Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/hc6xUAbezua8TTaQnHcCpYQ8tmM.roa
File: hc6xUAbezua8TTaQnHcCpYQ8tmM.roa (raw, json)
Hash identifier: jM0xzuo9lhkc+I9Xbv4OzTyiQdwGOsRi1hEf7S07tZI=
Subject key identifier: 85:CE:B1:50:06:DE:CE:E6:BC:4D:36:90:9C:77:02:A5:84:3C:B6:63
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 018EC44E1539861DCB73F607273E696BBCD7
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/hc6xUAbezua8TTaQnHcCpYQ8tmM.roa
Signing time: Tue 09 Apr 2024 19:20:35 +0000
ROA not before: Tue 09 Apr 2024 19:20:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15626
IP address blocks: 193.238.152.0/23 maxlen: 23
193.238.153.0/24 maxlen: 24
2a05:9407::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 07 Jun 2024 12:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:4e:15:39:86:1d:cb:73:f6:07:27:3e:69:6b:bc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Apr 9 19:20:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85ceb15006decee6bc4d36909c7702a5843cb663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:db:5b:6c:d5:1c:2c:8c:c6:46:13:f1:04:
14:b6:e6:89:9d:c7:f4:ff:65:77:33:4b:a9:30:f6:
9d:c4:bc:af:64:a8:1d:6d:f4:75:a7:09:1a:a8:aa:
43:d4:25:39:b1:55:a9:60:08:c9:8d:94:f7:6b:10:
5d:9f:19:d1:34:5a:44:38:7a:8b:24:1a:aa:98:08:
59:3b:0b:b7:95:bb:9f:69:6f:9b:0f:b0:78:50:7a:
06:03:8c:91:7e:aa:3e:0d:e2:1c:24:ca:5d:64:be:
53:64:e6:10:1a:3a:f9:82:b9:da:2b:c5:33:9f:3a:
42:e3:da:2b:71:2b:6a:27:bd:a6:10:f8:a3:eb:56:
91:9a:10:3e:8b:60:24:30:b7:42:3c:a6:4a:22:3b:
1c:90:62:d7:ad:b0:83:3a:ec:a0:c6:9c:d1:aa:1c:
a5:1f:0e:23:6e:93:2e:a9:28:aa:7e:ab:8b:0f:15:
b0:20:04:4f:3f:ea:57:f4:dd:e5:28:47:fb:a4:f2:
69:ab:35:be:41:e4:fa:f1:bb:1f:6b:d7:00:01:0a:
52:08:36:02:65:7e:52:dc:78:c1:83:b1:10:a8:ae:
1d:8b:3b:1f:c4:8a:a1:f0:70:c0:40:e9:56:01:fd:
31:8f:94:e1:09:f6:41:01:fd:3e:ec:95:a3:6a:c9:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:B1:50:06:DE:CE:E6:BC:4D:36:90:9C:77:02:A5:84:3C:B6:63
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/hc6xUAbezua8TTaQnHcCpYQ8tmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.152.0/23
IPv6:
2a05:9407::/32
Signature Algorithm: sha256WithRSAEncryption
30:b8:08:3e:46:40:72:c5:0b:03:b3:3d:73:44:e1:02:72:3d:
d4:db:9e:49:95:30:a3:e1:15:76:0e:40:df:70:bc:d6:34:30:
ec:b0:03:84:3e:c8:e4:47:d4:87:0c:c4:5e:26:5d:81:28:f6:
8f:76:a6:74:db:84:df:60:a8:07:98:81:c3:4f:76:0a:0b:28:
cf:79:4d:18:46:aa:e0:a3:9a:0f:b2:46:68:a9:e3:45:8f:71:
b4:af:e2:86:26:26:b1:02:79:2b:df:a3:b9:13:76:5f:e2:fd:
9e:33:e2:e2:80:94:b1:04:ca:ff:0a:04:7e:c7:9e:24:38:8b:
fc:8f:30:71:cd:52:ad:fd:9b:17:c2:9f:48:67:12:ec:62:af:
d7:83:17:2c:39:04:df:84:81:02:02:ad:b4:6b:c1:c4:f8:dc:
97:57:17:f9:fb:c7:49:32:7b:3d:bf:90:18:e0:7a:a9:30:85:
43:41:96:0e:4d:bf:38:02:ec:19:9e:23:e4:29:e8:50:bf:87:
d7:f5:11:b6:52:90:e2:22:f6:eb:9c:8d:5d:95:42:84:3a:78:
da:59:e1:bb:c7:15:96:d6:a3:cb:5a:4f:90:7a:5d:2f:fa:67:
94:9b:7a:34:4e:9b:0b:e0:70:94:e1:f3:7c:24:38:77:16:ba:
00:d7:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:22 2025 by rpki-client