Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/HZ-xV0rVs4hgJM9Mt1g6CC1EC2Y.roa
File: HZ-xV0rVs4hgJM9Mt1g6CC1EC2Y.roa (raw, json)
Hash identifier: fX25DvxC8ck7d5KYchNbL6AlgFroAvEOi7Y6UzUbESg=
Subject key identifier: 1D:9F:B1:57:4A:D5:B3:88:60:24:CF:4C:B7:58:3A:08:2D:44:0B:66
Certificate issuer: /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial: 018CC56ECBF52859CDB97324F9B7DCCFA782
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/HZ-xV0rVs4hgJM9Mt1g6CC1EC2Y.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203116
IP address blocks: 185.143.24.0/22 maxlen: 22
2a07:4540::/29 maxlen: 29
2a07:4540:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:cb:f5:28:59:cd:b9:73:24:f9:b7:dc:cf:a7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9fb1574ad5b3886024cf4cb7583a082d440b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:71:02:00:0d:7c:07:ec:36:de:18:0a:15:
f9:2b:e5:a9:92:0c:48:a8:1f:d7:e5:95:da:aa:26:
79:16:a6:49:c7:d6:6a:dd:f4:2c:18:0e:ba:bf:90:
56:ff:cb:3a:23:26:45:29:9e:8c:e0:33:36:f9:25:
ee:8d:ac:93:d8:6b:44:4c:41:1c:c6:4d:2c:db:a8:
b5:1c:9e:b9:a8:aa:c3:45:fc:ff:98:fd:e5:c3:1d:
5c:4f:50:d3:27:bd:f2:8f:57:dd:bb:53:87:54:35:
3c:31:08:86:08:bb:15:9f:22:41:43:98:1c:bd:5d:
23:99:29:a2:b0:c6:2a:2b:ee:95:85:f1:90:4b:d1:
f0:d4:59:0c:0e:da:ec:fc:02:71:df:2f:5e:dc:46:
cd:f1:34:e3:da:d1:9c:e3:1a:30:1c:53:e0:ff:75:
ab:cd:aa:f5:45:06:39:4a:4f:9f:d0:98:b8:ac:aa:
4a:5a:15:f6:91:f6:aa:3a:49:ec:90:30:6f:24:40:
40:84:01:79:1e:0b:da:f8:07:e5:de:cd:83:ce:2b:
e1:3c:72:a6:31:f8:6b:81:d4:20:f9:ef:d4:0f:ad:
d0:32:ff:e6:d1:60:8d:8f:85:aa:85:72:88:b1:56:
d7:50:e1:ad:f7:c8:19:1b:5f:7e:2d:ae:06:41:06:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9F:B1:57:4A:D5:B3:88:60:24:CF:4C:B7:58:3A:08:2D:44:0B:66
X509v3 Authority Key Identifier:
keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/HZ-xV0rVs4hgJM9Mt1g6CC1EC2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.24.0/22
IPv6:
2a07:4540::/29
Signature Algorithm: sha256WithRSAEncryption
a8:bc:f3:d9:8a:d5:76:21:8a:73:34:46:85:af:7c:42:63:60:
12:ce:db:e4:7c:32:be:96:a1:ea:4e:ce:43:a3:df:92:ff:e0:
86:ed:22:de:b0:a9:65:49:d2:dd:95:12:e4:dd:a5:18:3d:cd:
52:b8:b9:81:29:ef:7d:6a:dc:e5:33:ef:30:25:08:bf:ee:c1:
5f:7a:7f:73:cd:c1:c7:ff:1e:1b:b2:68:2b:22:b2:c1:59:a6:
86:43:ef:25:de:77:cc:b5:10:5d:39:a9:20:5a:39:b3:9f:94:
79:8d:8e:91:95:52:fa:bc:64:62:9f:8d:8c:7f:70:1b:8a:6a:
1a:04:43:89:d0:1a:1d:39:2f:a9:20:07:6c:5e:0d:20:6c:d2:
23:e8:e7:31:86:ca:7f:52:47:8c:cf:ca:1c:dc:55:67:b7:f6:
d1:e4:96:da:21:a2:4a:f7:55:52:6b:e3:82:aa:26:e3:a8:a1:
cc:e4:aa:91:04:6e:99:8b:80:5f:95:dd:8f:21:27:c3:c9:ae:
59:9d:d2:43:70:c2:42:27:04:77:7e:32:4b:90:a5:c8:84:27:
08:7b:6d:14:c9:cf:11:cd:30:fd:a9:8f:ec:3e:42:87:9c:38:
47:11:96:3d:0a:c9:68:a3:88:9c:f2:a8:34:e6:5a:62:3b:d3:
6f:4e:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:47 2025 by rpki-client