Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ha0Oy0devjmZmP3fvDuLTsOOAOc.roa
File: ha0Oy0devjmZmP3fvDuLTsOOAOc.roa (raw, json)
Hash identifier: pa4NDpK3K7DL/mUuezp0s7ZAn4Qno4uB1Wj5rXOAYuo=
Subject key identifier: 85:AD:0E:CB:47:5E:BE:39:99:98:FD:DF:BC:3B:8B:4E:C3:8E:00:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192532E32AAF2842A538EA86DCD8F53C047
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ha0Oy0devjmZmP3fvDuLTsOOAOc.roa
Signing time: Thu 03 Oct 2024 16:19:49 +0000
ROA not before: Thu 03 Oct 2024 16:19:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 194.105.90.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 08:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:2e:32:aa:f2:84:2a:53:8e:a8:6d:cd:8f:53:c0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 3 16:19:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85ad0ecb475ebe399998fddfbc3b8b4ec38e00e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:84:96:13:9e:65:63:e1:f4:52:72:0a:d0:
a1:98:6c:7c:18:8a:3c:83:0b:01:b2:7a:d8:aa:db:
04:b9:6d:14:03:b9:1f:f9:a3:24:67:0e:17:cf:c5:
2f:49:2b:bb:10:0e:5c:0a:7d:06:6f:32:7a:dd:00:
83:4c:b1:f2:6a:96:8a:4e:ad:d9:5f:2e:11:fd:44:
28:4d:08:fd:cb:be:a9:b5:b3:1a:a3:0d:72:64:3c:
1b:06:bf:8a:b0:00:d8:1d:4c:8c:a6:f3:6e:49:49:
1a:86:db:96:88:40:b4:4d:e2:ed:54:c1:67:5d:d2:
18:ca:5a:b1:bd:c0:2e:e9:29:70:06:1b:e6:d5:29:
d4:ee:56:49:f8:ad:77:19:eb:ff:ac:83:c3:0d:6f:
44:aa:78:5f:d9:73:60:9e:b5:27:64:e0:c3:53:1b:
0a:61:6a:cf:ed:f6:6b:88:1d:0b:12:fa:41:85:ed:
21:a3:f6:c0:1e:05:68:b4:1b:9e:fc:00:75:2b:77:
36:74:89:20:97:61:e9:b1:12:b0:be:bb:07:7b:44:
14:2b:0d:12:85:75:f0:cf:b9:cb:71:54:ce:47:06:
2e:86:4d:4b:8c:b4:27:d2:5f:4e:04:05:e8:9c:35:
70:ae:3e:08:84:40:c1:60:10:ca:9a:a3:00:65:84:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:0E:CB:47:5E:BE:39:99:98:FD:DF:BC:3B:8B:4E:C3:8E:00:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ha0Oy0devjmZmP3fvDuLTsOOAOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.90.0/24
213.130.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:12:fb:7c:52:e2:13:fb:94:92:05:30:fe:7d:4d:d0:ce:63:
b8:2f:40:86:2a:8a:c6:26:21:94:51:bd:07:a3:8e:b6:62:42:
9a:fc:c3:bd:1a:3b:fb:97:4f:1f:b0:e7:37:65:02:6c:40:8b:
6f:60:fd:58:f2:b4:7a:ef:c9:36:02:ff:4a:34:61:64:d2:c5:
53:c1:cb:e0:20:62:72:7c:77:88:3e:b7:bb:d4:90:45:67:4a:
72:20:65:f3:54:a0:9b:46:c6:16:0d:34:8e:c9:6c:43:3e:a4:
d8:eb:10:65:1f:f3:3b:98:68:34:ff:fb:87:4d:f1:a4:1c:92:
bf:59:ec:18:a3:91:63:23:b8:48:82:3c:b6:6f:16:44:9e:f1:
1b:25:ba:29:29:cb:06:12:7b:49:1a:c1:e3:46:b4:69:8a:2c:
ac:2e:93:cd:2c:47:b1:8c:70:60:30:71:f4:d9:bd:d6:ba:e8:
dd:bf:e7:64:7e:28:6f:0b:96:89:c0:7b:e5:57:de:cf:70:ac:
01:36:e3:7b:2f:c9:77:c4:26:66:22:bf:4f:e6:d6:e3:8f:66:
52:a8:bb:03:55:36:5d:c9:8a:42:47:16:67:49:be:fe:83:1c:
b7:0e:d1:c1:f8:9a:3b:ac:92:ed:d9:d9:b4:93:e5:76:38:10:
87:a1:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 15:09:06 2025 by rpki-client