Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/HKpPAPmyLwgbcKyDk8MIx04UsdQ.roa
File: HKpPAPmyLwgbcKyDk8MIx04UsdQ.roa (raw, json)
Hash identifier: a/bAH6H6rRMt8NnMVOh1zntS/jkbJ6mVTDV6nBcWrr4=
Subject key identifier: 1C:AA:4F:00:F9:B2:2F:08:1B:70:AC:83:93:C3:08:C7:4E:14:B1:D4
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 018CC9BBBCBB45FC97E46F5CBA6CEFCEAD28
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/HKpPAPmyLwgbcKyDk8MIx04UsdQ.roa
Signing time: Tue 02 Jan 2024 10:32:53 +0000
ROA not before: Tue 02 Jan 2024 10:32:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57033
IP address blocks: 193.106.65.0/24 maxlen: 24
193.106.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 09:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:bc:bb:45:fc:97:e4:6f:5c:ba:6c:ef:ce:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 2 10:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1caa4f00f9b22f081b70ac8393c308c74e14b1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:1b:c3:59:1e:7d:c6:a0:0a:ed:06:a7:67:
ec:ce:b3:89:d7:96:60:27:03:aa:46:ce:07:24:9f:
82:72:87:7c:34:9f:6e:96:fa:78:bf:35:08:f1:ff:
b2:61:e3:a4:9e:15:3d:8c:4a:ea:5e:d8:57:cc:0a:
d8:71:79:d4:ac:be:22:3c:bb:bf:5d:c9:26:06:6d:
ea:ab:7f:33:56:42:2c:dd:28:c5:f7:f8:06:35:2d:
c9:42:fe:31:f9:3d:62:29:84:ef:f7:2d:7e:9b:a8:
1d:2d:e0:12:fa:e8:44:04:29:cc:62:7d:39:07:a3:
a0:14:cf:7e:23:4b:8e:bd:ec:6e:c7:3c:75:a2:b2:
3b:31:bd:f2:32:4e:62:1c:4e:96:07:dd:48:72:45:
5e:6a:76:15:e7:3f:45:68:62:58:bf:5e:04:96:01:
d5:95:e2:81:a4:b9:83:71:cc:0f:eb:ca:5a:93:4f:
55:37:1e:fd:85:dc:d2:00:c3:91:67:64:d0:09:37:
32:fd:6d:45:90:33:af:17:d9:dd:8e:05:c1:4f:e7:
6a:5e:c7:ee:4a:1f:8f:7b:c0:7b:df:e1:1b:a3:c8:
8e:40:33:dc:c1:46:18:c1:d8:9c:e0:23:cd:9e:88:
fe:38:2f:e3:2c:fc:1e:f4:0a:32:ce:d6:5a:7d:0c:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:4F:00:F9:B2:2F:08:1B:70:AC:83:93:C3:08:C7:4E:14:B1:D4
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/HKpPAPmyLwgbcKyDk8MIx04UsdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.65.0-193.106.66.255
Signature Algorithm: sha256WithRSAEncryption
3f:9c:29:f2:bf:85:50:0a:e1:8f:d6:26:fb:5b:71:13:5d:ca:
87:54:83:2e:0b:4a:4d:03:ce:fe:21:36:3b:d5:ca:89:c8:6e:
c1:b0:cb:7b:64:b5:32:b7:8f:98:e4:aa:ce:82:79:fe:ea:f3:
1e:c1:11:3b:5e:34:af:d4:b9:34:1b:d1:ed:09:eb:0c:9b:14:
99:d4:94:19:03:52:ad:f6:de:3e:c1:0a:20:63:0d:2e:d0:49:
49:48:a9:c7:89:d2:6a:96:8a:ac:32:dd:68:d0:36:13:b8:1d:
ff:f6:6c:ce:22:27:aa:f0:5c:26:43:e2:75:ce:ad:59:4e:27:
89:90:1b:79:5e:bc:db:94:74:6b:86:c4:07:b1:f1:21:0b:6a:
ce:bc:ea:6f:6e:5c:61:cd:6c:14:77:26:cf:d3:6d:3e:34:f4:
59:fb:ec:1c:09:3d:8a:82:05:f0:81:0b:22:78:59:38:e7:55:
a2:08:93:e5:a7:99:aa:60:df:af:69:f9:32:cb:4a:63:86:a6:
1e:ce:41:9f:49:f4:62:41:34:f3:42:5f:53:55:bb:b9:c1:cb:
2f:a3:9d:ad:a3:f2:a6:9e:1e:1c:81:81:0d:ff:f1:91:02:66:
23:1e:a4:32:cb:f9:fa:a5:6e:57:03:85:1f:51:1d:aa:55:46:
b9:9b:02:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:45 2025 by rpki-client