Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HQx7MBdiPcdiaFIgkYtJjvYUUA8.roa
File: HQx7MBdiPcdiaFIgkYtJjvYUUA8.roa (raw, json)
Hash identifier: ipp3Wg6GfLv1oy3QNzkGIKu64uRbA5Y5UjHQpkISZSc=
Subject key identifier: 1D:0C:7B:30:17:62:3D:C7:62:68:52:20:91:8B:49:8E:F6:14:50:0F
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018EEF183BA9E455C2E2E264A11B47A87E13
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HQx7MBdiPcdiaFIgkYtJjvYUUA8.roa
Signing time: Thu 18 Apr 2024 02:45:26 +0000
ROA not before: Thu 18 Apr 2024 02:45:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206134
IP address blocks: 46.8.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ef:18:3b:a9:e4:55:c2:e2:e2:64:a1:1b:47:a8:7e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Apr 18 02:45:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d0c7b3017623dc762685220918b498ef614500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:68:c6:c9:41:95:cb:3b:9e:4f:db:14:23:
31:d7:ff:3d:80:0f:72:2b:ce:52:8d:0c:d9:d9:4f:
b8:d0:be:ea:a5:91:b5:ae:13:84:c6:02:47:a4:5b:
8a:7a:b7:ba:d9:9b:09:40:a1:1c:7c:01:ec:ca:01:
a6:2d:a3:16:56:f4:95:4e:ff:bb:ad:b0:e5:e4:3f:
ac:a6:bb:29:98:a0:29:20:21:d7:40:81:01:a2:1c:
77:03:be:23:d9:a8:4a:7e:75:db:c7:74:71:22:65:
9d:09:ed:44:c6:e1:1e:18:97:1c:b4:8c:55:60:03:
ac:e6:e7:2f:16:c2:81:3e:2d:d9:f5:f2:b9:f7:7e:
c8:d8:0a:e3:bd:5b:b7:0e:b5:b7:72:f8:93:66:d0:
46:bd:0f:70:aa:6e:08:78:da:7d:84:e4:a5:07:2a:
44:b1:c4:1b:4c:c2:42:74:b7:c4:e1:d6:1c:64:18:
6b:0b:41:23:1a:d2:72:79:62:79:04:af:f6:b6:c3:
5c:5a:c9:76:5f:e2:c2:e7:2a:63:bd:7d:08:b6:f3:
bd:e2:39:52:4d:79:bd:ba:5c:e9:f0:f2:e5:63:5d:
2b:ea:28:7f:73:0b:f8:c3:12:00:fd:91:54:68:4e:
0d:b3:78:d4:5c:61:de:3a:03:23:c1:04:ae:68:93:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:7B:30:17:62:3D:C7:62:68:52:20:91:8B:49:8E:F6:14:50:0F
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HQx7MBdiPcdiaFIgkYtJjvYUUA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ee:9c:5c:3d:04:5f:ab:45:ba:09:db:82:bb:9f:db:1c:b0:
ca:23:82:81:05:66:ca:01:1b:df:e7:68:ec:63:34:b2:d7:d1:
76:ca:ae:33:af:47:14:cd:ae:f1:da:df:56:0f:8c:00:6a:ec:
4e:f4:8e:ae:b6:d7:af:73:67:00:98:b9:18:28:fc:92:a0:ff:
69:da:34:3c:81:18:70:4e:65:3f:23:71:0b:be:3e:54:8c:27:
3a:a5:ee:e5:62:d0:86:3f:28:ef:4e:f2:9f:20:06:95:39:1f:
eb:00:81:fb:f5:2d:2d:2a:1b:e3:be:f7:8b:ce:c1:5e:fd:c4:
39:bc:f2:25:90:9c:a2:bd:48:bf:ea:ea:0c:8b:16:3d:c9:bd:
7b:03:38:3c:47:8b:45:43:19:40:0a:24:71:a4:3f:6e:a6:c7:
c4:c2:06:9d:7f:04:82:f3:7b:15:e5:9d:ce:ab:c5:39:19:7e:
e5:20:c0:ee:ef:58:9e:bc:38:39:a7:ce:ff:8a:2f:21:1c:93:
8a:14:d3:c6:4b:2c:fa:aa:b1:a2:cc:82:ad:7d:36:5d:3a:d6:
23:13:17:bf:bb:ef:e3:39:cd:e5:c8:03:12:d6:3b:d3:a2:e5:
a5:e5:96:9b:39:27:b2:50:80:8e:a4:7b:98:b0:3f:54:d8:c7:
be:43:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:57 2025 by rpki-client