Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/fhd0lfw2yW9yUQ73V9LFehenRLY.roa
File: fhd0lfw2yW9yUQ73V9LFehenRLY.roa (raw, json)
Hash identifier: C9ZJFKW4UKEM/TlOkXFs4caqUQRFayN85zol2FxAB7s=
Subject key identifier: 7E:17:74:95:FC:36:C9:6F:72:51:0E:F7:57:D2:C5:7A:17:A7:44:B6
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 019421B1D7B04038E49045957DE5DAA171C6
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/fhd0lfw2yW9yUQ73V9LFehenRLY.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.253.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 11:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d7:b0:40:38:e4:90:45:95:7d:e5:da:a1:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e177495fc36c96f72510ef757d2c57a17a744b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:2d:63:b4:4b:95:21:b7:7f:51:51:61:d3:
b5:f2:b4:68:7c:80:86:5b:62:ae:07:a4:38:8b:3a:
4e:cc:25:46:ec:4e:b7:93:4e:f2:ba:6f:25:57:fb:
16:c8:d9:7f:fd:b5:eb:3e:74:12:b6:13:3e:70:6e:
95:f1:c6:bc:30:42:58:b6:30:70:de:d5:40:48:d8:
f7:f4:2f:61:0a:8d:32:8a:b9:ed:94:f7:fe:ae:60:
81:f3:a8:60:59:1c:33:96:8a:c8:d3:fb:36:48:17:
dd:b2:74:f6:bf:a5:0f:1b:ff:6b:ba:8d:6f:9c:94:
bf:f0:05:04:94:6e:e3:5e:ad:92:38:0f:3b:57:78:
9e:3c:27:40:aa:32:32:f4:c0:f6:06:3a:c6:8b:b1:
62:a4:38:06:74:64:e5:6c:ff:35:0e:5e:72:da:29:
64:40:45:e2:82:26:05:81:8e:97:95:52:7a:ac:8e:
52:7f:8b:38:42:9a:5e:68:88:ef:eb:54:dd:21:7f:
4c:22:c0:c8:25:9c:3c:76:69:02:4e:cc:de:b1:f9:
5e:af:a6:48:ab:dc:bd:06:4f:99:37:ac:a2:8e:ba:
b1:65:96:20:c6:56:a2:30:87:c5:cd:4b:8a:79:39:
93:f0:56:8c:e7:c3:8b:0a:79:8d:60:f9:3e:b2:12:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:74:95:FC:36:C9:6F:72:51:0E:F7:57:D2:C5:7A:17:A7:44:B6
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/fhd0lfw2yW9yUQ73V9LFehenRLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
72:44:63:7f:e4:93:7f:41:2d:96:4d:fe:cd:58:1f:da:0a:80:
99:17:ce:e5:74:13:b1:ec:78:81:77:b9:44:fe:3c:f1:6b:10:
fe:5c:24:d2:ce:b4:88:1c:ef:a5:ce:6c:c7:2b:65:ce:d1:d2:
24:46:5c:cb:9b:75:2a:4c:04:9e:43:5e:1d:6f:5c:80:7c:54:
68:ab:fa:18:78:7b:84:c4:f7:40:55:81:1e:cd:79:a2:79:66:
c0:ec:b1:55:a7:77:41:d3:71:e4:ff:2a:56:1b:e8:00:9f:2e:
0b:30:ea:ed:07:73:a2:96:43:52:c2:3c:cf:03:45:9a:28:7a:
20:27:bc:45:94:cc:a1:cc:18:44:76:61:56:18:6d:05:f2:dd:
f8:aa:16:3a:af:3d:e7:6f:1f:c7:ba:c8:8b:e8:f7:77:bd:31:
21:ea:46:d8:7d:3a:da:23:cc:d8:da:9e:d7:88:e4:29:e2:f7:
f6:68:53:4d:57:34:20:aa:dd:a2:67:73:f1:88:2e:a4:75:81:
74:61:b3:36:fc:e9:4a:35:79:89:28:74:ae:65:46:66:95:4d:
c6:d1:72:02:a5:64:62:2b:c6:cb:b2:b0:05:62:64:b9:fb:46:
b9:59:c7:2e:6d:d8:3e:c8:bc:f1:95:5b:c0:6d:6d:4d:70:b3:
73:08:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:59:28 2025 by rpki-client