Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/hggSs-Dv4JViSyiI9ElfpI6bGZ8.roa
File: hggSs-Dv4JViSyiI9ElfpI6bGZ8.roa (raw, json)
Hash identifier: bVYKf2E+9cgiJhYnvle2AMm9tGz65ceWgGCINMXdAYk=
Subject key identifier: 86:08:12:B3:E0:EF:E0:95:62:4B:28:88:F4:49:5F:A4:8E:9B:19:9F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A858F853B54349544E94EEBE46E0
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/hggSs-Dv4JViSyiI9ElfpI6bGZ8.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214785
IP address blocks: 45.134.144.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
103.211.100.0/24 maxlen: 24
103.211.102.0/24 maxlen: 24
185.245.1.0/24 maxlen: 24
185.245.2.0/24 maxlen: 24
194.120.164.0/24 maxlen: 24
194.145.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 02:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a8:58:f8:53:b5:43:49:54:4e:94:ee:be:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=860812b3e0efe095624b2888f4495fa48e9b199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:71:33:18:73:b1:41:32:45:c3:d7:ec:b8:
29:21:97:10:77:14:4a:f1:b7:e8:7b:58:98:c0:59:
87:33:df:98:f3:8f:00:8b:ea:ce:ac:c4:69:b8:8e:
58:9d:e5:73:1e:91:fc:e5:6a:3b:8e:2c:5b:3f:75:
d5:b2:20:16:1c:66:c1:74:af:8e:e7:24:7f:00:da:
5d:1a:1f:a2:65:3f:3b:0c:fe:c5:f4:d1:03:89:4a:
73:4e:8e:81:d1:b7:63:ff:53:cd:26:c7:5d:31:84:
c2:73:7d:a3:1e:a0:78:50:95:0b:b2:92:eb:62:b0:
d9:fe:7c:01:27:5f:74:ba:3b:93:e3:fc:23:bf:18:
d9:65:7c:fc:c6:c5:f9:35:be:5c:37:27:e2:8a:35:
f8:25:79:e2:19:d2:6b:b7:21:60:e1:c8:71:1f:9b:
8e:51:41:cb:99:5e:ff:dc:ab:aa:be:d5:4c:ce:9a:
73:21:bd:76:ac:cf:28:d5:c5:a8:03:64:ea:fe:b6:
92:17:18:12:70:3e:e7:7d:f0:9c:40:f9:1c:61:33:
4b:b6:39:d7:09:e2:8b:8f:f3:46:78:28:fa:61:92:
d5:4d:50:03:f0:77:be:0e:80:45:c3:03:b8:5d:0a:
68:85:1b:e1:44:79:d2:79:65:67:d5:d3:81:1c:77:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:12:B3:E0:EF:E0:95:62:4B:28:88:F4:49:5F:A4:8E:9B:19:9F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/hggSs-Dv4JViSyiI9ElfpI6bGZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
45.155.224.0/24
103.211.100.0/24
103.211.102.0/24
185.245.1.0-185.245.2.255
194.120.164.0/24
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ae:b7:b5:55:b6:7c:92:47:8a:29:4d:7d:c9:68:05:a0:a1:
4a:65:80:56:49:01:1d:4d:d1:b0:7d:e8:e3:49:d2:b6:6a:d5:
b5:d9:8f:26:0d:cb:92:e4:07:02:db:c2:13:66:d8:57:12:75:
cf:c0:f7:1b:31:b5:46:b1:c4:ff:df:85:79:20:57:52:01:56:
5f:eb:f8:1a:c4:16:7c:4f:92:7e:32:6b:24:8f:8c:71:3c:78:
0d:27:09:8f:70:c6:aa:bd:6d:2a:8b:d6:5a:29:4a:35:12:9a:
37:00:0a:25:15:80:34:74:5a:93:23:e8:62:7e:64:a9:37:b9:
c3:9d:5f:98:6c:97:48:c4:61:a0:32:9f:e4:38:b2:24:2c:41:
c4:0d:77:5b:b1:6f:3c:ba:cf:80:5c:f3:5f:3f:29:cd:b7:01:
df:be:62:a7:f4:25:40:14:e2:a1:ab:12:d5:5f:7a:dc:85:56:
86:e3:d9:0e:16:08:43:04:32:40:be:34:82:f8:bf:60:bd:55:
be:81:ad:55:9c:9b:b2:4b:3e:5d:69:6e:8a:8c:4b:4a:02:37:
3f:cf:ec:f6:94:30:00:c4:57:3d:a5:66:69:46:2d:7a:89:d4:
65:d2:71:40:ae:95:38:21:2d:3a:60:2a:9e:90:6d:9e:56:33:
fd:06:6a:86
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQks6hY+FO1Q0lUTpTuvkbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMTAyMDE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjA4MTJiM2UwZWZlMDk1NjI0YjI4ODhmNDQ5NWZhNDhlOWIxOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1NxMxhzsUEyRcPX7LgpIZcQdxRK
8bfoe1iYwFmHM9+Y848Ai+rOrMRpuI5YneVzHpH85Wo7jixbP3XVsiAWHGbBdK+O
5yR/ANpdGh+iZT87DP7F9NEDiUpzTo6B0bdj/1PNJsddMYTCc32jHqB4UJULspLr
YrDZ/nwBJ190ujuT4/wjvxjZZXz8xsX5Nb5cNyfiijX4JXniGdJrtyFg4chxH5uO
UUHLmV7/3KuqvtVMzppzIb12rM8o1cWoA2Tq/raSFxgScD7nffCcQPkcYTNLtjnX
CeKLj/NGeCj6YZLVTVAD8He+DoBFwwO4XQpohRvhRHnSeWVn1dOBHHfy/wIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFIYIErPg7+CVYksoiPRJX6SOmxmfMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvaGdnU3MtRHY0SlZpU3lpSTlFbGZwSTZiR1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALYaQAwQA
LZvgAwQAZ9NkAwQAZ9NmMAwDBAC59QEDBAC59QIDBADCeKQDBADCke0wDQYJKoZI
hvcNAQELBQADggEBACCut7VVtnySR4opTX3JaAWgoUplgFZJAR1N0bB96ONJ0rZq
1bXZjyYNy5LkBwLbwhNm2FcSdc/A9xsxtUaxxP/fhXkgV1IBVl/r+BrEFnxPkn4y
aySPjHE8eA0nCY9wxqq9bSqL1lopSjUSmjcACiUVgDR0WpMj6GJ+ZKk3ucOdX5hs
l0jEYaAyn+Q4siQsQcQNd1uxbzy6z4Bc818/Kc23Ad++Yqf0JUAU4qGrEtVfetyF
Vobj2Q4WCEMEMkC+NIL4v2C9Vb6BrVWcm7JLPl1pboqMS0oCNz/P7PaUMADEVz2l
ZmlGLXqJ1GXScUCulTghLTpgKp6QbZ5WM/0GaoY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:38:47 2025 by rpki-client