Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/1HyTzgbB5iUWXmCFnhJ70pD6qOo.roa
File: 1HyTzgbB5iUWXmCFnhJ70pD6qOo.roa (raw, json)
Hash identifier: uB0VTa90SiAx2UnPOC4oJv8C3qHE8MElDFRRNPkDtpo=
Subject key identifier: D4:7C:93:CE:06:C1:E6:25:16:5E:60:85:9E:12:7B:D2:90:FA:A8:EA
Certificate issuer: /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial: 018CC64B05694430FCCB3468661AA60DD2D1
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/1HyTzgbB5iUWXmCFnhJ70pD6qOo.roa
Signing time: Mon 01 Jan 2024 18:30:54 +0000
ROA not before: Mon 01 Jan 2024 18:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210837
IP address blocks: 185.136.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 12:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:05:69:44:30:fc:cb:34:68:66:1a:a6:0d:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Validity
Not Before: Jan 1 18:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d47c93ce06c1e625165e60859e127bd290faa8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:f3:41:dd:b6:cb:9f:41:cf:9b:6a:58:20:
59:5d:8c:5b:b2:71:f7:4d:70:aa:df:b4:f1:3e:ef:
1b:0f:0e:e1:d1:3d:46:39:6b:c5:8d:fb:e5:80:97:
47:a8:e4:bb:94:0e:d7:b4:b2:d0:d4:53:31:fc:cd:
ce:9a:18:b7:d7:39:12:2c:d7:9e:4d:b8:a4:14:cc:
9b:c4:38:25:0a:f3:01:cd:e3:29:48:3d:72:76:3d:
e6:bd:f3:43:8e:28:10:73:8b:52:01:fa:07:ee:b1:
29:c4:1d:5c:2f:ca:ae:3b:f4:20:30:b4:a6:c4:f1:
56:e3:b0:8c:da:d2:b3:e6:a3:32:7c:e1:1d:52:55:
01:25:ee:9a:7b:42:37:f4:d3:90:c5:54:f8:88:d2:
4c:44:97:64:55:db:24:a1:5c:d6:89:cf:e6:c5:29:
b1:d4:3b:d3:6d:25:73:20:79:3a:c9:19:59:eb:e4:
43:b0:a1:ed:16:61:5d:46:4a:40:cd:8f:7f:21:c5:
0b:72:91:7c:be:7e:b3:82:d7:df:63:c7:2b:de:7c:
03:03:c0:10:dc:a8:93:f8:45:21:5a:3d:d4:79:d2:
8c:56:c3:b7:fd:95:30:70:b1:94:77:85:d9:73:ff:
13:68:e3:99:e3:88:8e:5c:3b:fa:bb:7c:fb:94:8f:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:93:CE:06:C1:E6:25:16:5E:60:85:9E:12:7B:D2:90:FA:A8:EA
X509v3 Authority Key Identifier:
keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/1HyTzgbB5iUWXmCFnhJ70pD6qOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.240.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:de:78:a5:c6:18:52:e1:b6:02:43:b0:5f:b2:5b:27:85:53:
2a:7b:ab:bb:21:d9:79:78:43:3c:6c:08:34:7b:f0:95:3e:05:
e8:5d:34:68:7f:0d:27:2d:75:2d:4a:ae:78:1e:1c:4b:6a:22:
87:6d:c3:c3:b0:da:13:7b:49:f8:80:7e:ba:07:84:52:8c:e1:
3c:20:53:a3:1d:88:78:73:b7:49:e4:dd:27:2d:ce:8f:5e:ec:
31:39:8b:eb:05:f7:da:b5:8e:b4:19:f4:2b:a0:fe:52:31:45:
93:d2:16:7a:29:c2:37:b4:f5:92:dc:c2:88:cd:71:ba:44:35:
62:7e:cd:f9:50:43:db:4c:97:50:3f:83:56:36:0c:ef:8f:da:
8c:b4:76:e8:df:e8:f1:68:69:6c:d3:a7:55:68:dc:31:1c:d2:
27:1e:0b:b6:38:72:a7:5b:30:15:5f:81:4a:67:66:cd:7e:8f:
03:83:b5:54:ba:b3:15:d9:19:bc:c5:dd:6b:27:20:73:03:c1:
fd:e6:77:43:58:77:03:35:2e:24:99:1a:74:97:c3:44:bc:db:
f1:10:e8:3a:b7:28:15:ec:6d:13:a1:af:b9:ba:64:b3:00:e4:
63:97:d2:62:39:a5:56:70:52:5e:c6:fa:5d:fc:ee:f1:d1:a3:
1d:d1:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:58 2025 by rpki-client