Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/hUerxVxPM-NZ-z12wu9AU-VSS_A.roa
File: hUerxVxPM-NZ-z12wu9AU-VSS_A.roa (raw, json)
Hash identifier: 2YAiuAdoex60BIiou9EAjZwAl4AzCmOUbnRsX9H+uGM=
Subject key identifier: 85:47:AB:C5:5C:4F:33:E3:59:FB:3D:76:C2:EF:40:53:E5:52:4B:F0
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018CC94E728511A4E5425028C68B5151A144
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/hUerxVxPM-NZ-z12wu9AU-VSS_A.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 84.247.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:72:85:11:a4:e5:42:50:28:c6:8b:51:51:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8547abc55c4f33e359fb3d76c2ef4053e5524bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:c6:4a:72:3d:a8:92:77:0d:48:97:68:b1:
c9:93:5e:a6:73:76:ce:69:4e:6c:20:5a:6a:b7:e3:
7d:66:ec:0c:0c:22:3e:d5:38:78:6e:26:51:b9:26:
e4:bf:55:a1:c6:88:2b:07:f8:92:eb:ec:ed:8a:dd:
dd:18:59:02:64:5d:6e:55:1f:1e:44:8d:1e:63:72:
de:50:96:a2:df:4f:ca:d7:d4:b0:d8:81:2d:70:66:
1a:e7:ad:c1:22:c8:bf:b9:85:65:e0:93:16:1e:f8:
dc:58:51:b2:be:e1:e6:fe:1f:0a:d0:0c:d5:aa:c3:
c2:2c:db:a3:ab:24:b7:4b:df:9a:c0:dd:46:ad:8a:
01:a6:cd:80:96:50:22:83:2e:f6:b8:8e:ea:9f:c6:
a9:df:b7:59:a6:d3:6d:48:f3:12:ac:e9:ae:80:c4:
78:3a:ee:e7:21:1a:e2:1c:d2:b0:46:43:c2:93:9d:
a2:30:49:3b:05:b3:4d:1e:3f:86:89:54:c9:a3:4c:
f2:55:bd:78:97:8a:02:9d:40:3e:a6:05:36:48:c5:
53:2b:e4:dc:37:5f:60:e5:22:72:b8:b5:6b:18:89:
df:4f:a5:0b:4e:35:40:19:22:b2:8f:4d:4e:10:5a:
2d:36:a4:64:5f:76:6e:90:db:4f:bf:e7:f3:2d:c2:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:47:AB:C5:5C:4F:33:E3:59:FB:3D:76:C2:EF:40:53:E5:52:4B:F0
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/hUerxVxPM-NZ-z12wu9AU-VSS_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1a:33:6d:bd:dd:67:46:3d:d7:a4:74:6d:5e:c6:bc:89:9d:
14:d4:df:ab:df:2c:98:50:3d:eb:0a:b2:61:2d:8f:76:0b:e0:
a7:45:90:8d:3b:44:ea:60:52:12:8f:10:69:17:7d:38:70:1a:
e0:a1:5d:c6:11:14:1d:9e:89:b0:5f:23:d6:2c:5f:cf:cb:77:
92:2a:be:a9:e6:16:76:42:d6:8b:01:4f:80:69:5f:2a:6e:5d:
b9:0a:05:af:1f:a4:bd:4c:c0:bc:ad:fa:20:00:09:4f:ff:ad:
5a:91:e9:36:ea:7b:00:f3:36:37:73:33:1b:24:25:83:8e:62:
e4:ce:e2:d7:f3:e0:af:13:22:29:29:d0:80:08:1c:a0:0f:ff:
27:a8:3b:1f:6b:05:4c:26:57:56:22:13:40:2c:4b:92:5b:21:
e0:ea:1e:f0:e3:88:3b:a3:b6:c2:5e:ce:62:11:ce:2e:5b:6b:
07:3e:11:0b:e8:fa:3f:30:06:16:93:e3:0b:70:f5:d6:ce:24:
c5:83:a5:64:1d:66:72:51:5d:b0:ba:4b:87:e2:af:b5:9f:9f:
c0:d7:96:b3:68:f1:ee:17:99:2b:70:35:45:c6:05:bc:70:d2:
22:bc:16:7d:54:51:e5:b4:41:f9:0d:4f:ad:a6:b1:3a:9c:c0:
6a:8f:bc:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTnKFEaTlQlAoxotRUaFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjQwMTAyMDgzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTQ3YWJjNTVjNGYzM2UzNTlmYjNkNzZjMmVmNDA1M2U1NTI0YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBjGSnI9qJJ3DUiXaLHJk16mc3bO
aU5sIFpqt+N9ZuwMDCI+1Th4biZRuSbkv1WhxogrB/iS6+ztit3dGFkCZF1uVR8e
RI0eY3LeUJai30/K19Sw2IEtcGYa563BIsi/uYVl4JMWHvjcWFGyvuHm/h8K0AzV
qsPCLNujqyS3S9+awN1GrYoBps2AllAigy72uI7qn8ap37dZptNtSPMSrOmugMR4
Ou7nIRriHNKwRkPCk52iMEk7BbNNHj+GiVTJo0zyVb14l4oCnUA+pgU2SMVTK+Tc
N19g5SJyuLVrGInfT6ULTjVAGSKyj01OEFotNqRkX3ZukNtPv+fzLcKwgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIVHq8VcTzPjWfs9dsLvQFPlUkvwMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvaFVlcnhWeFBNLU5aLXoxMnd1OUFVLVZTU19BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPcXMA0G
CSqGSIb3DQEBCwUAA4IBAQBNGjNtvd1nRj3XpHRtXsa8iZ0U1N+r3yyYUD3rCrJh
LY92C+CnRZCNO0TqYFISjxBpF304cBrgoV3GERQdnomwXyPWLF/Py3eSKr6p5hZ2
QtaLAU+AaV8qbl25CgWvH6S9TMC8rfogAAlP/61akek26nsA8zY3czMbJCWDjmLk
zuLX8+CvEyIpKdCACBygD/8nqDsfawVMJldWIhNALEuSWyHg6h7w44g7o7bCXs5i
Ec4uW2sHPhEL6Po/MAYWk+MLcPXWziTFg6VkHWZyUV2wukuH4q+1n5/A15azaPHu
F5krcDVFxgW8cNIivBZ9VFHltEH5DU+tprE6nMBqj7xh
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:17 2025 by rpki-client