Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/hlbBIyTcK6rDdM4CpTZX68UbXp4.roa
File: hlbBIyTcK6rDdM4CpTZX68UbXp4.roa (raw, json)
Hash identifier: o4P1QqYRGpGU6CCD/diIE28ER8KkY1e25BXvTJ4Q3L0=
Subject key identifier: 86:56:C1:23:24:DC:2B:AA:C3:74:CE:02:A5:36:57:EB:C5:1B:5E:9E
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 018F81234D287DF182305728396592F05036
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/hlbBIyTcK6rDdM4CpTZX68UbXp4.roa
Signing time: Thu 16 May 2024 11:22:05 +0000
ROA not before: Thu 16 May 2024 11:22:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208065
IP address blocks: 193.8.40.0/23 maxlen: 23
193.8.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:23:4d:28:7d:f1:82:30:57:28:39:65:92:f0:50:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: May 16 11:22:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8656c12324dc2baac374ce02a53657ebc51b5e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:a8:8d:24:d0:43:ef:52:8a:cd:58:0a:87:
7d:74:45:16:2a:fe:25:0b:f3:70:3f:35:10:04:ba:
ad:4c:ef:be:16:14:b6:07:bb:21:01:49:36:a2:8d:
16:82:70:a6:8f:5f:a3:28:b3:ce:bf:b0:4e:f8:c7:
26:62:e3:e5:f5:0a:b5:af:bc:e3:fb:e9:01:34:7b:
08:5c:f1:4a:b0:6f:7b:28:37:c0:a0:ea:ac:77:7f:
62:c3:81:8f:04:b9:30:3e:10:17:4e:d0:fb:23:53:
80:2f:da:43:d2:3b:f1:be:ac:39:4f:70:ae:06:8e:
fc:9b:3b:c7:35:2c:02:a8:a1:e7:d3:52:ef:97:fe:
74:17:77:53:05:f2:ef:cb:b5:5a:82:81:62:3f:24:
e5:59:37:84:bb:c2:06:6a:64:d3:14:2d:94:bb:d8:
e6:54:7f:cd:b4:05:a0:8f:b7:d9:aa:e3:e1:8a:39:
b5:4a:d5:b3:a3:3e:16:be:35:0b:2a:73:ff:77:75:
df:30:bf:3b:9a:41:69:1c:8c:6b:fd:e3:54:85:00:
94:15:78:6a:f9:89:5d:75:74:ab:68:2c:a4:ed:00:
ed:80:e5:f3:11:78:08:f4:77:6c:cd:b8:4b:06:ba:
f0:0b:c4:1d:58:78:ce:91:5f:e2:2d:5c:e6:2d:3a:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:56:C1:23:24:DC:2B:AA:C3:74:CE:02:A5:36:57:EB:C5:1B:5E:9E
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/hlbBIyTcK6rDdM4CpTZX68UbXp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.40.0/23
193.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:26:a2:5e:51:bc:95:09:c4:9d:84:9c:85:69:d5:60:13:6b:
dc:b6:15:ad:68:e2:21:ed:4a:b7:cc:b5:d0:b3:a3:13:a0:7d:
17:90:b5:b3:b8:aa:a3:b1:09:a7:b0:d2:7b:d8:ca:4f:8d:c2:
55:ce:58:eb:d8:31:ca:3c:53:c7:5c:4d:84:22:b6:07:82:1c:
62:5c:7f:fe:02:72:4a:30:3d:fa:dc:91:82:42:d3:60:8d:c0:
17:64:30:84:71:22:17:19:de:1c:67:22:2f:0a:6e:3c:c1:90:
b8:f8:dc:49:be:bf:2e:82:cf:c1:3b:15:5c:38:c1:01:26:b8:
77:38:6a:27:f0:e5:2a:3a:57:d9:1f:a0:19:c3:bc:f7:de:fe:
14:bb:b3:24:d2:7a:6a:c7:d3:2d:62:86:45:5e:d6:57:d5:ba:
9f:54:4a:e4:28:41:f3:82:8f:2c:88:41:59:c5:36:7c:39:31:
e5:0a:72:28:69:99:11:bc:a4:f1:ee:4c:96:fa:f2:07:39:a3:
22:9e:bd:9a:c0:b2:1e:1a:f9:78:a3:b1:95:e5:7c:74:86:34:
01:2f:ac:a9:8e:53:e2:5f:0c:5b:c2:b3:60:3d:76:c5:29:9b:
6b:b6:8a:c6:4e:8f:89:9c:56:92:fe:5e:2c:52:b6:ec:a7:9a:
46:a3:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:39 2025 by rpki-client