Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/HFG8crhZqa0VsgcF-yIQkWC8mZA.roa
File: HFG8crhZqa0VsgcF-yIQkWC8mZA.roa (raw, json)
Hash identifier: WPdm44zOYPzXFKc15xniunD9XsLapQclqpWLTCd20mQ=
Subject key identifier: 1C:51:BC:72:B8:59:A9:AD:15:B2:07:05:FB:22:10:91:60:BC:99:90
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018EEC6FFD5516B981A2050927EDBD7205A9
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/HFG8crhZqa0VsgcF-yIQkWC8mZA.roa
Signing time: Wed 17 Apr 2024 14:22:26 +0000
ROA not before: Wed 17 Apr 2024 14:22:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50469
IP address blocks: 82.206.24.0/21 maxlen: 24
82.206.64.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:6f:fd:55:16:b9:81:a2:05:09:27:ed:bd:72:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Apr 17 14:22:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c51bc72b859a9ad15b20705fb22109160bc9990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:9f:4c:27:c3:30:72:b1:6e:28:c8:e6:91:
07:a9:34:d5:3d:3f:95:b4:66:a2:99:c8:92:26:a7:
25:ea:6c:7a:3f:5f:60:2f:6d:1f:1f:86:0a:6a:a1:
6f:42:8d:75:82:22:3a:9d:ad:25:65:bb:3f:97:0e:
2d:dc:bd:31:37:33:b8:15:c9:98:ad:25:0d:60:8c:
37:6c:4f:b3:5a:b4:d2:3d:8a:c3:93:bc:dd:17:15:
9b:1a:60:a9:6d:4d:db:2e:27:06:83:2a:4c:34:43:
8f:e8:ab:f4:f0:2f:54:fc:43:20:83:60:90:e2:d7:
a5:ed:b9:9a:3f:2b:5e:57:53:dd:d8:b8:17:26:06:
9d:41:39:a5:a9:85:51:8b:46:97:2d:e3:0d:9a:0c:
68:c6:e0:0e:7f:3c:bf:de:89:e2:35:6c:c4:e0:14:
cc:2e:f8:1e:95:09:28:2d:2e:85:70:13:05:39:41:
c2:08:64:35:fa:a7:07:7d:d5:67:0e:0e:e2:bc:34:
61:fd:37:d9:7e:60:99:19:2b:3b:8a:02:e0:84:cb:
ff:96:62:d4:01:1d:08:b6:89:97:fa:6e:a1:7b:fc:
25:45:65:83:ae:88:dd:50:a3:56:77:e9:8c:9f:2f:
ce:6d:cf:55:21:32:39:bd:df:09:e7:10:9c:09:13:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:BC:72:B8:59:A9:AD:15:B2:07:05:FB:22:10:91:60:BC:99:90
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/HFG8crhZqa0VsgcF-yIQkWC8mZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.24.0/21
82.206.64.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:eb:63:5c:69:b5:f7:ee:d0:45:3e:a6:27:06:28:56:b6:50:
76:d6:60:f5:ad:a8:73:1d:01:92:a4:dc:71:2e:21:13:47:06:
1a:93:41:5a:53:a1:b5:2e:25:d9:17:83:f2:59:69:96:2f:67:
8b:ca:f4:04:af:79:41:a4:ee:ff:f4:df:e8:00:a8:6c:9f:fe:
0b:aa:20:62:71:3b:3c:d2:ae:67:04:1b:6b:a9:e8:61:51:de:
25:50:0e:6a:9a:d6:9b:db:a8:37:06:01:8f:99:96:a7:78:70:
6a:22:60:c6:a8:44:1a:70:54:e0:6e:b2:b3:2e:f2:35:e1:ae:
52:3e:aa:20:a4:79:a2:ff:05:7c:1a:a0:92:c4:7b:75:bb:d3:
86:93:f4:07:22:42:10:6a:00:94:c1:3c:19:8c:89:44:5d:6e:
ce:63:f6:1e:42:ea:9b:c6:a7:2b:d4:ff:2d:72:a2:1e:78:01:
0a:b6:41:c1:ef:5f:9b:e7:cd:f3:ec:22:05:5a:13:5b:36:ae:
05:ff:4f:6c:a6:48:84:45:1e:18:7e:96:25:b9:df:d2:ba:cd:
80:87:d9:5b:58:8e:1e:a7:da:bb:5c:2a:da:da:41:5f:20:83:
a1:d0:79:b1:4c:25:0a:25:fb:a1:cc:25:21:42:98:ed:5f:e4:
58:1a:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:44 2025 by rpki-client