Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/HgR05TPvJBzSo74OF4h5hhZ3-Ig.roa
File: HgR05TPvJBzSo74OF4h5hhZ3-Ig.roa (raw, json)
Hash identifier: aszCZ8th5JaAR7RmeXQspf3AZEZDhj1e5727hA0dNeE=
Subject key identifier: 1E:04:74:E5:33:EF:24:1C:D2:A3:BE:0E:17:88:79:86:16:77:F8:88
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018CC500DA734B09BF6406AF7368AC3F5857
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/HgR05TPvJBzSo74OF4h5hhZ3-Ig.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210016
IP address blocks: 188.72.14.0/24 maxlen: 24
188.72.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 08:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:da:73:4b:09:bf:64:06:af:73:68:ac:3f:58:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e0474e533ef241cd2a3be0e178879861677f888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:12:ec:21:09:e7:08:69:31:80:66:17:9b:
d5:01:c4:dd:8d:fd:dc:c6:0a:45:f5:58:e2:73:d3:
7b:27:29:4c:d7:dc:a1:63:30:31:31:5d:2b:da:62:
6a:e5:cb:a0:1f:f4:fb:ab:2f:56:6b:66:b3:f9:1f:
7f:2e:ec:a3:df:f4:9e:2e:f0:b7:34:c3:57:76:05:
1c:ff:71:e4:14:1c:b3:2d:1c:9d:9e:8c:33:a5:b3:
28:b0:2d:70:39:8f:7b:4b:0b:c5:f2:1c:e0:17:60:
9f:43:d7:f2:f5:eb:95:25:3e:dc:a0:a6:ed:4f:e5:
1f:0b:37:52:11:c9:4b:b9:97:fb:72:05:42:a4:05:
e7:7a:82:96:d3:cf:a9:c2:eb:97:ef:5f:21:54:d0:
1a:73:5d:92:20:e1:15:84:63:ff:81:d6:5d:57:4d:
4a:29:a8:cb:9a:a3:c4:9a:0a:75:de:da:44:ff:cb:
c3:e6:64:c7:86:de:b5:4c:7a:b0:4b:42:1c:29:ed:
fb:d7:1d:2f:ee:b7:53:98:47:2f:dd:bb:57:1c:28:
5e:87:d1:62:c3:48:60:88:66:67:cd:06:54:1a:aa:
a7:43:96:8e:e5:91:3b:50:6b:c9:fe:c8:3f:b0:6e:
4b:d0:e9:4e:31:3e:91:6c:43:45:0e:4d:ab:55:f5:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:04:74:E5:33:EF:24:1C:D2:A3:BE:0E:17:88:79:86:16:77:F8:88
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/HgR05TPvJBzSo74OF4h5hhZ3-Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.13.0-188.72.14.255
Signature Algorithm: sha256WithRSAEncryption
d3:39:46:1a:b6:d2:bd:2f:39:26:ed:35:85:d6:1a:90:ab:20:
2e:8a:64:98:0c:d2:3b:3e:4a:23:40:33:ab:ee:4d:19:fd:e3:
c3:27:74:86:fb:74:82:7d:31:cb:dd:9d:50:7e:d1:c2:09:54:
79:9e:1b:0a:22:bb:33:09:d8:66:c3:12:58:58:67:03:32:b2:
1d:3b:b9:70:e2:5c:33:31:56:f1:2f:15:56:71:52:76:51:fb:
e5:b3:6b:54:13:53:3d:56:dc:b4:f9:15:46:e9:84:50:8b:c6:
92:f4:a1:b1:6a:5a:b2:cb:b9:ee:bb:3e:41:f8:34:e3:ea:d3:
c8:01:03:c2:6b:95:a0:67:e5:de:a4:08:3f:6c:48:a1:2e:ab:
86:d6:8c:49:d7:a0:59:c4:f4:44:c6:9d:64:fd:74:8b:59:3d:
3b:7d:55:8d:ec:f6:fb:f8:1b:3f:24:2d:ce:8b:65:0c:82:91:
20:17:7e:22:a0:27:e2:30:87:e7:2c:cf:a8:aa:cd:e1:93:7a:
91:f8:e2:12:9d:90:28:50:b7:7a:24:5a:ac:1e:e1:fe:81:97:
04:ea:36:ab:ad:9e:67:dd:1a:bd:95:89:03:7b:93:5e:ed:bf:
15:0e:44:18:bb:8c:cf:54:a4:d6:29:a7:b9:ec:fd:27:06:32:
de:da:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:18 2025 by rpki-client