Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/hsPTOeS_EsTMJg-Ipa6fbLwoNzI.roa
File: hsPTOeS_EsTMJg-Ipa6fbLwoNzI.roa (raw, json)
Hash identifier: lEfU1q8ogHTnJdVbvZV+N2vIs3+7Xap5j/lK4trCX/I=
Subject key identifier: 86:C3:D3:39:E4:BF:12:C4:CC:26:0F:88:A5:AE:9F:6C:BC:28:37:32
Certificate issuer: /CN=b93da91f1f53634272c5911087ce66cbad3614a3
Certificate serial: 018E12A055577AA17F2283554C562147CE31
Authority key identifier: B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/hsPTOeS_EsTMJg-Ipa6fbLwoNzI.roa
Signing time: Wed 06 Mar 2024 07:18:01 +0000
ROA not before: Wed 06 Mar 2024 07:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50905
IP address blocks: 91.216.23.0/24 maxlen: 24
193.33.214.0/24 maxlen: 24
193.33.215.0/24 maxlen: 24
2001:67c:24b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:12:a0:55:57:7a:a1:7f:22:83:55:4c:56:21:47:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93da91f1f53634272c5911087ce66cbad3614a3
Validity
Not Before: Mar 6 07:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86c3d339e4bf12c4cc260f88a5ae9f6cbc283732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c3:3a:4a:99:40:e4:6c:6d:fe:64:81:83:dd:
d8:dd:3d:ad:35:b2:4d:e5:f5:72:e4:ac:e1:3e:ff:
a6:1c:90:b0:a4:d1:f5:e9:42:3c:cf:f7:e0:b2:1e:
20:46:f7:55:e8:7c:9e:ac:65:73:3b:d3:b4:d0:3b:
e3:6c:d0:7d:5b:86:7a:20:4c:d3:31:60:d6:9d:02:
b7:36:87:d6:54:dc:7b:66:dc:1d:88:88:66:24:39:
d8:72:2e:fa:cd:49:6b:4f:d4:a3:51:cb:7d:93:b0:
c7:0f:3d:c0:a1:d0:3d:99:1c:04:2b:f0:a0:56:6f:
e2:15:1f:8c:5c:f2:f1:b8:cf:1f:89:d2:5a:43:dd:
bd:70:d6:32:16:0d:93:c2:14:67:6c:4c:7e:b7:35:
c3:ba:8b:1b:fa:ef:2e:5b:e9:a0:6a:0e:6e:c6:8b:
1c:a7:7f:c7:dd:66:b5:79:74:fe:3d:df:8a:a7:11:
98:9d:fc:df:ac:74:c0:64:16:35:ee:be:dc:7e:4f:
d1:24:55:b9:9d:d4:60:32:e3:25:d2:a9:a4:b5:64:
2c:a5:be:6f:49:b2:40:ac:7d:fa:6b:5d:c9:3e:de:
33:cd:96:b4:f7:ae:57:8c:f4:34:2f:11:0a:91:62:
51:99:d6:7e:3a:bc:99:b7:d1:6b:96:b0:24:af:0c:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C3:D3:39:E4:BF:12:C4:CC:26:0F:88:A5:AE:9F:6C:BC:28:37:32
X509v3 Authority Key Identifier:
keyid:B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/hsPTOeS_EsTMJg-Ipa6fbLwoNzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.23.0/24
193.33.214.0/23
IPv6:
2001:67c:24b0::/48
Signature Algorithm: sha256WithRSAEncryption
e5:51:e2:a5:5f:ea:ca:20:55:d4:e8:cd:6e:2a:2f:e5:6b:b5:
ac:f8:0a:ac:a1:3f:ec:5e:24:37:ac:6a:1e:81:d1:81:06:e1:
8d:01:a7:eb:40:55:4e:39:04:d2:69:67:5c:22:b9:f8:3e:9c:
45:0e:5a:d3:19:98:4d:25:e5:76:87:63:c1:ce:12:95:d8:00:
00:dc:39:53:32:a2:96:dd:ac:46:0d:cf:e3:ce:bb:6a:75:f9:
4f:ea:53:97:fb:fd:e6:e5:06:14:ad:06:02:3d:58:59:d6:ca:
3f:fd:5b:71:75:81:a2:7e:0c:2b:a0:5a:3e:de:99:f9:e2:66:
df:9e:3b:50:b8:49:53:46:4e:00:2f:e0:24:dc:ca:ff:79:b8:
6e:75:f4:c3:ca:34:05:73:69:7b:7a:a4:7d:98:6e:a6:f3:cc:
35:71:bc:a3:66:51:a5:68:da:27:13:79:25:44:7c:0c:05:c4:
8f:03:5d:15:15:9d:50:49:aa:49:3e:7d:74:e1:f9:bc:72:24:
9b:08:dd:7f:31:1f:43:82:30:42:e2:14:f1:3d:e3:89:a4:fe:
b7:e3:4c:a9:1a:4f:72:28:9f:3e:1f:06:e4:b7:6b:ea:41:a7:
51:fb:d0:6e:5d:81:a9:32:80:3d:ea:ee:0e:b9:a6:b0:9b:7c:
54:7f:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:16:11 2025 by rpki-client