Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KHJAeVUe-HHGGsWGlWEAz1rGFH0.roa
File: KHJAeVUe-HHGGsWGlWEAz1rGFH0.roa (raw, json)
Hash identifier: ACOSvdRO7fBlKLACGfCezU8PiIf32mGvJXc8UM7UTMs=
Subject key identifier: 28:72:40:79:55:1E:F8:71:C6:1A:C5:86:95:61:00:CF:5A:C6:14:7D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D6077BCC48F2E1790F1917E5608769D2B
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KHJAeVUe-HHGGsWGlWEAz1rGFH0.roa
Signing time: Wed 31 Jan 2024 17:01:16 +0000
ROA not before: Wed 31 Jan 2024 17:01:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 45.93.201.0/24 maxlen: 24
80.76.60.0/24 maxlen: 24
91.198.220.0/24 maxlen: 24
93.93.207.0/24 maxlen: 24
185.192.246.0/24 maxlen: 24
185.192.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 16:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:77:bc:c4:8f:2e:17:90:f1:91:7e:56:08:76:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 31 17:01:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28724079551ef871c61ac586956100cf5ac6147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:de:e1:5a:6f:7e:b1:c4:c6:f8:ec:ca:9c:8a:
07:88:92:cd:45:58:a7:63:a3:a7:5f:36:50:0a:df:
a6:b1:bf:81:89:f8:10:b8:a3:8f:80:56:ad:d8:a7:
66:fd:dc:35:75:86:be:64:c1:57:7e:fa:4a:54:70:
a5:e1:52:d9:a3:ad:61:73:f7:12:d8:85:c1:64:59:
45:72:14:f3:16:80:65:0c:9d:a4:df:47:22:23:43:
a9:80:87:44:37:74:b1:d5:61:28:4f:8b:8c:6d:99:
f0:e0:cb:5a:a1:c1:89:42:36:dc:cf:9e:0f:c5:a5:
ce:31:ad:a3:11:04:eb:4f:77:fa:c3:55:46:ee:6a:
12:3a:ae:ce:69:21:df:c3:c8:a0:6f:e6:a0:14:cc:
47:11:7f:16:dc:ce:17:91:fa:75:8d:cd:36:49:01:
b6:b4:96:7c:61:dc:ca:21:a5:d1:67:f3:34:05:5e:
d6:f5:2c:9a:6b:78:d4:ae:bb:46:c3:5b:57:b5:e8:
e9:4c:35:11:23:98:04:30:58:21:3b:8c:57:ab:85:
33:af:26:16:3c:0b:e6:02:81:94:92:97:1a:fc:5c:
60:ca:1d:89:d0:81:61:d0:55:ae:2c:f9:1b:46:12:
cb:cd:0c:e5:70:8c:1b:4c:cd:45:9e:c1:26:a2:96:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:72:40:79:55:1E:F8:71:C6:1A:C5:86:95:61:00:CF:5A:C6:14:7D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KHJAeVUe-HHGGsWGlWEAz1rGFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.201.0/24
80.76.60.0/24
91.198.220.0/24
93.93.207.0/24
185.192.246.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:90:05:29:eb:c7:f4:cf:6f:8d:e9:a8:98:69:68:09:84:09:
ee:e7:65:24:2c:03:20:62:f3:2e:a7:dc:6a:19:52:b7:d2:e6:
5b:a4:fd:ef:d3:72:8b:93:38:98:30:1a:c3:f8:81:81:2b:a7:
e5:da:c3:19:04:bf:a5:a4:42:46:3f:5f:f4:03:a0:75:a4:23:
9a:2c:f6:f3:29:0d:3c:ec:01:fe:e6:00:83:b1:a0:7b:f6:19:
d2:c4:3e:77:74:be:0a:50:27:e0:4d:1e:93:ec:1a:60:af:8d:
78:31:30:b0:fd:9c:ee:c8:30:10:d5:91:93:8d:98:03:56:0a:
71:21:d5:cb:c3:32:50:3e:8d:88:e5:21:6d:68:71:77:2a:ca:
28:56:89:90:c3:ab:2e:2d:d0:1c:15:32:3a:3d:30:c4:e5:46:
b6:ce:00:3e:f5:6e:d3:91:b4:6f:8c:8c:73:80:55:44:a8:12:
16:f3:24:7b:c1:3e:17:bd:46:b4:3c:35:08:ce:4b:d4:30:34:
0a:a8:46:6a:f3:20:df:1d:4b:c6:74:85:46:69:d3:66:06:54:
98:84:e6:ab:2c:27:b1:4d:01:82:4e:ce:58:cd:6d:cb:17:b5:
d0:a1:51:6c:70:b7:18:b2:64:91:36:3a:2a:bb:fe:d4:0a:36:
a3:88:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:50 2025 by rpki-client