Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HiCGytPg1VM04c8IHSFhtPb6gos.roa
File: HiCGytPg1VM04c8IHSFhtPb6gos.roa (raw, json)
Hash identifier: 6tpd2wFjHLbSO6QWiumVYEIStBISuc5GuTgJw+Y5JY0=
Subject key identifier: 1E:20:86:CA:D3:E0:D5:53:34:E1:CF:08:1D:21:61:B4:F6:FA:82:8B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242500E7634FA86874C9E2A8295665
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HiCGytPg1VM04c8IHSFhtPb6gos.roa
Signing time: Thu 02 Jan 2025 17:50:44 +0000
ROA not before: Thu 02 Jan 2025 17:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50360
IP address blocks: 78.142.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:25:00:e7:63:4f:a8:68:74:c9:e2:a8:29:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e2086cad3e0d55334e1cf081d2161b4f6fa828b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:12:97:5c:e2:33:ef:86:42:4d:92:b7:64:
43:57:7d:8d:3c:0a:0a:e9:ee:2b:7c:b1:27:5c:cb:
64:04:31:20:eb:3b:6c:5c:52:d5:3a:46:da:d3:b6:
ff:82:a9:52:a5:a9:ce:33:01:97:85:30:eb:42:f7:
76:d4:1a:a9:6f:3c:0f:3d:f0:15:7b:b2:76:15:a9:
4f:df:bd:72:24:43:7b:58:83:cc:2d:16:94:cc:d0:
a5:47:a6:9e:bb:06:8c:08:2f:05:8a:e3:3d:8c:03:
8e:6f:f3:d9:a1:6c:d8:33:c6:92:3c:11:e6:54:9d:
6a:8f:90:6d:5c:a8:f9:4b:11:5b:d0:22:95:35:e8:
82:28:5a:ea:28:ff:b3:ad:7d:a9:22:c6:2d:d8:c5:
fc:18:7e:1d:28:ad:40:14:59:98:31:55:ef:6c:e0:
0e:3e:1f:3f:4f:32:47:c4:ec:c8:b6:dd:5b:d6:6f:
94:7d:9f:55:28:13:3f:ec:ea:94:4f:da:83:15:4e:
82:b9:e6:26:9d:e3:5d:cc:d0:ca:a4:36:8b:26:9b:
48:ac:6d:4f:1e:45:6e:7d:28:cc:a7:07:a7:a3:d2:
3f:a9:d0:44:ea:ac:5d:fa:ce:2f:fc:e7:52:89:2b:
79:23:02:c3:05:4c:cc:99:f6:20:53:4c:ed:be:a1:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:86:CA:D3:E0:D5:53:34:E1:CF:08:1D:21:61:B4:F6:FA:82:8B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/HiCGytPg1VM04c8IHSFhtPb6gos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.49.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9c:82:c6:fd:50:ef:8c:dd:1a:b1:ab:da:9b:4b:36:0a:f0:
95:19:c9:84:e3:8a:a6:f4:84:15:38:be:5a:d5:a1:83:7b:11:
1f:a0:70:1c:2f:c3:28:01:ac:05:21:21:27:38:d9:8d:8e:5a:
ba:b5:21:a8:f2:d3:9a:33:2d:82:60:13:68:9e:cf:71:ef:51:
b8:6c:c1:4e:a4:96:08:da:a1:da:7b:2b:18:c0:07:41:1a:11:
e7:c0:39:3e:c9:0a:26:47:7b:d6:51:4e:c8:49:7d:20:eb:ef:
ac:30:75:33:21:1a:d0:73:7d:ad:af:4f:44:b4:f9:2a:05:60:
b2:6a:6b:28:33:30:9a:3b:76:44:67:9d:e7:7d:26:fc:70:03:
fe:a5:23:61:4d:f6:ea:ce:03:a0:9b:7b:2a:43:1c:d1:ba:46:
27:fd:eb:91:e0:c4:55:23:e6:15:73:dd:88:52:8b:3d:ae:53:
43:48:cd:34:b4:47:cd:94:89:f0:60:d3:fa:ea:da:a3:09:f4:
a7:85:a6:35:d8:ed:76:88:71:83:39:5a:3e:2b:20:fb:25:66:
de:d7:fa:80:3b:af:1b:4b:c9:8f:fe:0b:f3:7c:ab:96:d1:2b:
5d:c7:03:27:ee:27:b3:da:7d:a8:66:71:88:35:72:04:1a:8a:
a8:14:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:16:31 2025 by rpki-client