Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/hIxUi5K1vlYsPhMS_ZZGifbbdJk.roa
File: hIxUi5K1vlYsPhMS_ZZGifbbdJk.roa (raw, json)
Hash identifier: vk6AdXLy92Xas69tB27JQ4ezY19lztmYKHt5GhipfB4=
Subject key identifier: 84:8C:54:8B:92:B5:BE:56:2C:3E:13:12:FD:96:46:89:F6:DB:74:99
Certificate issuer: /CN=5dab0b08e51f818224629fb3a211d83d5be35440
Certificate serial: 018CC8DDD83BF3FE0C37C72939829CFB4426
Authority key identifier: 5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/hIxUi5K1vlYsPhMS_ZZGifbbdJk.roa
Signing time: Tue 02 Jan 2024 06:30:31 +0000
ROA not before: Tue 02 Jan 2024 06:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198951
IP address blocks: 194.56.174.0/23 maxlen: 24
194.56.176.0/22 maxlen: 24
2001:678:518::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:d8:3b:f3:fe:0c:37:c7:29:39:82:9c:fb:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab0b08e51f818224629fb3a211d83d5be35440
Validity
Not Before: Jan 2 06:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=848c548b92b5be562c3e1312fd964689f6db7499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:88:87:9a:da:6b:eb:7f:3c:d8:1e:4b:b5:
71:94:0d:3d:16:c5:e7:b7:b6:d2:51:d1:8f:78:68:
f9:d1:42:30:f2:db:71:5a:8b:2c:78:5a:d6:a2:65:
89:54:01:8b:22:5e:49:8f:19:ac:d2:4d:5c:c0:b1:
38:ee:2f:1c:84:09:6b:41:1b:2c:0e:ad:ec:81:b2:
67:8f:e8:92:13:41:0e:3b:f0:47:88:76:e3:bc:7c:
64:eb:eb:63:cf:31:cb:15:91:b7:2c:72:cd:93:c8:
ba:65:b5:8c:a4:7c:d9:be:61:7f:57:97:2d:95:92:
35:59:0e:2e:56:8b:77:0a:a3:8a:b6:13:87:dc:00:
ad:46:b3:88:10:6c:d5:3c:3c:99:f7:b4:aa:b2:96:
b9:47:51:2b:16:c4:6e:33:a4:61:11:6d:55:3c:2d:
77:a3:e3:17:28:34:f2:d3:22:18:e1:ec:08:c8:2b:
a0:ab:31:e9:95:a7:57:75:3e:6b:fd:62:84:79:59:
6a:4f:67:cc:31:3f:16:5f:63:ff:84:bb:10:b0:3f:
84:9f:3b:7b:3d:e8:73:6a:a8:7a:fa:b7:66:4a:17:
4d:4d:00:4e:73:e7:c8:1a:ec:36:74:c7:de:7e:64:
c4:c9:e7:ed:62:82:10:0e:11:64:b3:e3:a9:63:75:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:54:8B:92:B5:BE:56:2C:3E:13:12:FD:96:46:89:F6:DB:74:99
X509v3 Authority Key Identifier:
keyid:5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/hIxUi5K1vlYsPhMS_ZZGifbbdJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.174.0-194.56.179.255
IPv6:
2001:678:518::/48
Signature Algorithm: sha256WithRSAEncryption
2f:b4:d4:05:c3:8c:df:80:2c:5f:e9:48:f7:73:25:9e:2d:82:
3d:9a:f1:21:41:19:fd:98:d7:c7:03:5e:d6:df:79:56:6b:81:
e0:a5:00:fc:ba:75:ab:fa:c7:63:69:c7:2a:12:7f:f2:9b:9e:
92:ce:30:75:22:27:04:78:6b:ff:d9:02:89:5a:57:c6:fb:26:
06:04:b8:b1:2e:80:55:58:d5:f3:e9:09:1f:cc:ad:3c:3a:94:
5a:ac:13:65:e1:f3:bc:43:22:18:0d:36:88:22:3d:b3:2c:44:
ac:dc:78:c1:a1:72:5d:15:3a:ee:23:49:ce:c7:99:62:b8:d2:
47:6a:2c:65:8f:eb:7a:d7:df:02:e8:bb:b2:08:f5:f7:5a:a7:
ff:9f:e9:ec:d1:2f:9e:0c:cb:46:fd:96:d6:71:60:8e:e6:36:
05:3d:a8:d0:35:bf:a3:fb:53:08:a1:ea:eb:b2:a8:38:6e:27:
7f:bb:0a:e8:5d:34:19:94:7e:16:64:76:0d:31:c5:b0:4a:55:
12:c9:86:d0:ec:4b:0e:f7:ef:b7:22:51:f6:be:7d:74:02:30:
e8:30:52:6b:6c:f0:40:12:15:e9:b0:29:03:18:6a:3a:6d:a4:
05:8e:2d:7b:dc:ef:7c:4e:62:eb:25:17:70:fd:22:55:0c:b0:
ae:d2:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:58:57 2025 by rpki-client