Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/HpsFfTKtGi4rqUK1Rz9uXSyLppU.roa
File: HpsFfTKtGi4rqUK1Rz9uXSyLppU.roa (raw, json)
Hash identifier: hBsMfaP6du/7snjakhPJ3u8zqclAEHdO/uOfGOXjaaA=
Subject key identifier: 1E:9B:05:7D:32:AD:1A:2E:2B:A9:42:B5:47:3F:6E:5D:2C:8B:A6:95
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 018CC5DC274126B3F3EE34BB400B2C29A084
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/HpsFfTKtGi4rqUK1Rz9uXSyLppU.roa
Signing time: Mon 01 Jan 2024 16:29:48 +0000
ROA not before: Mon 01 Jan 2024 16:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39305
IP address blocks: 37.221.84.0/24 maxlen: 24
37.221.85.0/24 maxlen: 24
37.221.86.0/24 maxlen: 24
2a09:f200::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:27:41:26:b3:f3:ee:34:bb:40:0b:2c:29:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e9b057d32ad1a2e2ba942b5473f6e5d2c8ba695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:78:94:01:ee:b1:b4:9c:83:99:00:00:d4:
3b:59:95:58:a3:e2:27:18:a1:c0:5e:31:95:2c:ab:
c1:c3:ba:ec:b6:2f:7f:4b:35:16:a8:fa:97:db:10:
2a:49:d7:9e:49:55:72:fa:67:20:81:fc:13:10:54:
c8:30:d0:55:ec:0f:6d:e1:04:46:46:e0:79:0e:39:
5f:0f:06:cb:55:2e:f2:c1:bb:e9:7b:4b:01:4a:eb:
1a:c6:6b:da:d8:e4:c0:2d:56:c0:f3:e8:9d:4b:77:
b6:b4:e8:ee:8e:7a:44:1b:05:59:c5:6f:92:8f:57:
34:35:50:07:f2:b8:c7:fb:48:30:4e:b2:2b:e3:d7:
c0:f3:36:51:bd:61:54:e9:43:12:0d:9e:d4:e9:2f:
c9:f5:a3:5f:7e:03:45:dd:d1:2a:d3:2e:44:0a:66:
16:24:39:97:88:6c:cc:84:dc:18:e3:6a:9b:0d:db:
88:7e:c2:80:8c:ed:ae:ae:88:2b:bb:e0:8a:17:19:
28:e3:78:f6:bc:3e:a2:51:d5:8a:44:e1:ec:3a:8e:
85:2f:59:20:da:a7:36:5f:48:47:34:9e:be:28:c2:
9c:e0:96:21:7f:8f:f6:5d:f9:49:31:14:68:f8:76:
79:e4:1c:84:a9:0d:98:a0:80:d2:38:51:00:2a:73:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:05:7D:32:AD:1A:2E:2B:A9:42:B5:47:3F:6E:5D:2C:8B:A6:95
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/HpsFfTKtGi4rqUK1Rz9uXSyLppU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.84.0-37.221.86.255
IPv6:
2a09:f200::/29
Signature Algorithm: sha256WithRSAEncryption
a6:a9:12:36:ad:a9:97:7a:7a:aa:2b:a7:5a:db:fd:44:63:0c:
f1:c6:25:11:5f:b9:e7:0d:59:a6:32:98:bb:01:6f:48:1d:85:
df:39:1d:2c:37:6c:5a:94:57:9d:d7:6f:aa:06:2e:b8:d9:fb:
29:90:88:7e:e8:4c:8c:9f:26:69:b8:99:df:8a:02:cc:70:b7:
c1:65:4a:7c:57:a2:ce:c3:3c:3c:93:b8:2a:b0:c5:b1:9d:c7:
6f:9d:54:d3:8c:48:e7:5f:6e:28:ac:62:7e:4c:ad:c4:05:42:
ee:9e:39:40:b9:3e:6a:43:a5:2b:2a:01:d3:de:c0:b8:88:48:
6d:5e:c5:90:f5:36:7f:65:7e:95:f3:07:e0:8e:04:6a:9c:30:
98:31:16:e7:61:9b:92:8e:13:7c:f8:f6:fb:11:91:d3:fd:c3:
89:a0:a3:c5:32:fb:37:1b:96:ee:39:1e:32:6a:25:a8:e0:06:
c7:52:a7:5b:0e:6b:3e:e6:30:48:0b:1d:a1:95:10:19:b2:b8:
9d:87:de:a1:a2:ee:21:25:1c:8f:0a:82:09:d0:a9:27:77:d9:
d3:5f:64:8f:c8:6c:7d:cb:a1:95:b0:09:e3:20:46:d6:b4:5b:
19:a5:12:ea:3b:d2:56:e3:30:7f:20:ea:72:0f:ca:5d:5c:09:
4e:0b:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:55 2025 by rpki-client