Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/HNm5mZkTa1UJwJk6b_4Wr-VRgtc.roa
File: HNm5mZkTa1UJwJk6b_4Wr-VRgtc.roa (raw, json)
Hash identifier: NbcIx/PZQZ4LeWX/bvGYAt9uodXoEGKvcE8kdzB9yYI=
Subject key identifier: 1C:D9:B9:99:99:13:6B:55:09:C0:99:3A:6F:FE:16:AF:E5:51:82:D7
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 018D5ABF419F6889F3BD208E68AE50BB1685
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/HNm5mZkTa1UJwJk6b_4Wr-VRgtc.roa
Signing time: Tue 30 Jan 2024 14:21:39 +0000
ROA not before: Tue 30 Jan 2024 14:21:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206636
IP address blocks: 185.179.96.0/22 maxlen: 22
2a14:5e80::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:bf:41:9f:68:89:f3:bd:20:8e:68:ae:50:bb:16:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Jan 30 14:21:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cd9b99999136b5509c0993a6ffe16afe55182d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:e1:8e:29:9d:29:f3:62:b2:28:a1:04:1d:
3a:cf:61:0c:2a:4a:f9:7e:c4:dc:a7:5c:73:1c:5d:
40:d5:a5:88:f3:86:42:c9:e6:dc:29:24:f7:3b:29:
f2:51:0c:69:07:ec:ff:28:59:8a:cd:11:34:9d:01:
fd:0d:93:cc:e7:83:57:5c:88:aa:2b:f9:9b:7b:84:
e4:f8:65:d3:5e:64:a3:6b:e6:e4:70:d3:5b:73:81:
35:65:48:b6:f1:99:8b:28:9d:c2:2a:aa:2e:33:e8:
af:bd:95:3e:dc:cb:99:44:4e:66:61:0b:92:f4:b1:
d2:2b:f5:32:37:c5:02:ff:83:3a:34:4e:c9:6c:38:
49:96:d6:97:7b:5f:ec:8f:79:59:d8:a1:72:c1:19:
c4:fd:8a:4e:9f:15:15:57:13:fc:54:9e:25:c4:81:
26:d6:38:b9:a2:ad:7e:31:76:87:c1:f7:16:cd:18:
cc:df:95:a9:ea:cc:1a:ad:5c:aa:61:c1:31:5e:c6:
12:c7:8b:54:ff:30:3d:99:39:89:94:6a:fa:df:d3:
b5:3c:c3:46:c3:2f:15:f5:61:b9:a9:0c:05:50:0d:
a9:7f:a7:de:b2:de:d5:03:6d:ba:d8:40:97:8c:a5:
df:36:08:b2:a3:46:68:66:6c:23:26:76:49:65:b4:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:B9:99:99:13:6B:55:09:C0:99:3A:6F:FE:16:AF:E5:51:82:D7
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/HNm5mZkTa1UJwJk6b_4Wr-VRgtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.96.0/22
IPv6:
2a14:5e80::/32
Signature Algorithm: sha256WithRSAEncryption
85:2c:7b:d9:1b:0f:c2:cd:6e:b5:fd:83:db:d5:4f:04:cf:a9:
1d:77:74:62:ab:0f:15:2e:ce:7e:b5:e7:e4:15:d1:d9:c3:62:
34:8e:67:8b:82:61:cd:7d:47:56:45:48:34:4b:18:cd:4a:a5:
f9:30:16:f3:93:d6:60:19:c2:c0:7c:c6:b4:e8:1f:7b:b3:79:
99:89:fb:c3:3a:99:43:07:77:7c:b5:08:ff:af:a3:35:cd:15:
cd:99:73:77:27:91:a6:22:ec:98:dc:e4:38:ac:62:7d:cd:fe:
91:d3:1a:cf:ac:67:de:60:1f:26:7f:7e:11:ac:c0:95:51:72:
76:0a:cf:4a:ee:84:33:24:5b:67:e0:21:6e:68:38:e9:9c:13:
d4:cc:63:d0:66:51:5a:0c:fb:46:24:6c:56:16:a2:d7:a2:86:
ea:5a:1c:69:03:eb:29:e9:9e:bc:eb:7c:88:6a:17:24:1e:a0:
b1:ab:b5:01:f5:af:b8:44:04:96:ba:42:4c:91:1f:a3:bc:7e:
87:e0:cb:d0:a2:08:42:fa:c7:25:2d:91:2b:fa:91:e8:ba:67:
ef:fa:25:b1:71:e9:b5:03:60:a1:87:24:9e:55:0e:59:7d:88:
51:85:2e:96:cb:62:9d:c8:f6:63:30:64:54:e9:64:88:13:41:
0c:20:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:55:37 2025 by rpki-client