Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/hxRxnRnpnrDYynQzeySZXOuGCFI.roa
File: hxRxnRnpnrDYynQzeySZXOuGCFI.roa (raw, json)
Hash identifier: Cj60+IRyTsjV4rbrVtqMS/eUMC0Fp1iCOvPzilj3N84=
Subject key identifier: 87:14:71:9D:19:E9:9E:B0:D8:CA:74:33:7B:24:99:5C:EB:86:08:52
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 018CC9BC860D50A630167115F73E44D6F2FD
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/hxRxnRnpnrDYynQzeySZXOuGCFI.roa
Signing time: Tue 02 Jan 2024 10:33:44 +0000
ROA not before: Tue 02 Jan 2024 10:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201150
IP address blocks: 185.101.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 10:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:86:0d:50:a6:30:16:71:15:f7:3e:44:d6:f2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: Jan 2 10:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8714719d19e99eb0d8ca74337b24995ceb860852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:47:33:6f:ba:c9:d9:74:87:fb:3a:88:66:
6b:45:d4:72:41:d0:f5:83:82:b1:f9:7e:08:89:b5:
76:03:08:c3:de:db:8f:d2:28:55:f5:d5:b5:49:60:
95:4e:e0:fa:64:57:55:d9:0d:c0:9d:44:a7:98:b2:
51:b5:4b:35:5e:72:57:b0:36:2e:5d:9b:78:5c:f2:
54:89:1e:81:9a:ee:36:03:54:fb:70:db:4b:6b:dc:
66:86:f7:4f:b1:c9:fa:00:ec:30:17:87:5a:31:1e:
34:ab:51:75:f9:41:d0:ba:ce:a8:3c:0d:3e:8b:9b:
42:21:cb:01:58:70:75:fd:04:6a:d4:d0:04:99:0e:
0c:e6:7b:c0:50:bc:0a:8a:65:f8:83:66:f3:0d:ea:
6e:61:00:84:50:9c:91:6e:8c:8c:cb:6b:2f:c3:27:
ca:3e:f3:06:b6:87:39:3c:82:ea:2c:46:e6:73:f1:
9e:9b:ac:ea:31:bf:bc:16:42:3d:9e:a0:09:fc:8b:
a5:59:50:a6:a4:62:ac:89:b0:3d:eb:9f:2f:02:9f:
21:b5:83:7f:f7:d2:1a:12:6c:72:d4:d4:7b:c2:d7:
20:79:c2:63:4b:df:e0:fb:a3:a2:76:b7:ff:b5:0a:
24:83:00:95:bf:f0:9c:b8:c8:ee:bf:d3:1d:eb:74:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:14:71:9D:19:E9:9E:B0:D8:CA:74:33:7B:24:99:5C:EB:86:08:52
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/hxRxnRnpnrDYynQzeySZXOuGCFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0d:a7:eb:c6:ec:bc:87:36:cf:de:21:44:e8:2e:22:9a:fa:
5f:57:55:2d:8a:fd:9a:d9:c2:de:87:b2:c0:b2:87:1e:1c:9d:
72:82:9d:51:26:6a:c6:50:6e:df:f8:90:f9:f0:77:23:12:f0:
31:e5:ef:d6:2f:4a:69:27:fd:25:b0:09:f9:ef:a5:22:60:12:
c7:76:3d:9c:c2:8e:2c:95:6b:b2:13:c8:4b:22:30:dc:d5:df:
68:e2:77:c5:7e:17:c5:ad:e2:c3:72:6e:de:d8:62:38:0d:d0:
39:3e:a2:9b:e1:54:1f:2e:4d:7b:1c:74:4c:bb:c1:9b:ca:81:
14:bd:13:cf:7c:77:a5:87:4b:d5:f2:3c:2a:ce:b1:50:00:b0:
50:99:1f:50:14:be:f2:5d:6e:9a:f1:a3:55:bc:2e:ce:96:d2:
e4:bb:cd:63:3a:ac:75:f0:9d:22:8a:93:ef:e6:d6:f9:21:f7:
43:3c:61:5f:f2:7d:56:00:a0:19:98:63:5f:c5:11:b0:e6:b9:
d7:36:e3:a6:0b:bf:75:ec:3a:d2:c6:7b:98:a9:d7:8a:9d:57:
25:06:e5:f9:f6:2e:35:06:b7:e5:2e:18:7c:0a:4d:4d:3d:97:
07:a8:79:18:2c:59:59:25:47:85:36:90:1e:b3:6a:9a:fa:67:
ed:c2:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:51:40 2025 by rpki-client