Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HbyO6eetRcT-OCS_as9eLobGbac.roa
File: HbyO6eetRcT-OCS_as9eLobGbac.roa (raw, json)
Hash identifier: u7+YjjqO1Gl06MaArNTiUndRsQT8p7b2QI4Mn8wKnYk=
Subject key identifier: 1D:BC:8E:E9:E7:AD:45:C4:FE:38:24:BF:6A:CF:5E:2E:86:C6:6D:A7
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0191AF505335DCAF22F278EEE3512FFC44C1
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HbyO6eetRcT-OCS_as9eLobGbac.roa
Signing time: Sun 01 Sep 2024 20:39:22 +0000
ROA not before: Sun 01 Sep 2024 20:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34568
IP address blocks: 77.87.248.0/21 maxlen: 24
84.246.120.0/21 maxlen: 24
91.234.22.0/24 maxlen: 24
193.138.81.0/24 maxlen: 24
194.116.234.0/23 maxlen: 24
2a01:1f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Sep 2024 11:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:af:50:53:35:dc:af:22:f2:78:ee:e3:51:2f:fc:44:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Sep 1 20:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dbc8ee9e7ad45c4fe3824bf6acf5e2e86c66da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:5d:e1:5c:2f:fc:7f:8e:90:72:70:c3:da:
19:44:a8:c3:d6:20:87:e4:ca:e2:c3:39:a2:4d:dd:
4a:c3:86:4d:c3:89:b9:9b:79:51:c2:70:d5:b6:93:
5e:db:2f:0b:6d:ad:b6:f9:3d:65:92:a1:cb:c6:1e:
5c:e2:a0:ee:3a:c4:a6:c9:4a:71:cd:13:f7:a3:a0:
3a:9b:50:5c:e1:75:42:b6:c1:05:29:ec:57:63:97:
b8:0c:a7:9e:d9:ee:6e:e4:7f:7c:e4:00:45:3e:84:
52:15:75:3f:f0:0f:56:14:18:96:a7:3a:dd:c6:a1:
f2:07:c4:5a:6f:ae:8e:81:90:62:d5:5d:b1:60:5a:
1b:8e:88:39:8c:11:5f:76:fc:53:cf:0b:f5:87:cf:
ec:57:17:16:50:a7:44:d6:de:d5:47:d6:fc:d6:0b:
55:f4:b6:56:4c:23:49:af:e8:34:c2:3c:6d:4e:23:
0d:85:6f:bf:4a:78:a2:1a:5e:90:7a:d6:43:96:e5:
51:79:03:3a:8b:d7:60:56:1b:2b:42:c4:19:a9:7e:
0e:ba:43:88:ef:2e:3b:7f:00:13:15:89:f8:aa:85:
18:01:14:b7:59:95:7a:b5:60:6b:89:60:84:e6:d1:
65:1d:e8:c3:4f:70:67:a7:33:df:d4:11:a3:71:39:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:8E:E9:E7:AD:45:C4:FE:38:24:BF:6A:CF:5E:2E:86:C6:6D:A7
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HbyO6eetRcT-OCS_as9eLobGbac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.248.0/21
84.246.120.0/21
91.234.22.0/24
193.138.81.0/24
194.116.234.0/23
IPv6:
2a01:1f8::/32
Signature Algorithm: sha256WithRSAEncryption
69:74:c0:c9:07:fd:c9:80:22:9e:23:13:5e:c9:d8:45:b0:62:
b9:a4:4f:c8:88:c1:59:37:64:22:ad:5f:e4:81:d0:0f:8b:4b:
4e:2b:df:73:45:66:cd:ce:30:d5:50:a3:a6:1f:34:60:6b:cb:
32:bf:96:27:38:36:aa:2f:7d:f2:12:5c:3b:5a:27:16:41:3d:
7b:48:c3:e3:46:47:1f:4d:8c:c2:5d:72:e6:03:1e:da:d0:1a:
61:8d:2a:cf:72:0c:69:e2:49:3f:cd:ee:cb:4b:ad:e5:3f:c9:
04:84:ff:74:c8:32:d7:fe:29:8c:fd:64:b1:99:49:4b:7e:4d:
96:45:74:cb:46:11:9e:07:9e:e8:d3:96:19:a8:c3:8b:98:0b:
1c:c4:b8:99:30:13:ec:9d:4a:8e:75:26:dc:be:b5:02:00:59:
62:72:76:43:7e:cf:88:75:c5:a3:6d:2a:5e:2f:f9:ab:d9:e6:
19:77:51:8a:b9:18:70:dc:8f:c4:a0:64:54:39:f8:57:b7:25:
41:05:be:cf:f8:d9:75:8d:00:fd:72:fa:5a:b7:e6:db:83:bc:
14:02:bb:31:0b:86:30:3a:f8:9b:a6:e8:e4:9d:03:7c:bd:d3:
13:6e:03:d0:dd:b6:22:1e:3a:ba:7f:fa:9e:53:a0:aa:10:86:
db:9b:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:06 2025 by rpki-client