Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/HOo9TBzgcUJzYuO4ivmwJBVJDeE.roa
File: HOo9TBzgcUJzYuO4ivmwJBVJDeE.roa (raw, json)
Hash identifier: 4jePHT+TqU7Wb3YVm4dSVd9tqmULGPOGAz8uUeK60U4=
Subject key identifier: 1C:EA:3D:4C:1C:E0:71:42:73:62:E3:B8:8A:F9:B0:24:15:49:0D:E1
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 018CC4249EFC221589DCC768E0FCD1C0EFF3
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/HOo9TBzgcUJzYuO4ivmwJBVJDeE.roa
Signing time: Mon 01 Jan 2024 08:29:43 +0000
ROA not before: Mon 01 Jan 2024 08:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 185.245.230.0/24 maxlen: 24
185.245.231.0/24 maxlen: 24
185.245.228.0/24 maxlen: 24
185.245.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9e:fc:22:15:89:dc:c7:68:e0:fc:d1:c0:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Jan 1 08:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cea3d4c1ce071427362e3b88af9b02415490de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:04:d1:25:97:a6:84:ed:fa:f3:cb:c8:ce:
d8:2c:22:f7:b9:ea:1c:c0:64:d2:a8:ec:0f:24:89:
f2:62:cc:1a:61:96:e8:b4:45:fd:bd:28:26:d0:b5:
26:4b:64:f2:3f:ad:a0:47:1b:9e:67:8e:e6:57:99:
c6:c8:f3:4e:b0:e2:9b:ec:59:3b:5b:c6:48:b1:64:
03:3f:a8:fa:f5:4d:82:c6:a1:d2:d8:ef:30:e0:fa:
eb:9f:1b:f3:6b:b5:aa:76:24:41:ef:78:89:f4:ca:
f2:17:a7:ed:13:fe:b0:88:84:79:cb:98:38:c4:de:
68:70:fd:3f:b4:53:d1:04:96:7c:47:36:31:07:02:
74:8e:66:26:fa:5a:c3:0e:51:5b:2e:69:b2:19:39:
00:7b:02:65:a4:52:26:c7:f4:bc:a2:34:ef:95:1a:
62:5d:a0:24:c5:45:1b:44:9a:aa:13:37:e0:a3:15:
d6:b2:56:fb:8a:8f:32:c0:a4:85:ef:16:00:1f:7b:
de:bb:db:d2:1f:2e:4b:e9:e0:1c:98:8c:a5:fc:41:
d0:5e:ad:49:c4:38:74:13:d1:dd:98:64:71:ae:d4:
5c:e9:a6:03:4f:04:dc:8b:75:f2:63:f5:0d:ea:79:
77:09:7e:3c:8a:47:aa:4c:93:86:7e:32:24:65:72:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:3D:4C:1C:E0:71:42:73:62:E3:B8:8A:F9:B0:24:15:49:0D:E1
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/HOo9TBzgcUJzYuO4ivmwJBVJDeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:2d:8f:50:67:e4:b1:99:43:21:08:ee:8c:c4:4e:8d:45:86:
3e:b7:8b:81:76:00:3a:1e:e5:39:6c:a2:5e:c9:7b:76:eb:2c:
2c:30:74:ef:32:e8:af:3e:70:82:df:71:5a:48:38:51:17:2c:
02:fd:d7:ac:48:77:c2:1c:ee:56:5b:17:32:2f:71:08:d2:16:
ec:fc:3b:49:45:a9:99:c9:a7:6c:cc:bf:40:68:65:c5:32:35:
91:d8:e8:29:a0:bc:d9:73:fc:11:1e:6a:69:84:74:08:34:91:
6f:59:db:d8:1b:8b:6a:97:a5:51:1f:1e:84:fb:5f:44:43:26:
33:4f:d5:07:b5:87:5f:fa:7b:3c:c0:97:2b:1b:b8:c4:ee:2c:
50:b4:5c:a8:15:1a:cc:13:e4:5c:96:10:48:0c:7a:7c:e7:95:
ba:f7:21:7d:ce:9b:1f:2c:d6:45:28:13:5d:bc:3b:3a:69:01:
79:a1:99:de:4c:4b:bc:23:a0:c6:03:cf:9d:f5:cd:b5:bf:fa:
74:74:6d:f6:14:14:1b:20:0c:f3:af:61:1b:1b:72:17:e4:55:
1b:09:a3:27:f8:56:d5:57:18:a8:43:e2:ea:4b:ad:73:c3:b4:
1e:c2:39:3e:40:27:92:0b:fc:4e:6b:f6:b8:72:4f:13:0c:2f:
fd:e0:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:20 2025 by rpki-client