Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/Hx--XsuYgi829z-vuuEafcp9-iM.roa
File: Hx--XsuYgi829z-vuuEafcp9-iM.roa (raw, json)
Hash identifier: TOcDtW6hTmHDol8TIfzZyWDQ5gtbnyzgX2rm10+AJaQ=
Subject key identifier: 1F:1F:BE:5E:CB:98:82:2F:36:F7:3F:AF:BA:E1:1A:7D:CA:7D:FA:23
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 01938751443317A329F21A2BAF623454818F
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/Hx--XsuYgi829z-vuuEafcp9-iM.roa
Signing time: Mon 02 Dec 2024 12:21:10 +0000
ROA not before: Mon 02 Dec 2024 12:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2001:678:964::/48 maxlen: 48
2001:678:a00::/48 maxlen: 48
2a12:79c0:100::/48 maxlen: 48
2a12:79c0:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Dec 2024 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:51:44:33:17:a3:29:f2:1a:2b:af:62:34:54:81:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Dec 2 12:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f1fbe5ecb98822f36f73fafbae11a7dca7dfa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:47:18:5e:5d:1e:9e:f3:3a:5f:09:5c:a6:
e9:73:d0:21:56:27:bd:83:a3:ca:1c:2f:af:51:e7:
fa:9a:8e:58:53:89:80:c0:8b:32:b4:4a:cf:c7:85:
43:ff:17:e6:34:32:bd:aa:59:d4:70:db:a5:36:6d:
73:eb:d5:48:7e:ad:53:19:cc:7d:af:74:7a:ad:59:
79:19:3e:79:e0:81:b4:e8:89:10:08:f2:08:f6:ef:
43:68:c9:38:fc:58:60:c7:71:05:bd:e1:07:ee:fd:
06:eb:60:9b:2d:6f:ba:04:f8:bf:d4:ba:ea:a5:27:
ad:62:85:04:d3:62:da:4e:48:cc:31:42:6d:eb:c1:
ea:14:61:b5:c9:ab:9c:c5:ac:6c:04:14:c9:63:03:
be:df:c0:53:a0:16:7d:5a:f1:a6:29:78:60:73:c9:
81:ae:e7:c3:9a:38:3e:a6:9a:42:f7:e3:e1:97:7e:
cf:05:92:89:bd:74:46:e9:04:82:b0:ec:5e:75:cd:
e1:da:31:b5:37:76:5f:b0:d0:3f:42:1d:08:05:3c:
69:2b:b6:35:5f:05:6c:ea:88:b3:70:f9:0d:a8:99:
c3:1a:20:b7:0b:5b:0b:b5:d6:9c:df:db:58:31:0b:
b9:00:fc:c1:0b:84:8d:44:d0:04:91:17:26:2e:67:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:BE:5E:CB:98:82:2F:36:F7:3F:AF:BA:E1:1A:7D:CA:7D:FA:23
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/Hx--XsuYgi829z-vuuEafcp9-iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2001:678:964::/48
2001:678:a00::/48
2a12:79c0:100::/48
2a12:79c0:200::/48
Signature Algorithm: sha256WithRSAEncryption
1e:95:7a:f2:75:f1:13:5f:12:d4:40:e6:af:a9:2a:49:d3:3c:
70:78:04:67:60:3e:29:3b:ea:5f:c4:52:3b:05:8d:c9:80:90:
14:ed:9b:70:2b:21:1d:de:10:a5:2d:d3:c0:dd:88:73:e5:99:
2e:b2:61:d7:75:ff:4e:39:29:11:df:9a:1a:b0:d2:47:a7:a9:
1c:57:8c:c5:eb:e5:d5:ca:ba:d0:20:5d:e2:a2:4f:af:81:da:
bc:15:80:b7:12:be:97:fb:00:9f:ab:29:6d:a2:37:46:b3:27:
6e:8c:1f:68:6a:12:05:d0:ca:31:a1:55:e5:5a:be:90:7a:c5:
9c:0d:d2:5f:ba:9a:0c:d4:03:9d:93:95:3a:69:9b:30:2a:04:
d7:d0:aa:90:53:17:cf:32:1a:2f:00:68:45:9f:83:24:e6:d0:
e8:fa:6a:5d:d5:d2:42:d9:7f:c2:4f:6c:a2:18:8f:d0:e0:2c:
c0:d2:8d:ce:9f:b6:dd:e6:6d:ae:39:4b:61:bf:ed:34:84:28:
3e:9b:53:4c:a7:0b:d6:1d:83:51:a2:7b:30:5c:5c:b4:2f:11:
bf:1a:c8:6a:72:8d:b9:ba:57:fe:4e:17:16:6e:9f:f5:ab:25:
52:33:3f:2d:fa:6c:ca:80:1b:b2:90:8b:2f:c5:4b:31:a4:75:
b9:88:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:07:17 2025 by rpki-client