e:b4:df:47:b6:f7:f8:fe:f5:fa:ea:ce:a3:24:0f:a4:12:
fb:d5:43:c9:45:6c:3f:14:39:aa:a7:b8:6e:63:d9:c8:44:fc:
ee:f0:fe:2f:75:50:c7:1e:5a:1c:84:77:82:3f:12:36:78:89:
b2:a7:85:3f:19:80:20:14:1a:a6:19:cb:9e:79:52:72:47:41:
6c:f8:3b:16:de:8f:ab:ed:e9:ab:d1:a9:fa:6a:15:f9:4b:cf:
90:be:ca:4b:b0:c8:bb:d9:ca:92:c7:26:18:bc:4e:e7:be:a8:
03:1e:33:cb:ee:cf:58:f7:0a:16:7e:e0:dc:74:e3:f5:00:4a:
00:bd:25:51:6a:bd:78:5f:68:d7:44:d2:db:14:d6:3f:f5:2d:
66:47:63:4a:47:44:d0:fa:27:89:20:7e:a1:59:c8:68:1e:d4:
d8:c7:26:28:53:8d:f8:88:1e:8d:31:dd:c8:73:27:c8:03:06:
bb:26:a4:62:aa:07:52:32:e0:7f:9b:d7:10:1c:86:13:1b:fc:
87:ec:9c:74:89:db:f1:f1:9d:f4:2e:9d:3a:d7:24:ad:2e:07:
2b:67:39:a8:2f:04:d1:8f:d8:58:f6:b6:7e:8a:f1:59:70:41:
a1:34:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:23 2025 by rpki-client