Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/HEStv6tnaY7YwaTe4TK7IuZL3l8.roa
File: HEStv6tnaY7YwaTe4TK7IuZL3l8.roa (raw, json)
Hash identifier: ONMoJ22SSpvtaa4VrEgXGRCK+JNXFoBMveLSYRguPvY=
Subject key identifier: 1C:44:AD:BF:AB:67:69:8E:D8:C1:A4:DE:E1:32:BB:22:E6:4B:DE:5F
Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial: 018CC56EFD51D6F4AADD1D7B4251A62C5D39
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/HEStv6tnaY7YwaTe4TK7IuZL3l8.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207251
IP address blocks: 109.235.194.0/23 maxlen: 23
109.235.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fd:51:d6:f4:aa:dd:1d:7b:42:51:a6:2c:5d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c44adbfab67698ed8c1a4dee132bb22e64bde5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:dd:29:3c:6b:b1:93:6c:dd:74:7b:6f:04:
b0:16:fc:94:8d:7f:a5:73:93:5d:4b:13:43:ff:a1:
ce:59:e9:d8:8c:b6:0e:37:51:8d:5f:20:22:06:3e:
a6:88:4a:97:20:30:39:26:b2:0b:ca:25:c4:2c:16:
bb:77:58:de:e2:4f:75:ac:7a:e4:51:40:49:64:74:
c5:4e:3f:1e:6d:11:7c:7d:d6:c1:d2:38:84:4c:29:
6f:2d:92:88:54:87:b6:04:fa:03:03:89:91:81:7b:
4c:96:c1:32:e8:36:e7:6d:fe:b7:05:50:5d:fe:bf:
ad:1c:1f:72:93:c6:5e:6f:d1:5b:53:26:44:f5:88:
1e:09:a1:90:9e:83:31:5e:2a:4a:58:5d:94:f4:74:
d9:4f:90:9e:41:3e:6b:2f:08:5d:a5:53:8c:30:83:
70:d5:3d:cf:a8:c7:63:05:5b:9d:16:58:35:c0:ec:
0a:00:cd:e5:c2:89:ea:59:e6:41:cb:15:8a:87:f3:
8c:d3:19:81:2c:d0:51:1f:68:51:69:4b:72:b4:21:
4f:06:87:73:e0:03:0d:6a:f2:98:8e:7f:8e:30:b4:
45:27:70:b5:14:38:16:00:f5:3c:f7:e5:f5:b1:00:
86:ba:92:ac:dc:ae:2b:d7:80:bd:b8:c3:6c:bc:d3:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:44:AD:BF:AB:67:69:8E:D8:C1:A4:DE:E1:32:BB:22:E6:4B:DE:5F
X509v3 Authority Key Identifier:
keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/HEStv6tnaY7YwaTe4TK7IuZL3l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.194.0-109.235.196.255
Signature Algorithm: sha256WithRSAEncryption
65:ed:4b:12:9d:06:e7:06:75:22:a0:90:75:0f:26:ec:25:90:
bf:76:4b:71:d2:91:ed:d3:e8:43:8d:96:89:d3:8f:f4:69:45:
ea:9f:50:05:92:9c:fb:52:34:1f:fa:05:86:a4:57:9b:54:44:
37:f8:49:53:58:a4:b0:b2:3c:02:7c:8b:1f:4e:22:1c:02:fa:
e4:93:39:10:25:5d:8e:ce:1e:c3:ce:12:5e:8e:27:96:c4:7b:
20:7a:29:5c:38:60:ca:80:5c:be:13:47:0d:e2:8d:f1:cf:0f:
a2:f3:1a:60:7e:9c:7f:36:73:64:9b:be:77:5a:72:86:5a:81:
f2:8a:f2:1d:26:ca:31:24:91:09:90:67:8f:5e:1f:ef:61:96:
ed:f5:f0:ae:02:40:c3:17:51:be:b7:c2:50:10:1a:cc:ef:6d:
9a:b9:0a:22:6b:4e:3d:0a:31:c9:36:e1:cc:5b:b4:06:fe:24:
a7:67:26:b5:4c:65:be:c2:e8:3f:44:5c:50:97:8d:69:6b:20:
23:4d:8e:a4:4d:71:ea:c8:ba:57:01:51:00:24:1b:5f:49:15:
6f:9e:6d:45:fb:00:77:13:f3:3a:f6:58:98:ba:af:6c:89:5e:
d4:97:16:07:92:7b:ed:0b:54:4e:ac:9a:06:32:44:c9:b5:89:
74:57:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:12 2025 by rpki-client