Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HZvyyTkMjJOwZkr_qMtjouMiKHI.roa
File: HZvyyTkMjJOwZkr_qMtjouMiKHI.roa (raw, json)
Hash identifier: MkjuJfomANu6LX2lAFAda6zqxlcRBqhEnCp+9ExnB8Q=
Subject key identifier: 1D:9B:F2:C9:39:0C:8C:93:B0:66:4A:FF:A8:CB:63:A2:E3:22:28:72
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01907923AB40E4FAB56EC33358C1E8CADFCF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HZvyyTkMjJOwZkr_qMtjouMiKHI.roa
Signing time: Wed 03 Jul 2024 15:08:18 +0000
ROA not before: Wed 03 Jul 2024 15:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8434
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
193.235.142.0/23 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.168.0/24 maxlen: 24
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 24
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:23:ab:40:e4:fa:b5:6e:c3:33:58:c1:e8:ca:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 3 15:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9bf2c9390c8c93b0664affa8cb63a2e3222872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:47:bc:70:a9:ac:40:f6:8f:42:1d:53:ac:
22:12:77:54:e6:77:61:e5:08:7d:7f:ac:13:89:20:
d7:c3:ed:3f:fe:44:4a:5b:99:e1:1d:de:62:ad:dc:
44:ec:13:0a:b8:70:61:ca:25:d5:ba:86:98:82:a2:
b3:f2:d3:aa:48:ac:dd:27:33:99:88:ce:a0:38:d4:
16:65:13:4e:b9:24:1b:28:f8:1d:93:5d:68:5e:78:
91:02:32:6e:70:df:5a:6e:a9:d0:74:f1:98:83:7e:
2f:d3:d9:6e:d1:7e:5a:ff:3e:e2:a9:52:fa:45:22:
dd:e0:e8:40:63:df:d0:9d:84:95:e7:fb:64:c3:bc:
fe:30:ed:ad:12:b4:66:da:8d:55:d7:3e:70:77:8c:
91:91:ff:1f:16:55:ba:95:f4:51:5d:9b:61:e2:c6:
a6:87:2a:a8:cf:f2:05:cb:98:e9:bd:52:ce:98:17:
99:ca:2c:bc:dd:65:f7:b3:8f:b3:24:7b:0a:4e:f5:
a1:6d:27:d9:96:64:4d:df:96:79:fb:47:e9:45:2f:
1a:d9:3d:66:ab:34:6a:56:30:30:44:87:d9:d4:5d:
06:4a:20:70:d5:26:10:20:fb:5f:6e:24:84:40:2e:
17:95:56:4a:82:58:f5:4a:e6:69:91:17:75:3b:be:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:F2:C9:39:0C:8C:93:B0:66:4A:FF:A8:CB:63:A2:E3:22:28:72
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HZvyyTkMjJOwZkr_qMtjouMiKHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.97.0/24
192.71.158.0/24
192.121.172.0/24
192.121.192.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
193.235.142.0/23
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.168.0/24
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:d5:c6:af:db:df:ef:18:73:3a:3e:e9:a9:7e:4c:f4:33:d6:
8f:90:7e:4b:0a:74:78:39:63:24:2a:79:61:0b:54:b7:da:66:
bc:1d:0d:52:f1:7f:1f:b2:cc:13:56:97:03:b7:57:37:b2:f3:
1c:3f:c6:ec:38:99:17:35:91:f5:54:1e:7d:f4:0c:88:c8:fa:
e1:4a:04:5f:14:7f:91:8f:6e:7c:8d:3e:53:dc:af:5d:17:8d:
22:41:f3:67:9d:66:40:48:2f:67:fa:66:10:06:78:2b:db:60:
38:1d:40:6e:86:57:50:46:4f:8f:68:ae:8a:92:24:15:0e:08:
f9:10:52:f6:9a:e8:24:c7:e0:fe:6d:25:9d:64:4b:2f:a0:18:
e6:6c:16:9e:e1:41:f0:77:f4:94:b6:c1:72:c3:07:ad:c6:c0:
6e:6b:f4:ca:b2:fb:4a:57:2a:c8:5c:0d:e0:a3:bd:5d:3a:54:
01:ff:bd:09:91:49:aa:32:f0:95:cb:1d:f5:a2:46:7d:97:ee:
9b:a0:63:14:6b:4a:e3:fb:1a:62:1e:70:e4:e1:3d:b7:e4:98:
8c:4c:7f:e6:55:d2:f0:72:bf:f0:1d:ef:ae:27:6d:2f:da:c3:
96:a6:78:36:e3:7b:34:32:69:8c:94:14:25:12:79:05:71:ec:
06:fe:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:59 2025 by rpki-client