Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/hBkSvW9Y_aLH9_tZCNEVbGPK-0E.roa
File: hBkSvW9Y_aLH9_tZCNEVbGPK-0E.roa (raw, json)
Hash identifier: amtRpCStggKmuZHo2y83AHGALSi6RI9+cyBlsxqVc38=
Subject key identifier: 84:19:12:BD:6F:58:FD:A2:C7:F7:FB:59:08:D1:15:6C:63:CA:FB:41
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 018DEFBC41AE8BE21D2CE0523DF64C3AFA29
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/hBkSvW9Y_aLH9_tZCNEVbGPK-0E.roa
Signing time: Wed 28 Feb 2024 12:41:48 +0000
ROA not before: Wed 28 Feb 2024 12:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 89.150.63.0/24 maxlen: 24
194.176.117.0/24 maxlen: 24
195.5.104.0/24 maxlen: 24
2a13:14c0::/32 maxlen: 48
2a13:14c1::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:bc:41:ae:8b:e2:1d:2c:e0:52:3d:f6:4c:3a:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Feb 28 12:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=841912bd6f58fda2c7f7fb5908d1156c63cafb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:d9:fa:71:b1:7a:85:cb:0e:6b:ec:c3:03:
d0:be:ca:b0:46:9c:1e:6d:c8:83:7d:12:7a:e1:4d:
47:20:4b:31:9b:08:1c:d4:f4:85:52:bc:8a:97:78:
f0:8a:92:71:79:64:45:2f:a9:54:0d:43:8b:0b:59:
62:1a:12:2f:da:54:53:04:f2:f5:a1:a3:ff:29:1a:
1a:51:44:33:e7:81:e0:60:6a:e0:cc:d7:9a:1b:2c:
73:f2:f6:41:c9:2b:f9:d1:7a:05:90:43:c6:3a:9a:
38:69:d0:78:e3:a2:74:f5:85:d1:17:85:45:d2:f3:
19:e1:db:30:0b:e4:0b:2c:95:b0:34:05:53:d4:c3:
cc:b0:43:d5:a6:d1:d9:97:f1:62:14:55:48:e1:45:
d8:22:6e:33:8b:6e:8c:ec:02:0f:a3:28:50:27:f0:
5c:b9:64:2b:15:52:7a:ae:f4:5c:48:55:cc:4f:3a:
3c:ea:75:28:f8:68:48:7f:72:b3:e3:41:7b:46:9c:
3b:54:fc:21:e6:b8:6f:22:08:90:44:6d:4f:f5:0f:
7f:bf:f5:c2:90:1a:ab:52:c7:63:4a:f2:14:25:5e:
e9:26:62:5b:90:f8:3e:36:8a:d9:f7:9f:9d:68:14:
1e:ce:1e:d3:cc:ee:c8:a2:a9:1e:7c:2f:03:f3:fb:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:19:12:BD:6F:58:FD:A2:C7:F7:FB:59:08:D1:15:6C:63:CA:FB:41
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/hBkSvW9Y_aLH9_tZCNEVbGPK-0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.63.0/24
194.176.117.0/24
195.5.104.0/24
IPv6:
2a13:14c0::/31
Signature Algorithm: sha256WithRSAEncryption
84:b2:29:34:8d:2f:ed:c6:90:b1:f9:08:a2:ce:68:0a:c0:29:
46:ef:ff:80:99:a8:1c:d3:47:68:d8:6f:6b:76:df:5f:e6:fc:
df:4f:6e:4d:32:ba:18:e1:ba:17:8d:f9:37:a2:42:bd:24:c9:
10:ce:08:d4:0c:e4:9f:b1:19:28:a9:0c:6c:e4:23:ef:4b:bf:
39:56:4b:9f:9c:4f:2e:7e:4f:96:95:be:93:46:7b:78:e2:af:
1b:09:c6:82:68:f2:8b:f7:46:79:89:f1:9a:38:85:db:84:44:
7d:26:d6:cf:e0:85:6c:86:6d:36:06:91:bc:95:17:fb:e6:fe:
61:ef:79:50:bb:b6:55:09:e8:31:f5:08:57:c6:da:bb:cf:19:
5a:53:85:1b:47:11:c0:fd:43:61:55:e9:6c:07:21:ba:dc:72:
55:8b:ea:f8:99:76:20:a6:d9:95:a9:82:73:78:92:03:d0:6f:
5e:e0:ce:2a:5e:0f:05:ab:05:0f:b7:79:89:d1:33:b9:5f:ed:
ff:4b:2d:c5:ad:7f:cb:40:d9:f4:e6:8c:d6:01:d9:62:af:41:
eb:25:f0:ca:0f:0e:76:28:5e:9a:ec:f2:50:60:68:78:20:21:
94:1d:db:a4:f0:be:73:20:0b:7a:b2:76:d3:06:51:30:ef:31:
a4:56:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:51 2025 by rpki-client