Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hymB-fsVsDFKcsCwyHu_uR3G3Js.roa
File: hymB-fsVsDFKcsCwyHu_uR3G3Js.roa (raw, json)
Hash identifier: FYSdNNY1IDbkFgbPDfijPKSq4ktp4B+zwbi3upfyD8w=
Subject key identifier: 87:29:81:F9:FB:15:B0:31:4A:72:C0:B0:C8:7B:BF:B9:1D:C6:DC:9B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019446F4D92079B3193769EB84DF5057E517
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hymB-fsVsDFKcsCwyHu_uR3G3Js.roa
Signing time: Wed 08 Jan 2025 17:27:18 +0000
ROA not before: Wed 08 Jan 2025 17:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 19:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:f4:d9:20:79:b3:19:37:69:eb:84:df:50:57:e5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 8 17:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=872981f9fb15b0314a72c0b0c87bbfb91dc6dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:73:2f:17:0f:c7:30:16:1a:ef:c0:5b:a3:
b5:5c:d8:1e:1d:45:4b:c2:9e:8f:28:06:60:f6:33:
61:c6:af:62:c3:9d:68:d9:3a:8e:97:b7:d2:b9:5f:
e4:62:a3:2c:46:8f:50:40:6c:78:20:d2:96:35:de:
c1:12:23:62:1c:e5:1d:91:7e:16:2b:69:42:67:ec:
5b:f7:f1:98:fb:2d:a4:5d:99:e9:6b:08:13:98:f3:
87:59:44:b2:28:8c:97:e3:ad:e6:77:1a:85:e3:6f:
d4:cb:3f:46:58:69:fc:cb:f1:1b:1b:74:b9:95:86:
7f:9e:4b:46:63:54:d1:23:8d:65:a6:45:c6:62:28:
b8:80:76:f6:de:63:ae:68:9c:91:49:1f:68:d9:d1:
59:62:d3:e3:c9:27:ed:70:ee:6d:03:1b:c6:b9:7b:
f3:d8:d5:de:77:46:97:e3:07:a7:60:b6:70:3e:ef:
d2:e5:09:cd:06:1e:0b:42:5c:19:73:c4:1e:f3:e5:
6f:d0:ef:19:d1:6e:14:fb:7d:51:06:f4:02:ea:53:
c2:53:84:ad:47:d0:99:68:e5:4c:79:88:87:68:bb:
85:a1:c0:3f:df:77:f2:6b:ac:ce:45:57:63:ef:80:
63:49:d6:bb:f1:30:af:b0:62:d2:b8:57:fa:5c:19:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:81:F9:FB:15:B0:31:4A:72:C0:B0:C8:7B:BF:B9:1D:C6:DC:9B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hymB-fsVsDFKcsCwyHu_uR3G3Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
185.184.122.0/23
Signature Algorithm: sha256WithRSAEncryption
00:07:28:12:f7:c8:76:62:8a:ca:31:2c:77:29:c7:86:9e:e4:
18:71:96:79:6a:3b:7c:16:a9:48:3f:ec:b5:fe:4f:31:3c:b9:
b0:21:40:8d:7f:5a:93:66:91:bf:f5:a6:e2:c1:78:a2:a3:0c:
fa:56:93:61:d2:80:7a:c5:2e:ad:7c:81:c4:16:d6:d1:4b:c6:
ef:20:5f:d7:e2:75:25:64:6c:19:d7:e3:4d:47:8b:b0:87:41:
b2:f2:0b:7a:8e:9d:cc:2a:8f:26:60:a8:d8:f5:72:ab:90:e1:
f3:69:2a:0e:00:ba:9d:af:45:f0:8d:2b:7d:3c:69:9d:e2:2f:
ca:15:5c:5c:14:32:2e:95:78:4e:44:22:8e:00:04:d8:03:bc:
35:3f:7c:51:f0:48:29:98:ac:25:32:91:d1:98:5b:f1:0d:2a:
ca:30:24:3f:7d:23:74:e7:ff:89:e5:52:d9:0a:ae:e6:4b:7f:
3f:47:65:15:36:a4:7e:4b:f6:db:a7:74:a2:78:cb:4e:c7:f7:
6f:9f:a9:25:91:0f:0c:74:56:c4:12:9f:7a:78:3c:ec:34:78:
ac:0e:4c:ec:6e:ad:d5:ab:27:93:ce:0e:4f:ad:ef:a0:9d:cc:
2b:9c:eb:64:8f:84:89:a8:82:77:2e:89:9f:79:ef:eb:64:74:
3d:88:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:28 2025 by rpki-client