Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hzAZqSdrgA23mSCMCRTid9XdmHk.roa
File: hzAZqSdrgA23mSCMCRTid9XdmHk.roa (raw, json)
Hash identifier: af0/vJPmBJTxwBIUc20TpljibRV3LebDkg/ZeViU018=
Subject key identifier: 87:30:19:A9:27:6B:80:0D:B7:99:20:8C:09:14:E2:77:D5:DD:98:79
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01953839BD402B73556A8EE070F74D638D82
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hzAZqSdrgA23mSCMCRTid9XdmHk.roa
Signing time: Mon 24 Feb 2025 13:51:02 +0000
ROA not before: Mon 24 Feb 2025 13:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 15:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:39:bd:40:2b:73:55:6a:8e:e0:70:f7:4d:63:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 24 13:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=873019a9276b800db799208c0914e277d5dd9879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:05:f4:c9:4c:e6:43:3b:57:ad:e8:e5:fb:
9d:50:91:71:49:72:49:f7:33:ba:de:d8:ac:e6:e1:
75:99:11:b9:6c:94:8b:6c:18:88:99:e1:ab:74:b8:
fb:63:48:56:29:5f:05:db:b8:ec:b3:62:4d:76:31:
21:db:cb:e7:79:2c:ed:c8:08:74:b8:f6:0d:45:e1:
4f:df:aa:2d:1f:23:58:f1:71:d3:7f:0b:26:35:93:
83:12:fa:79:f4:1f:80:6b:5e:34:d7:51:f0:c5:39:
a2:a4:3a:71:50:0e:81:27:27:d7:2b:67:bd:2f:2b:
b7:0c:5f:a5:8e:36:e2:b0:22:7b:49:d8:f1:5d:14:
6b:db:99:9e:42:1b:af:e6:c5:23:2b:d8:4b:81:1d:
4a:6e:ac:16:ce:69:8c:fe:f9:a3:7a:fd:30:47:45:
5b:f2:0b:40:44:21:36:ce:ca:e9:ec:e7:e8:5d:82:
b6:89:9e:47:b6:ce:dd:d8:35:4a:e9:9b:29:f7:99:
ff:82:d2:ae:83:76:a6:98:9e:fe:6d:2b:e7:31:d7:
b0:7e:84:96:8a:6c:79:8b:34:bd:9a:38:ee:74:b7:
40:96:f7:65:5d:11:c5:54:8e:2e:e4:c0:89:53:32:
43:a7:7a:2b:3f:7c:37:f7:51:42:7c:c6:76:8d:d9:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:30:19:A9:27:6B:80:0D:B7:99:20:8C:09:14:E2:77:D5:DD:98:79
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hzAZqSdrgA23mSCMCRTid9XdmHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.50.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.193.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
28:7f:e8:7b:cb:51:38:2c:18:9e:ee:5f:94:a9:ef:45:f8:c7:
3e:9b:b3:90:45:fd:26:27:59:bf:0d:23:45:1a:ba:22:b5:58:
d0:9c:e9:20:c4:f7:e1:92:3f:84:7c:bd:04:ad:eb:a3:23:4c:
2a:34:51:9d:ee:99:86:35:c1:e2:09:f0:f2:da:5b:93:f8:ae:
f2:8a:da:75:06:73:f8:81:01:63:8c:96:7f:bb:80:7b:0c:d4:
2e:7a:d9:8c:6b:41:01:8f:74:ae:ab:3a:4d:d4:87:aa:3d:56:
b3:92:89:95:4f:4a:6b:6a:82:ca:c3:8c:19:2d:f4:59:13:3d:
1e:a4:1e:c9:77:95:75:87:c4:65:63:91:b9:b9:a6:66:54:ce:
4d:77:f5:70:dc:9d:fb:99:87:aa:ff:87:db:da:c9:02:6f:73:
7a:58:72:a1:8b:b9:24:ac:c5:a4:35:7c:ab:a6:52:dc:4b:cf:
f1:71:80:9b:da:c5:ea:ac:61:a6:ba:c2:b1:c3:f5:05:ac:d3:
48:1f:79:ac:d3:2e:3d:f4:4d:52:82:41:f7:63:d6:1a:5b:6a:
6f:7d:42:10:96:98:a3:bd:79:23:1f:df:a7:1f:0b:66:26:54:
eb:eb:68:71:5d:9c:5c:9f:c9:e9:8c:98:d8:ac:51:d2:45:02:
66:79:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:48:08 2025 by rpki-client