Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Hd8pziEwiWShs0QplYX_hhrFeLM.roa
File: Hd8pziEwiWShs0QplYX_hhrFeLM.roa (raw, json)
Hash identifier: VtHvt0sYVrHVa2vyFtIF9hWxPlANWv2z8kFlUcILstM=
Subject key identifier: 1D:DF:29:CE:21:30:89:64:A1:B3:44:29:95:85:FF:86:1A:C5:78:B3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01928AA0E2865F60D7E1140FEC9C21562D0C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Hd8pziEwiWShs0QplYX_hhrFeLM.roa
Signing time: Mon 14 Oct 2024 10:44:12 +0000
ROA not before: Mon 14 Oct 2024 10:44:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204074
IP address blocks: 193.183.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:a0:e2:86:5f:60:d7:e1:14:0f:ec:9c:21:56:2d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 14 10:44:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ddf29ce21308964a1b344299585ff861ac578b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:7a:2f:cc:ae:ac:c9:16:ea:08:15:c8:9d:
8e:dd:25:46:f4:a2:ce:08:9c:c5:ef:af:b8:f5:6d:
18:52:8c:e3:7a:cc:dd:6d:3d:a8:74:35:66:09:6b:
a1:d2:ba:46:f6:74:ef:88:44:0c:3a:28:43:39:b2:
e0:8b:a7:23:b7:f5:50:07:8b:51:e4:31:e4:a9:38:
64:5c:19:02:da:25:dd:7f:b7:b4:e8:c1:b5:b3:bf:
a2:bc:5f:aa:b8:24:13:66:0f:18:2d:4b:72:b0:e5:
6d:df:a0:b1:45:e3:a6:8c:01:40:a0:af:00:a9:93:
b1:e0:b5:73:2b:25:4c:80:68:ec:68:58:81:1e:88:
a2:d2:65:0d:1b:69:b8:65:24:03:86:7e:16:a2:45:
58:9d:d3:21:77:3e:95:36:f4:0b:11:87:c8:dc:3d:
d8:50:41:d1:e3:0d:50:df:91:76:be:ed:fd:75:91:
a3:1d:25:f1:95:eb:4b:d5:14:27:30:09:a6:cc:fb:
52:b6:ef:3f:81:cf:88:20:c6:18:3e:46:b2:1d:80:
f2:fd:1e:d4:2b:2b:30:de:ea:c5:49:f0:fa:2b:f3:
fe:c6:61:01:c1:fa:79:23:91:7d:d6:05:3a:30:a2:
1c:5b:0b:49:a7:11:51:6c:f9:d6:50:44:79:ef:f2:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:29:CE:21:30:89:64:A1:B3:44:29:95:85:FF:86:1A:C5:78:B3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Hd8pziEwiWShs0QplYX_hhrFeLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.80.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3c:35:06:59:f0:03:57:20:00:21:da:48:d9:77:1e:78:81:
67:a2:71:57:a6:d7:7a:7a:31:ca:f8:7e:be:66:7d:b8:9b:d8:
a2:72:30:be:19:69:5c:3f:c1:37:27:5f:bc:6e:e3:87:71:54:
d3:74:25:ce:40:d1:81:ee:84:70:b1:3f:12:b0:65:19:d7:30:
5d:11:72:fd:a3:5d:09:6e:f3:3d:33:31:d3:af:5e:18:b5:80:
04:d3:43:21:f6:74:3b:03:15:b6:22:d8:0e:55:0e:5c:c1:f3:
58:a6:28:62:e8:a7:4b:94:19:f7:18:21:24:d6:0b:35:dd:11:
9b:07:87:1f:99:bc:18:a7:e1:2d:d0:3b:d8:57:a3:73:d6:d1:
48:02:b3:57:41:41:06:24:b9:55:24:ed:ff:da:55:b6:8e:b7:
19:35:80:01:1d:ff:c1:bd:51:e0:2c:b8:77:5c:76:e1:f1:b0:
fd:81:ff:bf:95:a1:2b:79:67:92:6b:7e:07:fe:dc:94:e8:7a:
50:59:1d:13:ce:a0:4c:6c:8c:63:6d:0c:bf:56:bf:72:ff:4d:
3e:11:a6:65:9f:87:01:3b:1d:3c:11:ff:84:ed:ba:b6:31:a5:
b0:5d:86:da:58:6a:20:73:30:6b:7e:6a:51:7e:ef:1e:3e:e8:
65:76:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:58 2025 by rpki-client