Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/H8QfhlkRYLpNwsRv6anlodLYrO8.roa
File: H8QfhlkRYLpNwsRv6anlodLYrO8.roa (raw, json)
Hash identifier: 93k8+lrOvhM+d+DWeOsqkmRUm/oEg/w/BAiNl0WP0Fw=
Subject key identifier: 1F:C4:1F:86:59:11:60:BA:4D:C2:C4:6F:E9:A9:E5:A1:D2:D8:AC:EF
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 018CC5008DC60DDB194EA8657720E51C23DC
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/H8QfhlkRYLpNwsRv6anlodLYrO8.roa
Signing time: Mon 01 Jan 2024 12:29:57 +0000
ROA not before: Mon 01 Jan 2024 12:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48642
IP address blocks: 91.235.188.0/22 maxlen: 22
109.197.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8d:c6:0d:db:19:4e:a8:65:77:20:e5:1c:23:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Jan 1 12:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fc41f86591160ba4dc2c46fe9a9e5a1d2d8acef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:90:04:9c:7f:ae:19:28:77:63:d3:df:cf:
26:26:0f:48:ff:48:54:e5:f1:6e:90:a1:35:f8:9d:
01:0b:cc:ee:a8:29:74:f6:38:5d:05:ec:3f:03:84:
0c:a2:60:b2:fc:56:60:a0:32:63:44:70:55:73:50:
ea:c2:13:4a:47:a5:71:4a:aa:43:4f:8e:72:7d:4a:
64:29:70:23:ef:5c:7c:18:49:62:22:5d:f8:91:2f:
73:4b:8f:f9:a5:12:2f:6a:b0:28:ea:90:46:99:c9:
27:47:eb:43:b8:af:6d:fa:97:40:0d:99:20:85:cc:
3e:7b:43:b5:10:81:12:33:84:84:99:10:f6:1a:ff:
b9:08:8e:c2:de:74:6e:c1:2a:8f:cb:3f:a3:6a:fa:
f6:86:d7:08:e0:0a:64:21:d4:52:38:71:ab:6d:db:
48:58:98:17:f4:f9:ed:44:33:96:cb:22:07:d2:20:
01:df:8f:d0:75:f3:c3:0e:56:62:74:2d:c2:c8:0e:
56:59:8d:0a:a3:92:b8:08:72:8b:a2:13:c3:5e:19:
70:1b:d3:4e:ee:2b:75:67:a9:d0:4a:f5:89:39:31:
e3:ed:93:c5:77:9d:c0:e6:a8:35:d8:0f:45:1d:7c:
94:d8:8b:22:e5:e4:0d:70:05:f6:77:b4:c9:b3:fb:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:1F:86:59:11:60:BA:4D:C2:C4:6F:E9:A9:E5:A1:D2:D8:AC:EF
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/H8QfhlkRYLpNwsRv6anlodLYrO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.188.0/22
109.197.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:97:74:6c:1f:5c:4c:1d:15:e3:d8:b2:65:35:96:3b:79:fa:
c8:8f:8e:51:f8:b4:6c:37:35:83:cd:c3:c2:44:7a:29:d5:6d:
9d:fc:1b:f6:80:3e:7b:5e:23:c1:26:99:1f:fc:6a:c6:5c:53:
39:9f:0a:67:c9:75:91:f2:b2:8f:84:f2:0a:10:f9:76:c4:59:
37:8b:3c:08:32:15:5b:6f:c8:45:bb:15:7d:fb:da:aa:5b:92:
3e:b3:6e:33:b7:35:77:4d:52:ec:18:09:a2:a4:b4:dd:1b:55:
88:5d:eb:70:62:38:8b:dd:b5:01:58:09:9e:de:ba:39:d9:f9:
35:f4:b6:31:0d:ea:9f:99:c4:8d:83:5b:36:f1:5f:85:30:91:
db:ff:36:ad:4b:24:db:ca:6a:b2:d1:d2:8e:e1:83:7d:0a:05:
ee:29:c3:7e:4c:83:14:79:8e:7e:07:78:b9:62:c3:8a:4d:b9:
52:cf:45:90:ec:b2:cb:91:4b:2f:97:94:f6:76:9c:18:43:ea:
f4:95:0b:60:2d:c1:d4:4f:c9:aa:e7:89:7e:da:cf:8b:18:51:
54:c2:79:30:96:9e:cd:29:77:62:fe:05:4f:55:23:8c:37:b2:
5a:8e:09:32:d3:4a:e0:18:e3:a3:5c:df:45:70:b1:64:4c:06:
ae:2e:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:53 2025 by rpki-client