Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HZoe1Qpx-OJ7lJNcvaNxtxOXU_c.roa
File: HZoe1Qpx-OJ7lJNcvaNxtxOXU_c.roa (raw, json)
Hash identifier: 5fQILmmyAQyiHtwEgIjBN++4yZl+SsMdHXkndorX5DQ=
Subject key identifier: 1D:9A:1E:D5:0A:71:F8:E2:7B:94:93:5C:BD:A3:71:B7:13:97:53:F7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E33E3FD3F87084B0ED05046053FE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HZoe1Qpx-OJ7lJNcvaNxtxOXU_c.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20536
IP address blocks: 146.158.74.0/23 maxlen: 24
93.171.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e3:3e:3f:d3:f8:70:84:b0:ed:05:04:60:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9a1ed50a71f8e27b94935cbda371b7139753f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:15:f5:a4:8a:5c:b7:a8:fe:0f:19:32:eb:
ab:76:7b:12:63:3c:af:76:57:8c:c1:a6:cf:06:fd:
9d:4b:ef:5b:65:4a:49:f8:ed:04:56:06:16:0f:ca:
7d:6b:35:37:2b:00:df:b5:9b:f1:49:f3:13:cf:ac:
08:c7:a9:9f:0d:3b:0d:29:24:ef:db:57:62:22:9a:
05:be:1d:fc:68:4a:70:c6:c9:08:28:0a:fb:ef:5d:
18:06:53:10:3c:3c:31:be:03:11:cd:a3:ed:9c:58:
1b:3f:9b:d9:47:f7:35:29:20:2e:b3:92:c0:5e:3a:
53:90:0f:a4:e3:d2:94:50:68:3a:74:82:14:cd:25:
77:27:0d:bc:a3:1b:70:75:1d:b3:96:34:5e:63:6c:
b0:47:41:ed:3c:10:19:85:b0:5e:97:31:ca:6f:a7:
5c:a6:a3:5f:26:03:d6:c1:4b:3c:3e:f5:fa:9d:22:
fa:83:d7:47:16:70:35:f7:e7:57:17:88:a6:43:42:
98:f1:98:ad:8b:79:17:ff:4a:8f:34:8c:a9:5c:bf:
86:a2:0d:15:8c:20:16:21:76:96:47:5d:41:1c:4e:
c7:cd:f0:1d:e2:9b:d9:5c:7d:3c:02:4f:31:3e:8e:
33:f6:5e:48:07:e8:bd:bd:6e:07:c6:11:65:0a:45:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:1E:D5:0A:71:F8:E2:7B:94:93:5C:BD:A3:71:B7:13:97:53:F7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HZoe1Qpx-OJ7lJNcvaNxtxOXU_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.5.0/24
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
11:1f:20:f1:37:a5:d0:f8:3a:2a:93:44:57:c3:50:1f:af:01:
6b:eb:8c:4a:f3:70:c0:7a:ae:97:e4:ba:c4:98:ab:b0:08:c9:
7c:a0:36:5e:4f:cb:e5:0b:f3:43:da:74:52:99:16:79:42:7e:
41:81:86:90:7e:4c:33:08:27:e1:d4:4b:73:22:ca:16:11:df:
43:39:65:05:23:cc:a7:88:4c:e4:42:45:17:59:58:c9:24:6b:
8c:d3:96:33:12:27:b0:38:83:c4:c2:0f:3b:c3:28:66:fa:bc:
1f:3e:a5:7b:da:ca:70:c8:68:5e:5b:1d:ff:13:c9:78:d0:ca:
b7:4d:66:8e:4c:98:4f:fc:a1:f1:ea:1c:66:f1:62:9a:96:00:
ed:cc:5a:72:1a:96:a0:ac:3f:f1:de:6c:63:3c:27:ee:5e:07:
d9:8f:1e:b9:5d:23:a5:41:29:25:4f:d4:c5:24:5f:f2:20:f7:
fb:4a:06:ef:ca:e1:ed:89:9f:6a:36:22:a9:ab:c7:2f:01:d6:
6a:15:1a:c8:72:43:84:ad:b4:2b:f4:17:4a:28:6c:89:e3:ee:
ce:19:8d:33:7a:91:67:66:e3:59:d9:b0:f3:c7:d5:25:1d:58:
9c:86:8c:37:56:10:70:e6:2c:06:c3:65:99:be:8d:40:c2:03:
52:15:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:52 2025 by rpki-client