Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/hXsGr_BHpOzjaCnzZnGvIX2rdhE.roa
File: hXsGr_BHpOzjaCnzZnGvIX2rdhE.roa (raw, json)
Hash identifier: cBZ2FZJeYb6r8Jnc4mc0Wqt8RcI6cOUO7gC5MFVmss0=
Subject key identifier: 85:7B:06:AF:F0:47:A4:EC:E3:68:29:F3:66:71:AF:21:7D:AB:76:11
Certificate issuer: /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial: 0191E638D0D215DDC24306760B73956FED1B
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/hXsGr_BHpOzjaCnzZnGvIX2rdhE.roa
Signing time: Thu 12 Sep 2024 12:32:48 +0000
ROA not before: Thu 12 Sep 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57801
IP address blocks: 91.212.112.0/24 maxlen: 24
194.0.45.0/24 maxlen: 24
2001:678:70::/48 maxlen: 48
2001:678:90::/48 maxlen: 48
2001:678:9c::/48 maxlen: 48
2001:67c:26d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:38:d0:d2:15:dd:c2:43:06:76:0b:73:95:6f:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Validity
Not Before: Sep 12 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=857b06aff047a4ece36829f36671af217dab7611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:0b:83:af:42:a5:9c:0d:64:a3:98:e2:67:
5a:45:90:9b:3e:dd:21:92:7d:a5:3e:be:1f:5e:5f:
48:7e:15:cd:0b:3b:d5:8f:ad:90:44:7c:10:e8:1b:
ed:e1:d0:3e:95:8f:9e:f1:b0:b9:57:ea:68:10:a3:
ef:c9:ac:c7:be:44:f9:b0:0b:32:d0:12:bc:18:5e:
50:ef:01:40:5e:2c:a6:9a:62:35:49:de:e5:9a:c0:
6d:6d:7d:c9:2d:59:f2:34:11:70:ee:6f:a9:0f:9b:
69:76:41:10:73:28:46:0e:4e:6b:76:03:ac:79:5c:
9a:ae:53:b5:28:3b:77:91:97:f7:92:d3:65:7e:79:
7a:84:ff:35:34:00:cd:32:b8:af:a0:df:f9:d3:89:
d2:27:79:2e:86:11:35:7d:a6:3d:62:6e:d3:95:4d:
74:08:ea:df:fe:bb:0d:b1:0e:3b:7c:9a:f3:a0:b9:
c4:84:0d:a7:c3:f1:0a:a5:74:ef:a7:81:16:f6:0f:
a1:0c:60:f7:0a:ab:b5:6e:e1:12:86:58:3f:2c:53:
8b:05:a5:cc:4d:67:e0:ab:b1:ab:e4:4b:fc:37:ab:
33:65:74:66:8e:c9:cc:c5:c5:93:cf:72:84:f4:7c:
a0:a4:db:84:71:60:73:f5:1a:21:dc:1b:1a:8e:90:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7B:06:AF:F0:47:A4:EC:E3:68:29:F3:66:71:AF:21:7D:AB:76:11
X509v3 Authority Key Identifier:
keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/hXsGr_BHpOzjaCnzZnGvIX2rdhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.112.0/24
194.0.45.0/24
IPv6:
2001:678:70::/48
2001:678:90::/48
2001:678:9c::/48
2001:67c:26d4::/48
Signature Algorithm: sha256WithRSAEncryption
18:2a:e2:1d:1f:ae:5f:cb:6f:68:ac:8c:c2:b2:0c:07:44:f6:
e1:a6:f8:ce:85:45:83:06:bf:24:bf:3e:86:c1:a4:b7:a8:7e:
3a:b3:1e:cc:e5:fe:d9:f0:6b:e5:cb:ca:48:18:be:1d:61:79:
90:06:65:be:0d:9c:32:62:ed:5c:5e:be:d0:9b:0d:ef:0d:c4:
4a:3a:b7:d2:c3:3b:ae:67:69:4a:97:1d:ea:53:ce:1b:0d:b9:
dd:b8:ee:d4:a2:3c:b5:0e:28:5c:3b:62:3b:e4:18:a8:76:4e:
b4:d1:39:2b:7b:6f:4d:f8:18:92:2b:58:d4:06:03:ff:83:42:
31:fe:5c:d8:ad:94:77:40:ed:4b:a2:62:3c:45:95:0b:d0:e5:
44:ad:7b:db:20:85:c6:52:e4:47:9a:29:d4:dc:6f:e7:d6:2d:
0d:d2:9c:6b:85:05:03:fc:54:d8:6c:ac:8b:e0:81:29:1f:19:
d3:ea:be:e8:1c:bb:a4:d0:da:22:b1:00:42:69:25:81:d6:3a:
61:55:4e:29:73:1b:39:b5:72:b1:f8:11:ad:58:e9:08:30:c5:
37:e3:2f:db:72:23:b9:b1:77:56:b4:eb:3d:d0:96:56:7e:57:
7c:2f:89:64:fe:7d:39:64:e3:ad:52:03:6f:2c:dd:d8:d2:d0:
00:0c:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:22 2025 by rpki-client