Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/H30RtxoYIxRSD4CT-gh4vDGQnrI.roa
File: H30RtxoYIxRSD4CT-gh4vDGQnrI.roa (raw, json)
Hash identifier: yws1XoHDaQAy5/JyX9Vo8fzCxAktjNe8wGLgK4Xafog=
Subject key identifier: 1F:7D:11:B7:1A:18:23:14:52:0F:80:93:FA:08:78:BC:31:90:9E:B2
Certificate issuer: /CN=17ec31441691b859b347fd17217a5e5d1b0be303
Certificate serial: 018CC7935DCAB8FC93AE09D2ABFF983E9ADA
Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/H30RtxoYIxRSD4CT-gh4vDGQnrI.roa
Signing time: Tue 02 Jan 2024 00:29:32 +0000
ROA not before: Tue 02 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 194.107.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:5d:ca:b8:fc:93:ae:09:d2:ab:ff:98:3e:9a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303
Validity
Not Before: Jan 2 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f7d11b71a182314520f8093fa0878bc31909eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:f1:64:12:e0:6a:1c:1c:f7:f0:07:ab:45:
ea:a3:62:24:fd:03:ec:04:54:0d:cb:53:7f:48:b5:
d6:85:8c:dc:92:53:29:f8:64:41:27:8f:1d:47:73:
87:b0:28:6a:0f:b7:22:7d:ee:ff:10:06:ca:bc:f4:
b5:3d:e4:82:ed:88:55:39:43:cd:6c:17:ec:36:c5:
b5:32:d1:28:c3:d9:df:cf:51:82:f4:04:4f:ae:be:
9b:7a:87:87:24:db:69:7f:bd:35:97:96:91:7d:37:
b1:29:af:31:c7:b5:90:ca:3c:75:b9:56:17:d8:bf:
70:f5:0f:a9:4a:3d:0a:c6:ed:f5:e1:59:7f:12:57:
21:0d:0f:d5:4a:ec:4f:e5:c4:7b:2b:ab:31:72:5c:
85:4f:3e:b2:06:03:e9:94:e8:28:ff:16:0a:8c:8c:
a0:bb:60:9b:50:90:0b:db:0c:d0:96:8c:42:e7:67:
c9:a1:6e:52:60:52:aa:88:c7:3f:57:b7:36:04:dc:
2f:9e:98:77:b6:14:27:41:67:7f:0d:b7:d1:79:16:
5b:86:37:8c:98:aa:60:81:cb:31:4a:90:3d:37:e4:
c0:a0:8a:3d:c7:e2:8e:c4:08:16:a9:1b:70:a0:59:
05:3c:e3:a9:9f:f1:fa:8f:57:04:89:0c:12:32:3a:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7D:11:B7:1A:18:23:14:52:0F:80:93:FA:08:78:BC:31:90:9E:B2
X509v3 Authority Key Identifier:
keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/H30RtxoYIxRSD4CT-gh4vDGQnrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.126.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d0:ed:10:a4:9a:5c:8b:94:b5:86:c6:f5:53:89:3b:38:e5:
6c:90:fd:93:bf:9b:3b:0b:95:5c:18:99:b6:eb:46:32:60:b6:
a9:8c:83:77:eb:38:41:71:d7:22:a1:e7:7a:5a:a7:d5:78:75:
ce:bc:ec:35:9c:bf:c3:a0:ac:cd:32:3b:cb:01:37:dd:65:15:
08:df:ee:66:96:93:cf:84:4c:8e:5a:0f:31:08:a0:1b:54:ee:
5f:74:f1:e2:14:a6:a2:3f:1b:ff:af:c7:6b:93:96:ba:a5:94:
05:2e:6f:c0:2a:aa:9b:38:07:8a:02:88:df:41:47:41:df:7b:
6a:8c:07:fc:d3:b6:18:7a:44:ae:32:8c:57:5b:83:c3:5c:9d:
d0:77:8c:a8:67:b3:c7:a4:c0:fc:8c:86:88:b7:ee:13:fc:ca:
73:aa:7f:09:5e:02:e5:9c:85:93:7a:92:75:4d:ce:ba:8f:84:
f5:52:12:c5:37:ab:8e:24:25:cc:2e:27:50:bb:f9:a4:a6:22:
b5:d1:78:92:7a:74:64:26:96:12:50:7f:cd:3f:f7:21:c5:f9:
c2:ae:96:03:7c:f8:51:7a:06:16:8c:65:1b:39:a7:b7:23:51:
aa:3a:a1:e7:bb:91:e5:42:fc:e7:7a:ee:9b:dd:e6:a7:5a:16:
23:51:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:29 2025 by rpki-client