Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/HMe85-Xsy3UDqs_56P-ETHcVDeM.roa
File: HMe85-Xsy3UDqs_56P-ETHcVDeM.roa (raw, json)
Hash identifier: q9PJjyT1/wTDkQS53svIjSBv0lTXxjGuLwOpAMGZD9c=
Subject key identifier: 1C:C7:BC:E7:E5:EC:CB:75:03:AA:CF:F9:E8:FF:84:4C:77:15:0D:E3
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0194086236D897716B7530A68D9E828951FE
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/HMe85-Xsy3UDqs_56P-ETHcVDeM.roa
Signing time: Fri 27 Dec 2024 13:50:41 +0000
ROA not before: Fri 27 Dec 2024 13:50:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212093
IP address blocks: 93.179.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:62:36:d8:97:71:6b:75:30:a6:8d:9e:82:89:51:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Dec 27 13:50:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cc7bce7e5eccb7503aacff9e8ff844c77150de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:1c:d8:52:e8:47:69:d6:91:dc:30:7c:b1:
70:4d:57:b9:35:31:56:e2:8b:2e:06:39:08:c9:b1:
bc:2e:b3:ce:2d:b1:ba:7c:d4:b2:55:0e:81:f9:b6:
ed:93:52:8a:e3:80:c5:b2:f4:8a:2d:0d:2e:eb:b0:
2e:27:e1:07:c6:30:8f:e8:ad:b9:d7:d4:33:84:18:
f8:92:84:6b:b2:12:10:ac:e5:d8:17:ac:89:8e:85:
67:1f:f5:00:88:3f:83:cd:ee:83:0c:f5:0f:55:70:
2d:8b:27:df:56:2a:77:83:c8:2a:7e:03:74:cf:e0:
cf:ff:50:aa:2f:8e:ea:6e:db:10:90:26:94:a4:2a:
92:0b:47:3d:f8:8b:58:22:21:0c:87:d2:5d:03:0a:
48:1a:98:52:8e:51:0a:ca:78:be:fd:69:b8:94:74:
a5:6e:66:c2:32:73:77:55:35:6b:3d:c7:1c:1b:02:
ea:30:74:ae:6d:0a:f5:64:78:f6:09:f6:a8:87:ec:
38:31:05:21:d8:82:39:5a:be:25:b7:23:6c:ad:eb:
7e:e0:37:72:7f:0f:12:2c:39:fc:13:6b:5f:cd:08:
b5:dd:19:11:8d:4f:92:97:1b:42:31:cd:b2:40:2f:
0c:ff:ce:2d:71:7e:1e:4d:03:ad:90:45:0a:8d:bf:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:BC:E7:E5:EC:CB:75:03:AA:CF:F9:E8:FF:84:4C:77:15:0D:E3
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/HMe85-Xsy3UDqs_56P-ETHcVDeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.66.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a9:17:06:bf:83:d3:d0:c6:a1:dc:47:c5:1f:50:05:f8:e2:
fb:0a:79:77:07:db:8e:80:c7:e6:b0:85:06:a7:d8:dc:ce:2f:
c0:e3:8b:92:8b:1a:d9:64:cd:e3:56:a8:2e:35:a8:f3:b7:77:
21:cf:61:22:6f:2d:f1:02:bb:d8:3b:56:a0:4c:d4:fb:46:b6:
30:f9:65:fd:44:51:c3:95:ee:42:bc:fd:42:9b:69:13:0f:36:
66:e0:96:0b:be:18:f5:7d:a7:7a:67:bf:36:56:76:14:8b:ad:
98:d3:3f:45:a9:11:4c:60:63:e3:b9:81:c0:52:51:83:f4:4f:
df:00:18:33:8a:ef:0c:8d:34:88:7b:0e:12:7c:4d:2b:24:c4:
99:27:87:47:45:7b:61:d8:e0:c4:3b:8a:00:72:41:e0:1e:0b:
44:70:b5:78:82:f5:de:54:32:ab:bd:41:a8:43:15:de:fb:f0:
f0:ee:d2:da:39:6c:0a:cd:5d:54:91:05:09:1a:18:65:cd:62:
09:71:37:6a:60:6d:03:1e:02:f5:27:38:0b:28:2b:6c:b0:79:
70:5c:68:11:30:2d:7c:7c:73:df:d9:75:5b:4b:1a:0e:a3:84:
5c:3f:e6:54:0e:aa:9a:91:75:30:4d:92:eb:1d:2e:3e:b5:d3:
c5:0e:58:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQIYjbYl3FrdTCmjZ6CiVH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjQxMjI3MTM1MDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2M3YmNlN2U1ZWNjYjc1MDNhYWNmZjllOGZmODQ0Yzc3MTUwZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XMc2FLoR2nWkdwwfLFwTVe5NTFW
4osuBjkIybG8LrPOLbG6fNSyVQ6B+bbtk1KK44DFsvSKLQ0u67AuJ+EHxjCP6K25
19QzhBj4koRrshIQrOXYF6yJjoVnH/UAiD+Dze6DDPUPVXAtiyffVip3g8gqfgN0
z+DP/1CqL47qbtsQkCaUpCqSC0c9+ItYIiEMh9JdAwpIGphSjlEKyni+/Wm4lHSl
bmbCMnN3VTVrPcccGwLqMHSubQr1ZHj2Cfaoh+w4MQUh2II5Wr4ltyNsret+4Ddy
fw8SLDn8E2tfzQi13RkRjU+SlxtCMc2yQC8M/84tcX4eTQOtkEUKjb8HiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzHvOfl7Mt1A6rP+ej/hEx3FQ3jMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvSE1lODUtWHN5M1VEcXNfNTZQLUVUSGNWRGVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbNCMA0G
CSqGSIb3DQEBCwUAA4IBAQCKqRcGv4PT0Mah3EfFH1AF+OL7Cnl3B9uOgMfmsIUG
p9jczi/A44uSixrZZM3jVqguNajzt3chz2Eiby3xArvYO1agTNT7RrYw+WX9RFHD
le5CvP1Cm2kTDzZm4JYLvhj1fad6Z782VnYUi62Y0z9FqRFMYGPjuYHAUlGD9E/f
ABgziu8MjTSIew4SfE0rJMSZJ4dHRXth2ODEO4oAckHgHgtEcLV4gvXeVDKrvUGo
QxXe+/Dw7tLaOWwKzV1UkQUJGhhlzWIJcTdqYG0DHgL1JzgLKCtssHlwXGgRMC18
fHPf2XVbSxoOo4RcP+ZUDqqakXUwTZLrHS4+tdPFDli8
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:32:36 2025 by rpki-client