Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hhit_ezsKZyyF-h_ZDkxBHY5NGI.roa
File: hhit_ezsKZyyF-h_ZDkxBHY5NGI.roa (raw, json)
Hash identifier: KY+nmMFdYp1vp45HODMTK5gPESngo/F98qZmSDudkmU=
Subject key identifier: 86:18:AD:FD:EC:EC:29:9C:B2:17:E8:7F:64:39:31:04:76:39:34:62
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CDA93CBF21B18824D3D1B33161E7B89F8
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hhit_ezsKZyyF-h_ZDkxBHY5NGI.roa
Signing time: Fri 05 Jan 2024 17:02:48 +0000
ROA not before: Fri 05 Jan 2024 17:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 185.174.137.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
94.142.138.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
91.103.252.0/23 maxlen: 23
45.142.122.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
5.252.118.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
185.217.197.0/24 maxlen: 24
2a0e:d607::/48 maxlen: 48
2a0e:d602:3::/48 maxlen: 48
2a0e:d602:2::/48 maxlen: 48
2a0e:d606::/48 maxlen: 48
2a0e:d602:1::/48 maxlen: 48
2a0e:d602::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Sep 2024 15:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:93:cb:f2:1b:18:82:4d:3d:1b:33:16:1e:7b:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 5 17:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8618adfdecec299cb217e87f6439310476393462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:9c:3b:19:df:c8:8d:0b:c8:2c:bf:bc:56:
9c:42:2b:8c:ed:f7:b8:9a:75:c9:db:5a:92:5a:41:
44:5b:71:52:d1:a1:b8:7f:92:20:11:bf:64:a0:b6:
01:43:e4:04:bc:09:20:94:39:6d:b4:3b:14:b6:93:
59:ec:d9:31:96:0d:d0:1d:9a:17:63:35:74:1d:28:
02:7d:ca:99:eb:55:d4:cf:50:70:8f:10:99:dc:aa:
07:22:8b:be:41:a7:52:bb:5a:bf:73:6d:34:8c:63:
02:27:73:bb:0d:71:fd:50:e9:dc:fe:66:9d:2b:91:
15:e2:cf:17:2d:f7:de:66:fd:c8:13:25:72:a4:7a:
ef:d0:68:9e:49:81:87:f9:9b:dc:f8:fc:01:ad:e9:
38:bc:e7:f9:c1:b2:ea:55:85:df:54:24:4f:94:22:
38:0b:7c:ec:3b:9d:d1:69:aa:5a:c8:0c:98:b1:68:
f9:45:5e:52:2f:4c:8f:d3:aa:8e:e3:cd:41:a5:b7:
8f:0d:c4:e9:8d:fe:b1:ce:87:20:f6:1a:da:1a:a0:
e6:e3:71:66:4f:dc:ee:95:7b:25:d5:e1:a2:45:9f:
32:af:5d:af:34:46:73:ce:e1:59:7d:6a:15:d1:86:
f8:11:e9:a6:87:0c:74:2b:4c:d5:c2:7f:fa:19:90:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:AD:FD:EC:EC:29:9C:B2:17:E8:7F:64:39:31:04:76:39:34:62
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hhit_ezsKZyyF-h_ZDkxBHY5NGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.118.0/24
45.138.74.0/24
45.142.122.0/24
91.103.252.0/23
94.142.138.0/24
185.17.0.0/24
185.106.93.0-185.106.94.255
185.112.83.0/24
185.174.136.0/23
185.217.197.0/24
185.229.65.0-185.229.66.255
194.67.201.0/24
IPv6:
2a0e:d602::/46
2a0e:d606::/48
2a0e:d607::/48
Signature Algorithm: sha256WithRSAEncryption
b5:10:1d:5d:bf:65:63:af:15:52:d0:f5:03:31:7c:ab:f2:6c:
4d:ee:f7:ee:ba:b0:10:1d:4b:8a:f8:98:05:23:14:38:b3:77:
42:33:66:c5:93:6d:a4:19:07:77:d9:19:2d:d6:c4:bd:64:a5:
6c:9f:b7:e7:83:9d:1d:58:7f:16:69:ce:45:78:7a:00:56:fa:
95:4c:fb:14:5d:2c:2d:6d:81:ec:8f:af:ab:9d:06:63:7a:85:
68:5c:bc:3c:88:2f:a8:98:78:c4:17:7c:9d:ca:ec:ee:6c:b2:
54:c4:40:c2:e1:93:d4:9c:e1:26:68:ac:cb:e4:3d:4a:d3:19:
23:3a:d1:66:5c:8a:aa:26:90:04:f4:2b:4d:74:4b:18:a1:6f:
fa:d5:4d:dc:9d:44:22:e9:cc:4e:12:79:f6:3d:0f:91:c5:79:
2b:f1:4b:dc:5e:14:01:9d:eb:19:58:9c:3c:0a:fc:8d:97:ee:
e4:d5:34:5e:80:7d:74:08:a8:84:39:b2:3c:36:3b:ea:39:c7:
a2:ee:e7:36:55:11:d3:c8:7b:82:a7:6b:ee:c6:e9:5d:00:7b:
0e:63:76:ab:71:39:48:77:f9:86:d8:8b:d2:88:fa:30:a2:f4:
c2:5c:76:84:00:a7:f8:45:29:6e:46:46:97:f5:1d:4f:dd:6e:
11:c8:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 19:18:10 2024 by rpki-client on console-ams.rpki-client.org