Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/HcbapyQfJQQpZ9P5BoYcoAHwk5g.roa
File: HcbapyQfJQQpZ9P5BoYcoAHwk5g.roa (raw, json)
Hash identifier: qnG6+etyKcCzTqpzq+qkStZQ5y3TxYMRAUWFoQImoEs=
Subject key identifier: 1D:C6:DA:A7:24:1F:25:04:29:67:D3:F9:06:86:1C:A0:01:F0:93:98
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 0194274840A6AC87495DAA80367CCCD5C08F
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/HcbapyQfJQQpZ9P5BoYcoAHwk5g.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215845
IP address blocks: 77.247.108.0/24 maxlen: 24
185.53.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 18:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:40:a6:ac:87:49:5d:aa:80:36:7c:cc:d5:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dc6daa7241f25042967d3f906861ca001f09398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:62:94:e3:b3:15:f5:55:1a:fe:a7:0b:20:
10:75:05:18:ad:73:a9:f8:bc:b9:68:48:34:23:df:
80:47:df:50:6c:f5:d1:68:d6:26:a3:3f:f8:72:b3:
8a:01:a1:f1:53:0b:47:b2:9f:4d:4f:a1:1a:59:bf:
ce:3a:ef:c9:de:16:ff:22:ff:11:9e:6b:d6:c5:70:
77:63:cb:c7:b1:a5:8a:0c:ff:2d:6c:b0:4b:d3:cd:
b0:69:fc:df:8a:95:19:c0:f2:dc:d4:85:3b:9f:36:
4c:f5:8f:93:9a:e1:0b:01:e2:96:7b:e1:4c:4a:da:
da:5a:18:71:d5:5f:65:5b:c6:af:47:79:83:42:6b:
76:30:5e:e8:82:c8:66:36:b9:80:2d:a0:f7:20:0b:
f2:7d:e6:75:71:96:ec:1f:4e:ea:58:62:c7:27:7b:
6f:a2:87:f7:b7:e6:c6:b0:4f:b4:87:19:9d:e5:68:
ca:8c:a6:d0:07:15:eb:2e:f6:42:c8:f2:83:94:bd:
32:7a:be:6d:02:c5:9f:cd:1b:a6:02:19:db:31:0b:
f4:46:22:fd:f7:7e:60:12:b1:f4:f3:09:1d:f7:a2:
89:53:c7:4f:b9:b8:99:64:28:8a:b9:e2:29:b6:f2:
dd:fd:58:84:47:14:c8:d0:2b:76:7f:ea:1b:4c:a9:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C6:DA:A7:24:1F:25:04:29:67:D3:F9:06:86:1C:A0:01:F0:93:98
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/HcbapyQfJQQpZ9P5BoYcoAHwk5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.108.0/24
185.53.90.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c4:aa:12:e3:22:e5:fb:ed:ce:99:43:fc:ee:d5:49:b1:ed:
f3:d2:af:c4:00:79:96:08:8c:6a:70:20:22:fc:ed:ad:a3:24:
52:06:c0:9d:ad:30:08:e7:81:11:4d:55:73:2a:5c:46:d6:b4:
ed:9a:87:99:8b:24:a7:1e:62:ae:55:4b:b3:19:13:3a:ea:4c:
80:f4:46:96:59:54:67:52:6b:85:89:35:c9:70:70:09:af:27:
de:1c:b9:91:f9:9b:8e:82:83:64:25:d7:64:93:09:f7:12:3e:
b3:8b:ae:92:62:d9:8b:83:5a:27:c2:4b:0e:b8:c5:88:a2:f9:
cb:a5:c6:dc:74:87:a1:81:1b:8a:f2:b9:7c:63:7d:b2:57:4a:
18:a6:bb:55:f2:6f:37:5c:18:35:68:1e:eb:04:8e:a6:fe:95:
ab:21:cc:93:ab:bf:24:2e:7c:9d:be:43:8e:79:ae:8b:96:90:
2f:43:7b:28:78:22:f4:2a:41:e7:0e:5f:42:a5:69:35:ec:88:
a4:84:1c:9d:42:c1:bc:39:7b:c0:24:dc:1f:e4:67:b9:8e:ee:
61:33:51:28:13:d7:7d:07:a9:30:da:84:85:25:48:80:1e:3e:
4d:ea:45:f2:f7:9e:d4:e8:25:eb:1e:72:82:e1:f0:45:90:9e:
4f:63:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:10 2025 by rpki-client