Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/hii07fN62ewuVc_0mLLhPs2HmuQ.roa
File: hii07fN62ewuVc_0mLLhPs2HmuQ.roa (raw, json)
Hash identifier: QhsKEeOc5mDoawu4PTy95be7dgQHUmuFMEdAqykVWIs=
Subject key identifier: 86:28:B4:ED:F3:7A:D9:EC:2E:55:CF:F4:98:B2:E1:3E:CD:87:9A:E4
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 0194ACBBA69D08B2452637E869EF622BC302
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/hii07fN62ewuVc_0mLLhPs2HmuQ.roa
Signing time: Tue 28 Jan 2025 11:46:06 +0000
ROA not before: Tue 28 Jan 2025 11:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 116.199.224.0/21 maxlen: 21
116.199.232.0/23 maxlen: 23
116.199.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 10:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:bb:a6:9d:08:b2:45:26:37:e8:69:ef:62:2b:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Jan 28 11:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8628b4edf37ad9ec2e55cff498b2e13ecd879ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:c7:d6:57:8f:9a:47:91:98:c8:0e:cc:ca:
b3:32:79:78:b4:0a:ee:5d:1f:e4:48:61:c5:e9:98:
71:39:d2:fb:91:4e:f7:d8:41:bd:e4:fe:a9:8f:ce:
e7:47:80:f1:1b:8d:88:9c:d2:74:9c:21:3e:14:b4:
c0:96:87:5f:6f:b1:ab:65:f5:54:7f:6d:5a:c2:f6:
e6:be:8d:c3:a3:bf:a5:2c:a4:7a:7f:fe:04:ad:40:
9c:0d:31:1e:de:0c:da:14:2c:46:58:09:bc:6a:31:
24:e1:68:5e:d0:c8:7b:d4:92:c1:fc:67:e7:64:cc:
1d:ea:ab:ce:01:1d:de:d1:a3:f6:e1:e2:4b:22:af:
c6:de:08:ed:e6:5f:af:72:52:8f:aa:61:69:9f:65:
ba:5e:bb:2b:fd:74:2b:d4:8c:f2:1c:6f:8d:c8:26:
54:11:b6:75:f5:d0:0c:64:93:4e:e3:d9:33:de:28:
f4:fe:b5:ee:9e:51:49:59:40:e1:97:b4:20:2f:e9:
22:d0:a1:97:93:46:27:3f:2f:49:ed:ba:d2:e9:49:
2e:b6:0c:fc:59:d3:4b:db:c8:4c:d2:1f:82:3a:32:
58:bb:9e:01:d8:5c:a6:2b:76:0b:d0:fa:f3:e3:77:
37:14:44:ad:3f:c2:79:53:8f:94:77:34:5d:a7:18:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:28:B4:ED:F3:7A:D9:EC:2E:55:CF:F4:98:B2:E1:3E:CD:87:9A:E4
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/hii07fN62ewuVc_0mLLhPs2HmuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.224.0-116.199.234.255
Signature Algorithm: sha256WithRSAEncryption
46:8b:de:bf:c1:97:9f:2b:83:ca:bb:62:50:ab:12:08:9f:69:
6b:bf:e5:56:5f:04:c7:3e:d6:5a:a7:aa:7d:e3:e0:e4:70:d9:
9a:61:f0:9b:93:89:fa:c3:33:e5:8a:5d:29:2f:6a:b4:e9:33:
c8:c0:e4:65:3c:94:2a:d8:84:5f:ee:4b:41:11:38:45:54:81:
39:53:11:c4:62:bc:61:a4:9b:27:f2:b9:7a:ee:6c:90:3b:d2:
61:a0:77:7c:44:3f:58:61:02:3f:6a:6a:86:0a:79:b1:91:c9:
42:b2:06:18:af:f4:c7:fa:85:1d:6a:19:5d:35:44:88:15:26:
79:4b:6b:60:a4:ac:58:51:a1:36:ca:a3:61:53:19:07:8a:69:
1a:72:95:6a:8e:ea:7a:52:c9:9e:90:15:77:42:e4:98:13:6c:
47:1d:f7:60:4d:12:a0:a1:3c:5e:5d:df:81:37:8d:34:6d:06:
8f:27:79:98:b8:ba:eb:03:8d:be:e1:f1:10:17:47:68:f6:a6:
4f:d9:89:59:a5:c5:be:e5:81:7f:17:ab:3a:28:a7:9c:20:62:
3b:36:6a:a9:61:e6:1c:e8:08:dd:01:9f:99:3a:c9:2b:82:b9:
78:06:da:31:fb:35:61:81:78:59:2d:eb:af:63:77:50:a0:d7:
da:37:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:42 2025 by rpki-client