Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/VrhIJtc15DGMkDMkcar9JzzqBGI.roa
File: VrhIJtc15DGMkDMkcar9JzzqBGI.roa (raw, json)
Hash identifier: Ht+k5tKIZWqL0+48E54gHUhHu0lSbn4Trz0/cM60FDc=
Subject key identifier: 56:B8:48:26:D7:35:E4:31:8C:90:33:24:71:AA:FD:27:3C:EA:04:62
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 018CC86F3C702C72F3BED48193E3DF605647
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/VrhIJtc15DGMkDMkcar9JzzqBGI.roa
Signing time: Tue 02 Jan 2024 04:29:42 +0000
ROA not before: Tue 02 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13041
IP address blocks: 193.242.98.0/24 maxlen: 24
192.94.163.0/24 maxlen: 24
84.88.0.0/15 maxlen: 18
2001:7f8:2a::/48 maxlen: 48
2001:40b0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3c:70:2c:72:f3:be:d4:81:93:e3:df:60:56:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Jan 2 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56b84826d735e4318c90332471aafd273cea0462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:10:13:17:b3:5c:a2:98:52:75:f5:7a:4d:c7:
18:19:e4:33:11:0d:ca:1c:af:2b:37:6d:cc:99:4e:
11:78:eb:a0:cd:0c:70:9a:b7:62:83:31:bd:cd:49:
a3:75:ee:53:49:63:d8:0f:27:95:88:b5:82:b3:40:
ae:a5:60:2b:e3:58:6a:cf:1b:6b:83:bc:7d:b0:49:
ba:5a:9c:1b:96:29:11:1b:e7:b4:b2:4f:4d:4f:82:
66:98:91:20:2d:86:13:6e:48:5c:a8:ea:bf:d1:6d:
c1:f9:9a:cb:8a:81:05:c6:61:fe:41:54:ae:68:75:
cd:44:c3:e7:41:55:58:35:6f:86:04:40:62:00:87:
b9:ec:72:04:81:b5:5f:02:d3:4f:85:80:59:5f:e6:
a7:bb:d2:d6:59:ce:9f:b8:ce:c0:5a:61:55:f1:cb:
b6:36:87:29:6a:1f:45:5a:19:63:9e:03:81:1f:5d:
64:1b:a7:eb:ff:2b:75:0b:d4:cb:11:55:07:bc:af:
d7:42:58:0b:fc:ef:ff:59:18:33:bf:89:a5:9b:55:
9e:cd:e2:7c:8b:b9:16:fc:5a:a3:f7:83:5b:15:12:
43:b3:4c:36:05:59:62:29:6b:39:06:dd:37:ec:a8:
15:27:12:48:6d:fd:2c:b4:28:62:7e:df:05:07:4d:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:48:26:D7:35:E4:31:8C:90:33:24:71:AA:FD:27:3C:EA:04:62
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/VrhIJtc15DGMkDMkcar9JzzqBGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.88.0.0/15
192.94.163.0/24
193.242.98.0/24
IPv6:
2001:7f8:2a::/48
2001:40b0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:17:85:df:11:e6:80:f5:b0:63:aa:7f:49:fb:e2:27:d6:72:
86:c5:5d:e3:7d:97:8f:79:55:2e:1d:c4:2d:d2:84:5f:9b:53:
38:d2:c3:96:3b:09:4e:01:cd:0a:61:56:e6:8e:d3:7a:6b:82:
7b:1f:51:ba:c1:a5:0f:f2:7c:51:d4:6c:2e:55:66:3c:1f:55:
93:db:20:36:bc:41:cf:d6:a9:83:26:03:62:83:0b:c8:b1:8f:
15:95:4a:b0:9b:49:ca:93:bb:f3:e3:b2:7b:8f:8a:a3:40:a8:
5d:45:75:41:3c:50:5a:8e:0e:0f:70:0c:4f:a7:50:ce:2f:5a:
aa:e6:ee:51:dd:47:6f:d5:1c:d8:bf:9b:a0:67:05:e5:4f:c8:
8e:5f:4b:39:8d:79:d4:f9:3a:a6:15:28:4f:fc:21:56:8c:f1:
77:45:09:5a:ff:23:4d:4e:fa:b0:f0:21:a9:f7:22:d2:d4:33:
8e:85:68:75:d9:97:fa:e0:df:0a:39:98:44:7e:37:e1:ec:e2:
01:3d:76:50:5f:39:34:6f:18:9f:81:60:2b:4d:8c:9b:6e:6c:
ec:a7:e0:cb:38:63:ce:0d:d2:44:6b:88:de:ed:6d:ea:00:5d:
ff:dd:e0:cf:16:d8:a1:cd:12:fd:39:37:b3:a7:5f:5d:af:c9:
3a:21:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:12 2025 by rpki-client