Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H_c2W-JLPdC4OYAKswpbaENkDtQ.roa
File: H_c2W-JLPdC4OYAKswpbaENkDtQ.roa (raw, json)
Hash identifier: OEgfEdlEj5crWwVAKD9X+oy375+H41PbDwB2ceaSgRM=
Subject key identifier: 1F:F7:36:5B:E2:4B:3D:D0:B8:39:80:0A:B3:0A:5B:68:43:64:0E:D4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC2C6816B0B502DDE2D792F81B5C32
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H_c2W-JLPdC4OYAKswpbaENkDtQ.roa
Signing time: Tue 02 Jan 2024 10:33:21 +0000
ROA not before: Tue 02 Jan 2024 10:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 10:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2c:68:16:b0:b5:02:dd:e2:d7:92:f8:1b:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ff7365be24b3dd0b839800ab30a5b6843640ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:a7:b5:58:12:06:cf:81:48:3f:44:f9:ae:
36:ac:9c:bb:87:6d:de:5c:72:8a:ec:2b:c4:fd:b2:
ab:df:fd:ff:cf:02:c1:23:c7:fb:c7:88:af:b9:de:
b6:5f:2e:7b:2e:11:dd:6c:aa:0e:d2:d7:ca:d1:f9:
be:49:b2:e2:22:80:d2:58:65:65:ec:17:4d:0b:37:
8e:09:42:ea:a2:eb:f1:ee:9a:41:00:84:f8:20:9d:
77:6e:47:2a:3e:fb:85:2f:9e:7f:4e:7d:04:2d:fd:
72:03:7e:68:fb:3a:1b:ed:cf:42:c2:de:57:20:22:
33:8c:83:69:37:20:a3:25:47:fb:65:24:6f:88:b5:
30:eb:0f:b5:24:53:f0:91:c6:08:e5:1c:39:c3:c0:
00:18:d4:85:f5:63:cd:1e:ef:bb:53:b2:43:99:f2:
4e:f6:8f:a7:5c:00:5f:44:c9:62:6e:7c:c9:f9:a9:
f7:54:ac:dd:77:83:f6:72:ee:a0:ab:b8:3b:79:3c:
cf:41:0d:15:4b:c6:f4:94:84:c2:63:48:13:f7:66:
4b:d1:4e:b6:68:0c:8c:61:50:aa:a3:fe:2e:dd:46:
75:b6:a7:86:25:51:a3:d1:45:bb:35:16:e0:00:e6:
eb:b8:92:02:69:63:5e:c8:44:e2:a6:9a:80:0e:3d:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:36:5B:E2:4B:3D:D0:B8:39:80:0A:B3:0A:5B:68:43:64:0E:D4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H_c2W-JLPdC4OYAKswpbaENkDtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:4d:e1:9e:08:52:8b:e4:4e:bd:53:3f:03:a8:3e:e5:db:3c:
ce:54:c0:41:0d:3a:2d:05:6b:fd:e0:3c:1b:92:45:61:24:f0:
8e:94:7a:72:fe:e8:ec:26:4b:3c:fa:35:32:eb:0b:24:a3:7b:
42:16:11:f2:f8:8d:ba:1f:df:a0:1d:90:45:af:85:58:42:41:
82:c3:f2:e8:c7:d8:cf:0d:e6:a9:a5:a8:e6:67:f5:4e:0e:df:
07:43:00:12:92:0b:95:56:c1:3e:e8:1f:d6:92:ed:5e:96:89:
19:f4:db:7e:6d:52:99:10:da:be:8e:7b:4d:82:4e:88:9d:15:
b2:41:1a:a2:32:64:b0:f2:2a:17:64:c4:77:df:9c:57:c6:03:
14:f9:90:d9:0d:b3:03:e5:b2:41:d0:9d:31:43:eb:ba:df:91:
c0:83:77:6e:5c:99:f9:7c:e8:04:32:70:15:f1:5d:f6:17:38:
c8:f9:45:f9:ca:7f:27:28:18:82:95:95:10:e7:31:8e:68:11:
ba:88:5c:fc:5b:30:a6:a5:d7:0b:e4:dd:8d:22:d0:92:a0:5f:
e8:21:60:91:ca:a7:85:3b:47:33:16:d6:72:cf:38:45:4e:32:
16:93:27:84:f1:17:9c:d1:47:fc:db:ad:6f:79:4a:39:ce:7c:
d6:ca:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:51 2025 by rpki-client