Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/HCdwrHyTxb1vAcUM6hOMtcJ0CrM.roa
File: HCdwrHyTxb1vAcUM6hOMtcJ0CrM.roa (raw, json)
Hash identifier: PiED8JbAChj/VREORDUS3oUfnWw7+kM5PtEHbbNkgdo=
Subject key identifier: 1C:27:70:AC:7C:93:C5:BD:6F:01:C5:0C:EA:13:8C:B5:C2:74:0A:B3
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 018CC6B8E50BC5DDA890E2BF6344E13A9520
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/HCdwrHyTxb1vAcUM6hOMtcJ0CrM.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39878
IP address blocks: 45.67.168.0/22 maxlen: 22
185.196.240.0/22 maxlen: 22
185.87.238.0/23 maxlen: 23
185.87.237.0/24 maxlen: 24
91.135.160.0/20 maxlen: 20
185.33.8.0/22 maxlen: 22
185.64.48.0/22 maxlen: 22
2a04:40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e5:0b:c5:dd:a8:90:e2:bf:63:44:e1:3a:95:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c2770ac7c93c5bd6f01c50cea138cb5c2740ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:45:9d:b8:2e:68:be:d0:6e:dc:dd:b5:00:
d2:4f:1a:c7:ce:53:2c:61:3e:5b:8a:22:4a:47:10:
73:67:74:e3:be:85:a0:78:ae:73:1c:d6:50:6a:90:
76:b3:e2:59:5c:eb:dd:9a:6e:bf:43:bd:5e:97:ce:
30:de:10:c7:83:b6:8e:12:d2:b7:07:5f:2f:f1:ee:
52:86:f4:a3:10:2a:39:ca:a3:2c:cb:d6:0a:d2:48:
fc:a0:89:3d:d0:bd:48:2b:2a:15:30:aa:6a:bb:3c:
75:e1:c0:96:19:b7:ba:f3:f3:02:bd:72:44:c5:d8:
4f:9e:5b:b8:18:c8:b9:cc:be:81:06:bc:d9:a5:ac:
83:77:8e:9b:6e:57:dc:e3:af:0e:b9:fb:e4:d1:b2:
09:f1:84:be:67:ca:9c:b7:0c:e2:93:19:31:c9:f4:
54:d6:84:3b:bc:a8:d2:a2:38:d5:8d:ce:56:a2:9b:
f9:a7:a1:42:57:1a:3f:f7:41:6d:0c:5d:bd:a9:19:
57:75:1c:de:eb:db:00:24:34:98:62:56:e0:6f:97:
20:d1:07:ff:c2:b2:98:37:1e:36:c5:86:8d:89:ae:
94:a6:a2:4f:b8:c0:96:dc:11:12:0a:4b:ae:44:c7:
e1:82:10:5d:84:fa:15:40:1d:06:da:a2:fd:d1:d1:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:70:AC:7C:93:C5:BD:6F:01:C5:0C:EA:13:8C:B5:C2:74:0A:B3
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/HCdwrHyTxb1vAcUM6hOMtcJ0CrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.168.0/22
91.135.160.0/20
185.33.8.0/22
185.64.48.0/22
185.87.237.0-185.87.239.255
185.196.240.0/22
IPv6:
2a04:40::/29
Signature Algorithm: sha256WithRSAEncryption
7f:d9:83:b8:fa:32:29:67:23:c3:d9:92:da:40:2d:40:0d:8f:
bf:cb:ef:00:90:46:f5:8f:2f:ef:90:4a:27:d1:a6:60:20:31:
17:f9:73:a1:d7:58:3a:78:c9:0c:93:a5:08:8f:86:bb:d2:1a:
5b:b2:46:1c:34:44:59:23:5e:b9:a7:08:c2:3d:a3:35:60:02:
c3:36:bd:ee:be:1b:d3:23:9b:e7:3b:b2:05:10:45:0c:0e:56:
7e:18:8b:94:af:4c:42:81:78:9d:3e:e6:ff:b3:c4:69:26:f1:
79:0b:b3:51:5c:67:54:44:82:7d:ad:4d:4b:fa:05:c1:78:a3:
a9:78:3b:08:d5:30:e1:9e:d1:8c:10:25:39:be:cc:e6:1e:4d:
f6:29:a2:2f:e9:8c:56:9f:02:21:8f:1a:8d:bd:1c:6d:34:64:
1b:ed:28:15:3c:e6:fd:3a:f7:48:e7:20:65:1e:1c:f6:73:a1:
e8:86:c7:e7:fa:f5:c0:46:63:3e:78:4c:5f:ca:64:a3:ec:69:
26:a3:b0:f5:86:d6:ae:2d:d0:08:7a:ad:5f:f8:58:0e:15:50:
6e:b1:21:29:88:56:ea:96:55:8e:42:62:02:37:98:89:af:91:
c6:18:c5:f0:2f:af:b9:d7:45:4c:7a:56:2c:3a:fd:8e:e1:6f:
55:2d:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:00 2025 by rpki-client