Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/HdhPsxmY6-h3CRZyyqPcmight5s.roa
File: HdhPsxmY6-h3CRZyyqPcmight5s.roa (raw, json)
Hash identifier: bvPT4It08QDUIvf6SCFDEk3kxLcb/xg/GnXU5g4LV00=
Subject key identifier: 1D:D8:4F:B3:19:98:EB:E8:77:09:16:72:CA:A3:DC:9A:28:21:B7:9B
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 018CC56DE562D3958E88FD1707C864A42D38
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/HdhPsxmY6-h3CRZyyqPcmight5s.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 37.9.176.0/21 maxlen: 24
185.20.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e5:62:d3:95:8e:88:fd:17:07:c8:64:a4:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dd84fb31998ebe877091672caa3dc9a2821b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:ed:46:c0:0f:81:fd:7a:53:e7:bf:90:2a:
d5:ce:3a:ce:b0:6e:21:d3:04:86:11:7a:e8:8c:9f:
f1:c8:6b:00:7d:58:80:a8:25:fe:41:ef:90:93:e1:
a6:72:0e:d0:23:6c:2e:53:f8:81:3a:da:48:be:07:
74:66:5f:b1:dc:9c:80:df:fc:79:4f:64:3a:87:30:
1a:c5:a4:7d:4a:cd:03:88:03:21:db:ab:0d:cb:05:
bf:2d:73:ef:4e:c6:14:d9:52:7b:04:34:5d:96:e7:
dc:bb:68:0a:2b:8f:0f:55:40:b7:c7:7b:b7:69:a2:
af:7c:f0:d7:0d:b0:7c:ca:ed:ba:4f:ab:33:bf:a0:
b7:36:39:e0:bf:a6:fa:ea:a0:8c:77:10:81:01:bd:
d3:2d:9b:15:8e:d2:a5:fe:c6:4b:7f:19:88:d1:ff:
5a:37:8f:2a:ee:aa:82:00:05:ee:fc:a2:ca:d7:4a:
fb:9f:bc:50:d2:f0:b3:b8:a0:17:f8:e1:7f:92:ef:
9a:b0:8f:0b:e7:e3:6d:f0:96:5e:7a:82:19:89:26:
04:be:98:99:5c:42:89:5e:88:06:a1:db:4c:34:d6:
05:ef:b2:b3:e5:73:5d:42:12:1c:af:a3:0d:f5:66:
59:c1:78:88:7c:eb:9e:9d:a8:ad:87:56:f1:c8:f5:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:4F:B3:19:98:EB:E8:77:09:16:72:CA:A3:DC:9A:28:21:B7:9B
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/HdhPsxmY6-h3CRZyyqPcmight5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.176.0/21
185.20.212.0/22
Signature Algorithm: sha256WithRSAEncryption
87:65:bc:80:e6:2a:96:64:d6:79:25:76:4f:0d:d2:a1:c5:fa:
6f:08:e4:6c:41:89:0d:eb:0d:8d:6b:c6:81:4b:12:d4:af:9e:
fc:f1:80:8a:a6:9c:0c:04:f4:4a:c6:70:b7:f9:62:30:61:23:
4f:36:34:af:33:3a:f4:1e:75:23:98:8e:38:81:3c:a8:7f:6b:
67:67:54:77:2c:20:2b:f9:0c:34:13:77:ff:2f:f5:6c:05:d6:
85:35:ec:e4:37:7b:16:ba:6b:8f:c5:3c:f6:e2:b7:de:46:b2:
e0:20:28:70:74:b7:15:09:bd:49:0c:bd:64:86:12:d9:7d:0f:
61:a3:f5:06:89:57:7c:c2:72:b7:5c:af:31:47:28:2c:c2:3a:
89:c3:0e:eb:52:92:1c:d1:cc:10:72:bc:b4:40:c4:a7:05:ef:
96:4e:00:d1:91:5b:2f:3b:47:dc:ec:29:44:0e:56:2a:68:12:
80:74:55:5c:4b:cd:0e:80:a0:de:cd:81:bb:b2:4e:ca:77:bd:
88:e0:0a:66:47:eb:e1:e7:e4:e1:f9:b2:6a:bb:8c:c0:36:0b:
e8:e5:15:8c:08:ff:b6:c1:10:49:cb:81:f1:2e:14:95:ac:11:
cd:1d:59:74:6e:97:96:80:d2:33:9d:6f:65:66:36:9a:35:59:
fc:59:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:47 2025 by rpki-client