Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/HLwnivV3gyojtXvWhvIJSSAecNU.roa
File: HLwnivV3gyojtXvWhvIJSSAecNU.roa (raw, json)
Hash identifier: ORzQVMTWZEWi5ey5Tfu7rqUuVvpHLO/auq4FqDuNbOk=
Subject key identifier: 1C:BC:27:8A:F5:77:83:2A:23:B5:7B:D6:86:F2:09:49:20:1E:70:D5
Certificate issuer: /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial: 01942444944AC166867B9682326EF03D4AF3
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/HLwnivV3gyojtXvWhvIJSSAecNU.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 130.112.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:4a:c1:66:86:7b:96:82:32:6e:f0:3d:4a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cbc278af577832a23b57bd686f20949201e70d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:06:bc:3a:9c:f8:00:ec:24:3a:10:9c:39:
98:2f:11:6f:42:3e:78:f2:b9:72:3b:ec:e5:fb:a8:
10:ef:bb:50:0d:a8:21:eb:04:5e:58:6e:79:b9:55:
2f:11:d1:38:38:7b:7d:34:51:05:f2:cc:49:4c:cb:
59:1f:92:b4:42:88:1a:35:4b:29:c2:99:f6:d6:29:
4d:83:b4:c3:66:6d:9f:3b:fa:a1:7e:50:94:ce:5b:
84:ee:da:5f:8c:6b:7f:6c:a1:03:9a:91:e1:96:f5:
b1:6f:b5:de:c2:1b:7e:87:0d:8d:1b:fa:20:c3:6f:
02:8e:06:37:91:3a:45:a6:f4:44:45:dc:2e:3e:74:
c5:a9:3b:f4:cd:e1:87:c1:f4:ea:83:cf:64:23:20:
cf:f7:97:4c:fd:cb:e2:26:47:e4:c6:ff:2b:16:4a:
61:d6:5f:42:d0:0f:02:7d:54:81:ad:e7:df:36:e7:
b2:d8:63:3c:e7:fe:19:c4:a1:2c:62:4d:3e:75:69:
a0:03:a5:31:6a:bf:57:d7:35:4c:fe:d4:74:7c:1a:
0d:92:65:ea:6a:4a:83:71:41:79:ad:d8:50:a2:d6:
b5:30:53:82:bb:8a:8c:7c:66:80:c1:63:7f:9d:db:
53:6b:5b:f1:5d:5b:16:12:82:2d:9e:fc:03:79:5e:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BC:27:8A:F5:77:83:2A:23:B5:7B:D6:86:F2:09:49:20:1E:70:D5
X509v3 Authority Key Identifier:
keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/HLwnivV3gyojtXvWhvIJSSAecNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:f5:a2:2a:d7:c4:b2:81:a3:97:73:f2:4a:1d:06:bc:90:c3:
bb:88:cf:b0:0a:f4:3e:b1:c0:ec:84:f6:b0:d5:5d:5b:d5:7c:
81:38:c2:c4:ed:c8:ed:45:c0:4d:43:1a:90:ad:8a:68:06:c4:
f8:88:f0:9d:d5:8f:0b:cf:84:b8:ff:44:bd:42:02:cf:7e:f3:
e0:29:8f:39:8d:03:c2:49:ef:fd:4d:b3:61:94:36:2b:73:13:
2b:d4:ba:2a:2f:48:a6:24:80:de:ab:e6:cb:11:02:8a:be:81:
64:55:54:89:43:d5:ca:6a:ab:0a:22:6f:74:9c:30:c4:8e:c1:
ee:0c:53:9a:9f:52:32:f0:e5:48:30:50:73:80:65:57:64:31:
18:15:f1:40:c1:c1:46:c6:41:3f:66:46:7e:12:5f:70:2c:ab:
5b:4f:95:55:f8:2f:ce:e3:3b:93:e3:e0:8d:80:ac:4d:85:17:
67:45:d1:8a:da:a0:64:36:27:76:07:d2:a3:49:91:8e:b9:ee:
66:43:86:38:58:07:5b:05:b4:6a:51:bd:4d:df:10:9a:a0:03:
68:83:1c:d5:d0:b5:75:0e:7c:24:bc:76:18:96:87:f4:38:d4:
4c:9d:c1:49:85:a0:d0:7b:3d:ae:ce:aa:4b:ad:75:da:ee:71:
57:f4:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:43 2025 by rpki-client