Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HRL8qBwLjSIk7umWp858w3SwmSk.roa
File: HRL8qBwLjSIk7umWp858w3SwmSk.roa (raw, json)
Hash identifier: 2WQmA44GENI/x1w/1EuUA++4gd2ptTU7POsX/+e13Ag=
Subject key identifier: 1D:12:FC:A8:1C:0B:8D:22:24:EE:E9:96:A7:CE:7C:C3:74:B0:99:29
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019263A71B8AD9277BBB92493AE6FA4DF4FF
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HRL8qBwLjSIk7umWp858w3SwmSk.roa
Signing time: Sun 06 Oct 2024 21:05:48 +0000
ROA not before: Sun 06 Oct 2024 21:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 176.221.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 27 Oct 2024 03:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:63:a7:1b:8a:d9:27:7b:bb:92:49:3a:e6:fa:4d:f4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 6 21:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d12fca81c0b8d2224eee996a7ce7cc374b09929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:85:19:ef:82:dd:da:01:99:1c:81:a5:28:
f9:76:c0:e6:03:4e:31:3f:f2:31:71:40:21:bc:f7:
e8:3f:45:d5:80:a7:26:f4:ab:0f:67:79:f7:1f:ac:
73:4b:63:f6:25:95:8a:23:98:e8:41:8e:74:99:47:
b9:ae:94:da:48:c0:1f:90:8f:cd:ea:5b:75:d6:da:
94:d2:8b:f8:4c:46:28:f2:b6:93:a8:ff:50:1b:a2:
b3:8e:71:18:be:a5:c1:08:44:bb:3a:b4:26:be:14:
11:ec:e7:b4:9b:63:84:c8:69:41:6f:3b:72:79:90:
fa:18:b4:4c:e6:4e:ad:04:ae:1e:38:15:b8:ad:a1:
e8:68:80:46:bd:81:d3:f6:6a:da:c4:f8:c9:07:4b:
71:ed:6c:03:a4:d5:f5:fe:80:75:1d:36:57:53:0c:
b7:c8:ef:97:23:55:e9:38:92:08:8c:64:a6:d0:96:
a1:5a:b7:2e:0b:e4:b9:79:7e:ef:07:1b:a5:55:00:
6c:14:81:a9:40:58:9e:38:4b:ef:fe:ec:6a:ea:fb:
94:95:6b:a2:80:a5:06:3f:03:a7:f8:07:e8:90:8e:
07:2c:51:71:6f:5e:a4:a1:93:35:41:c1:97:d8:e0:
f9:b0:28:36:38:e5:34:8d:35:9a:4b:d1:82:62:9c:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:FC:A8:1C:0B:8D:22:24:EE:E9:96:A7:CE:7C:C3:74:B0:99:29
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/HRL8qBwLjSIk7umWp858w3SwmSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.26.0/23
Signature Algorithm: sha256WithRSAEncryption
96:b9:3b:a2:ac:41:73:5a:fe:01:3a:6a:b9:5f:25:29:35:47:
08:b8:f8:1a:b4:a1:18:d6:8c:82:13:46:79:4c:5e:02:a6:e0:
9e:09:58:c5:9b:38:a5:db:14:a9:b3:2f:5a:29:2a:f1:a6:f5:
d2:10:db:f0:69:00:68:c8:2e:e8:20:c3:a0:c2:17:7b:a9:65:
65:10:99:49:a3:a9:04:14:2f:b4:8c:4d:58:8c:80:71:6f:38:
83:2a:45:dd:d9:49:e4:f6:0e:d5:9f:27:f6:0c:58:af:92:b5:
70:6b:ce:24:ba:a0:47:2b:b8:36:b8:a8:95:2b:4b:06:b5:5f:
ef:e4:dc:77:32:30:0e:5f:7a:b2:fc:0f:3e:77:10:f5:d1:5b:
28:5f:f0:0d:1a:0f:9a:cc:e5:5f:4a:9c:13:b2:17:f7:71:9d:
08:6c:70:c5:ec:a5:45:fb:83:9e:de:4b:b8:d0:cd:93:0f:6e:
c2:65:9d:e0:78:85:c1:85:f7:d3:0e:d0:28:28:9d:bd:62:bb:
9e:ed:62:da:ae:8b:3c:8b:3e:a0:3e:3a:8e:53:a4:ef:87:6c:
6e:61:51:6f:90:d4:0f:57:fb:d3:ed:18:07:f2:5b:e0:3d:2b:
93:74:4f:5b:7b:bc:96:cb:fb:d3:af:e7:20:a6:ad:db:2c:87:
7d:09:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:54 2025 by rpki-client