Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/hRuE6CyjU7nrCP6xo9mATidPVNs.roa
File: hRuE6CyjU7nrCP6xo9mATidPVNs.roa (raw, json)
Hash identifier: SJIR9J9Vm7QY5bHaqezRK9Ngblys18PV/WNQGLUes+E=
Subject key identifier: 85:1B:84:E8:2C:A3:53:B9:EB:08:FE:B1:A3:D9:80:4E:27:4F:54:DB
Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial: 018CCA99C3462B9EC633F78566966AD3517C
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/hRuE6CyjU7nrCP6xo9mATidPVNs.roa
Signing time: Tue 02 Jan 2024 14:35:23 +0000
ROA not before: Tue 02 Jan 2024 14:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202440
IP address blocks: 194.11.84.0/22 maxlen: 22
194.11.84.0/23 maxlen: 23
194.11.84.0/24 maxlen: 24
194.11.85.0/24 maxlen: 24
194.11.87.0/24 maxlen: 24
194.11.86.0/24 maxlen: 24
194.11.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:c3:46:2b:9e:c6:33:f7:85:66:96:6a:d3:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Validity
Not Before: Jan 2 14:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=851b84e82ca353b9eb08feb1a3d9804e274f54db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:db:06:4a:d2:95:bd:e8:e5:d0:c2:3a:84:
d5:44:89:4c:f6:c4:e3:b1:09:92:3f:2d:16:4e:0c:
4c:31:e1:a1:49:da:68:6c:ae:9f:3e:4f:a5:38:aa:
77:40:25:5c:94:cb:75:74:b0:cd:93:26:ac:9a:b4:
f3:9d:82:8c:1b:7f:7c:bb:0f:96:0a:6f:f8:bc:79:
4a:c8:86:24:2c:c4:e4:74:b1:1f:08:4f:c7:ba:b4:
50:ef:f1:30:0d:68:80:80:d3:3c:64:d0:d7:2e:a8:
97:e3:90:70:77:1a:62:9e:1c:f3:3f:01:23:a4:5e:
ed:3a:c5:1e:d6:17:1c:9f:61:dc:36:a3:46:c8:19:
dc:43:3e:1f:6e:f8:13:b5:4b:50:03:0d:d6:96:e6:
e8:70:80:a5:85:8e:02:2c:39:e6:40:e5:23:bf:c5:
ff:cd:e7:c1:d2:3d:ca:4a:ca:13:a2:aa:61:c1:a5:
db:22:d1:c4:26:ac:f4:36:66:07:71:20:3d:7f:6d:
bc:e1:15:db:fa:0f:bc:a1:bd:b7:25:57:48:c9:8d:
c3:f2:30:80:81:c9:56:65:14:08:1b:0a:4f:e5:91:
25:12:4d:b8:0e:db:cc:9d:06:ee:3f:a1:e5:69:8d:
16:32:53:7d:16:51:b5:38:44:1d:7a:66:86:e6:1d:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:84:E8:2C:A3:53:B9:EB:08:FE:B1:A3:D9:80:4E:27:4F:54:DB
X509v3 Authority Key Identifier:
keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/hRuE6CyjU7nrCP6xo9mATidPVNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ae:4d:15:ec:62:7b:9c:e6:56:a6:e0:7d:60:93:d5:c4:3a:
8a:19:80:73:c6:80:17:41:99:10:50:4f:ae:e0:1d:cf:99:b9:
c4:b6:43:fa:e1:a2:7b:2e:6b:de:ba:1a:8c:c8:c7:78:e4:9c:
57:28:5b:94:93:1d:92:b5:02:d9:a1:36:80:f6:d0:33:55:e5:
72:00:48:e9:dd:9c:94:6e:99:ba:be:e9:55:53:0c:a2:61:00:
12:ad:80:e2:a2:95:3d:49:f1:77:6d:8e:55:10:4a:74:ac:77:
be:ac:98:26:af:3e:0a:84:bb:d3:ea:a1:f3:ba:32:46:0d:83:
76:a3:f5:77:a4:76:32:f4:cc:18:b9:85:67:ae:1c:db:20:3f:
de:7a:79:8e:db:58:44:ac:22:c2:ed:63:5e:08:f3:40:62:7c:
f7:fe:17:53:59:fa:65:d1:f4:72:70:2b:8a:8e:ee:70:58:99:
6a:d9:ee:74:29:85:62:ec:99:14:30:a5:ae:50:f7:15:3c:3c:
79:6e:e8:7f:80:d4:f6:0c:c8:06:4a:b8:eb:4f:41:4f:e0:f2:
ed:8e:bd:87:20:2f:7d:47:29:37:05:06:44:01:98:ea:6a:b9:
00:4b:26:a4:aa:66:f2:a2:6c:ea:7e:7b:d6:50:da:08:9b:31:
9a:f6:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:47 2025 by rpki-client