Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/hdmhMETVSJcAzOWNM9vfuIUIix8.roa
File: hdmhMETVSJcAzOWNM9vfuIUIix8.roa (raw, json)
Hash identifier: XxkkFbKCikSibJZtJ/kgnDTpx3p2Q/oqRs6Vg/sLPUw=
Subject key identifier: 85:D9:A1:30:44:D5:48:97:00:CC:E5:8D:33:DB:DF:B8:85:08:8B:1F
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 018CC500D0E54600630906A24C3EF362261A
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/hdmhMETVSJcAzOWNM9vfuIUIix8.roa
Signing time: Mon 01 Jan 2024 12:30:14 +0000
ROA not before: Mon 01 Jan 2024 12:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51296
IP address blocks: 91.216.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d0:e5:46:00:63:09:06:a2:4c:3e:f3:62:26:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Jan 1 12:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85d9a13044d5489700cce58d33dbdfb885088b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:3d:a2:62:24:05:79:7c:7a:41:6b:4c:2b:
c1:64:36:c1:b3:2e:2f:b5:f7:00:2e:58:2c:24:bd:
13:95:40:c5:fa:a5:58:78:eb:81:9d:a2:59:1d:2a:
11:ea:03:65:b7:0c:99:e6:17:d7:cc:91:c3:5d:29:
08:8e:44:26:81:a2:af:f2:b1:ef:14:56:26:40:61:
7f:4e:69:6b:96:96:4d:15:e4:e8:06:e7:2f:39:60:
bf:3a:dc:f3:15:18:63:39:6c:d4:7c:d3:0e:3d:d8:
f9:83:a4:3b:d3:be:1f:d5:7c:d5:d1:96:93:41:1a:
08:f7:68:86:f7:0d:05:13:c8:92:9b:86:36:ae:c5:
d1:99:a4:cb:e5:1b:3a:a6:42:5c:97:3d:2f:29:b9:
4a:08:ec:f5:39:20:e4:89:3e:ae:10:a6:e1:49:b7:
4f:bd:8a:c5:2b:d1:9b:53:29:14:61:c9:63:b9:0f:
6b:1e:bc:9c:28:51:1e:30:d9:17:20:d9:75:80:a4:
c1:fc:7e:54:49:e3:d1:39:48:84:5e:14:72:0f:f3:
34:8e:92:a4:98:38:02:c8:62:f0:af:cc:9e:b9:79:
c4:ab:f9:03:bb:56:18:c2:7c:de:68:16:e5:06:a6:
2e:92:2d:7d:1e:2b:01:fc:52:52:5a:7d:7a:2b:9d:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:A1:30:44:D5:48:97:00:CC:E5:8D:33:DB:DF:B8:85:08:8B:1F
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/hdmhMETVSJcAzOWNM9vfuIUIix8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.255.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a4:ae:96:c0:31:1c:08:83:e8:38:d3:cb:82:11:87:b3:f9:
5f:7e:bf:82:2f:bd:bf:dc:9a:41:fb:44:4a:2b:e7:12:02:82:
0a:0a:cb:07:c4:d7:5b:5f:4c:e7:18:aa:14:04:8a:4c:68:48:
1b:7e:85:4a:31:6a:56:c8:26:d7:36:61:32:a3:ac:a4:a1:3d:
29:71:18:ba:8e:60:8a:2d:f3:02:26:d1:23:8f:b6:18:ce:d0:
b7:66:cc:5c:73:03:53:33:83:c8:76:ca:e3:64:87:e0:8a:29:
33:3b:af:b6:8d:ef:89:a0:e1:7f:35:3a:a4:d5:01:85:22:c6:
a3:6a:9a:76:c7:56:0e:8f:dc:8c:35:23:ef:83:9f:93:37:5a:
16:ce:55:39:8c:0e:dd:ce:4b:31:62:40:6a:20:fb:c6:e2:50:
da:96:a4:2b:b7:c0:1f:34:24:b4:68:b1:fd:8f:a8:a5:b7:de:
34:52:7b:61:e4:d8:69:fc:6a:39:03:4a:8a:03:b2:ea:9d:1d:
f3:25:4c:70:f0:0e:22:ce:69:ce:73:f8:66:b0:30:eb:79:3f:
f5:eb:5d:15:3e:bd:f9:b9:e2:6b:ca:ea:49:c5:1e:dc:6e:cd:
b9:d3:bf:98:11:2c:f9:9c:1d:a9:14:17:ad:96:a9:fb:06:ae:
94:96:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:50:18 2025 by rpki-client