Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/HZ3C9q4xDS4JVRgy5V2umeQIo4Q.roa
File: HZ3C9q4xDS4JVRgy5V2umeQIo4Q.roa (raw, json)
Hash identifier: tCvI0g4FhokQPDLnOPjtXZfmJcTs4qq8x+e7FCC0ooU=
Subject key identifier: 1D:9D:C2:F6:AE:31:0D:2E:09:55:18:32:E5:5D:AE:99:E4:08:A3:84
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 0193889F6E9F0B267C1CC7620DCF0077C507
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/HZ3C9q4xDS4JVRgy5V2umeQIo4Q.roa
Signing time: Mon 02 Dec 2024 18:26:10 +0000
ROA not before: Mon 02 Dec 2024 18:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62371
IP address blocks: 79.135.106.0/24 maxlen: 24
79.135.107.0/24 maxlen: 24
185.70.40.0/22 maxlen: 22
185.70.40.0/24 maxlen: 24
185.70.41.0/24 maxlen: 24
185.70.42.0/24 maxlen: 24
185.70.43.0/24 maxlen: 24
2a05:2700::/29 maxlen: 29
2a05:2700::/32 maxlen: 32
2a05:2701::/32 maxlen: 32
2a05:2701:f00::/40 maxlen: 40
2a05:2701:f00::/44 maxlen: 44
2a05:2701:f10::/44 maxlen: 44
2a05:2701:f40::/44 maxlen: 44
2a05:2701:f50::/44 maxlen: 44
2a05:2701:fe00::/48 maxlen: 48
2a05:2701:fe01::/48 maxlen: 48
2a05:2701:fe02::/48 maxlen: 48
2a05:2701:fe10::/48 maxlen: 48
2a05:2701:fe11::/48 maxlen: 48
2a05:2701:fe12::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Dec 2024 22:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:9f:6e:9f:0b:26:7c:1c:c7:62:0d:cf:00:77:c5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Dec 2 18:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9dc2f6ae310d2e09551832e55dae99e408a384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:36:74:cc:25:53:df:16:21:ca:5b:04:45:
6a:ee:9c:b9:33:ff:c7:73:e1:cb:cc:f4:2e:55:ae:
cf:ef:cb:01:77:b8:15:7d:87:09:11:96:80:83:0e:
05:11:0b:62:02:d6:61:a1:c6:46:ec:38:5a:a8:ec:
5a:5b:30:1f:dc:1b:3d:a7:40:0d:cf:0f:1f:21:12:
37:48:3a:6e:1a:3e:0a:f1:8d:a9:cb:ea:d7:43:4f:
4e:87:de:ba:15:f9:11:4c:bf:03:85:b2:ec:fd:ee:
19:2b:f1:1c:33:1b:f9:d2:e6:94:46:c0:c5:a0:43:
87:f2:33:59:0c:af:7c:6a:7c:78:cd:f9:39:12:4a:
ed:05:37:e9:d0:ac:66:f7:33:3b:61:11:6b:9d:94:
a8:b1:d4:e2:33:4b:6b:b7:0d:f0:b4:e3:df:8a:84:
da:e5:3c:74:a8:fd:54:a6:c3:06:7c:31:58:7f:b0:
b0:f7:08:6b:1d:55:df:40:83:6a:46:b3:7b:26:97:
12:98:f6:88:b7:e0:18:25:3d:8a:c1:78:dc:08:b8:
90:b6:4a:55:47:b8:95:5f:0c:83:01:3b:27:5e:f5:
7a:00:4b:33:87:64:15:4d:fa:d0:80:1e:81:72:d6:
22:70:67:19:a5:6c:b1:27:56:a2:19:8c:6b:d3:44:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:C2:F6:AE:31:0D:2E:09:55:18:32:E5:5D:AE:99:E4:08:A3:84
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/HZ3C9q4xDS4JVRgy5V2umeQIo4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.106.0/23
185.70.40.0/22
IPv6:
2a05:2700::/29
Signature Algorithm: sha256WithRSAEncryption
9a:a1:1d:8b:7b:e4:38:0e:23:12:22:61:eb:0b:3d:62:5b:4e:
39:45:69:b3:d2:bd:1f:cb:dc:0a:fb:fa:1a:cd:74:39:61:97:
ae:50:b5:1f:ca:2d:3a:6a:e3:9c:fb:b9:2f:c0:58:27:ae:60:
d2:a3:ca:3e:9f:71:35:d8:29:9b:e2:03:73:a8:10:a2:4b:75:
33:70:f2:aa:e3:73:94:66:22:94:c2:5a:7a:bb:1a:6c:db:25:
b3:c5:89:30:ee:c7:92:60:cf:e5:85:7b:24:b1:fe:78:f2:2a:
cf:9e:0b:93:2a:96:00:65:c8:54:23:ed:14:e8:49:d8:51:25:
27:d8:6c:85:ad:98:6e:da:c5:24:b0:33:5c:44:00:f6:2a:c3:
56:49:f2:9a:b4:ac:25:13:1c:31:43:9a:5e:9d:ec:04:99:c9:
ee:09:fd:af:6d:ce:15:c3:9c:c5:e0:89:f1:1f:c4:6e:b9:91:
d3:c9:ec:e6:2b:e7:3c:3b:1d:33:64:2c:32:8d:68:23:85:96:
08:28:e5:f1:ae:78:0c:13:c3:a2:5b:df:da:6a:19:b8:b5:21:
fc:fc:8b:6e:73:d2:e7:8d:a5:1a:e5:76:80:ba:7b:44:8b:42:
57:8b:8a:8d:3b:6b:3c:e6:bb:93:e8:34:e8:a0:95:88:b5:5c:
2e:7e:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:51:11 2025 by rpki-client