Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/HzdEd_L9GboUmQgo9i1YsUpTZLE.roa
File: HzdEd_L9GboUmQgo9i1YsUpTZLE.roa (raw, json)
Hash identifier: JdS0Z9rWjFDY5NNFvpILZRDwGuzBz2dzcSr0kJHaxjA=
Subject key identifier: 1F:37:44:77:F2:FD:19:BA:14:99:08:28:F6:2D:58:B1:4A:53:64:B1
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 018CC34915E0F3D13B1EA22992A4224988D7
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/HzdEd_L9GboUmQgo9i1YsUpTZLE.roa
Signing time: Mon 01 Jan 2024 04:29:56 +0000
ROA not before: Mon 01 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42867
IP address blocks: 194.143.140.0/24 maxlen: 24
194.143.140.0/23 maxlen: 23
194.143.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:15:e0:f3:d1:3b:1e:a2:29:92:a4:22:49:88:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f374477f2fd19ba14990828f62d58b14a5364b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:83:ba:07:1d:35:f7:68:c6:0d:52:e6:ed:
00:1f:7f:df:fd:dc:3b:db:60:3a:80:36:ae:b3:b2:
0b:55:d4:bd:75:ec:21:6b:ac:15:ff:88:60:57:d2:
57:07:cd:d5:88:e5:9d:7d:60:4d:5b:c4:f1:b8:f4:
66:0c:cc:9b:6d:77:f4:e8:09:08:c2:cb:23:fa:0a:
af:14:11:bb:40:07:cf:6f:92:f0:e3:50:fb:5e:31:
ea:ea:d7:23:d9:20:55:e7:b6:c9:1a:ff:08:d6:11:
0a:e3:4c:5c:72:f4:0d:37:eb:1d:22:99:6f:72:ad:
b2:66:8e:45:df:16:b1:36:c4:a9:50:ed:b1:60:be:
78:2e:fb:99:3c:7f:24:ed:89:a7:b5:ce:95:b3:ea:
a7:f3:c7:84:a8:76:45:88:7c:82:aa:12:ea:86:91:
db:cd:12:30:1c:b9:3a:ad:89:d3:cd:cc:2b:74:28:
b4:ee:42:cc:b7:d7:53:0c:c5:52:97:63:8f:ea:b9:
27:54:7b:35:9f:03:4b:d3:ec:69:3e:2b:cf:15:93:
3a:94:ca:ed:af:ea:8f:fe:87:1a:f5:2d:a1:95:9f:
37:0e:44:70:15:09:96:d0:6a:69:0e:74:ed:fa:4c:
27:46:a2:48:7e:c0:a3:be:d6:0c:18:78:f7:bb:1f:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:44:77:F2:FD:19:BA:14:99:08:28:F6:2D:58:B1:4A:53:64:B1
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/HzdEd_L9GboUmQgo9i1YsUpTZLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.140.0/23
Signature Algorithm: sha256WithRSAEncryption
30:25:8c:88:05:17:1b:ff:27:14:14:ec:4c:92:ff:e7:f7:a3:
ab:0a:f8:83:50:c0:94:9e:08:74:73:24:4c:43:3b:1e:b7:ca:
52:f8:9e:43:99:f5:70:3b:27:2b:f5:6e:40:ae:6f:d0:ce:a2:
c6:3f:44:07:f1:01:16:e1:00:84:a0:25:c6:9d:37:13:77:50:
5d:a8:57:7f:79:51:85:b8:dd:cf:2c:02:12:25:b9:4e:5a:88:
42:9a:16:d3:59:55:1b:08:37:80:0d:7f:34:d9:f2:c8:fd:a9:
00:42:94:80:33:61:7f:27:16:17:6d:0f:06:08:a6:1f:21:9a:
05:aa:6e:fe:47:93:34:0c:02:a3:ad:ee:a8:89:6c:81:35:f4:
b6:27:08:2f:a9:ef:00:58:88:94:e4:14:c9:9d:69:b5:3d:11:
e9:55:5b:7e:a9:4b:32:a4:1d:f2:0a:e5:d5:7d:19:e8:97:a6:
31:60:61:0a:38:71:a2:da:df:50:27:b8:4d:6e:c1:28:b7:92:
09:bc:54:9a:2b:bb:f5:b4:b0:0c:05:e2:bb:9d:20:13:97:62:
11:16:b7:7e:fe:d1:8d:12:47:15:a3:5f:84:51:b3:8f:53:6c:
07:11:ab:f5:18:2d:06:b5:f5:13:9f:2a:bc:11:07:c9:5c:25:
b4:fd:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:56 2025 by rpki-client