Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hpzueHV6aswh2noBPwW11qZ3jJA.roa
File: hpzueHV6aswh2noBPwW11qZ3jJA.roa (raw, json)
Hash identifier: j35+PoBTgy5WIZwWnGoEYORgMV4pmGj3onjCVRSXt14=
Subject key identifier: 86:9C:EE:78:75:7A:6A:CC:21:DA:7A:01:3F:05:B5:D6:A6:77:8C:90
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018ED129E3FE8008469080C023C108DA32E4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hpzueHV6aswh2noBPwW11qZ3jJA.roa
Signing time: Fri 12 Apr 2024 07:16:07 +0000
ROA not before: Fri 12 Apr 2024 07:16:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61162
IP address blocks: 192.71.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:29:e3:fe:80:08:46:90:80:c0:23:c1:08:da:32:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 12 07:16:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=869cee78757a6acc21da7a013f05b5d6a6778c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:0d:82:0b:77:a1:3a:d4:1f:21:fa:5b:97:
3b:06:c6:b4:6f:11:82:64:1b:11:fe:01:27:4c:2c:
f2:7c:10:a4:ed:c8:e5:83:57:1b:d9:02:25:ad:0e:
54:4b:35:16:24:85:6c:ef:c6:2b:5a:81:ae:83:51:
5f:14:12:aa:7a:67:75:a2:ac:a4:8e:0a:79:53:a4:
6c:8b:e2:65:30:d0:ef:65:cd:f5:e0:f0:47:46:9a:
31:0f:39:00:b7:e3:25:7c:bf:7b:d7:9f:66:13:03:
50:6d:d2:45:32:02:b7:b6:31:b9:4f:a1:71:94:d5:
a9:d8:ba:25:1c:d7:67:f7:f6:ca:09:db:d7:9b:18:
8f:1f:62:73:cb:7d:a6:3c:32:d9:0d:f5:15:3c:47:
86:b5:b8:bc:1c:16:81:67:9f:04:42:8c:82:b8:d5:
f4:fa:5d:22:b3:23:b5:b8:37:b3:12:31:b5:f0:91:
a9:28:77:c9:c3:02:96:ce:a9:88:01:7a:8a:46:fc:
80:f9:58:98:bb:39:02:f0:57:af:a5:a2:22:84:1a:
9d:c0:8e:c3:c0:55:89:95:36:8d:a5:f9:12:18:6a:
4e:ea:fe:a5:72:34:11:dc:34:6e:0d:44:d5:3e:7b:
72:4f:20:e6:5e:8f:ca:23:f3:e5:bd:20:dd:dc:ae:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:EE:78:75:7A:6A:CC:21:DA:7A:01:3F:05:B5:D6:A6:77:8C:90
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hpzueHV6aswh2noBPwW11qZ3jJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.254.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:62:0a:e7:c5:28:c4:53:9f:0c:67:a3:7f:d5:92:04:1d:b7:
f1:6a:37:44:c3:a8:98:29:42:f8:c6:84:6e:74:91:69:f1:9b:
fc:07:9f:f4:26:fc:bb:9b:68:43:46:c6:33:a2:4f:c4:2c:d3:
8d:05:a4:bd:35:e7:8e:ba:1b:e4:13:82:0e:51:a7:c2:aa:30:
fd:9f:77:f4:6c:c9:1b:2d:21:84:b8:8a:56:38:6f:03:bc:cc:
0b:b4:ec:eb:51:7a:84:40:a1:53:f1:69:05:d9:73:61:c6:01:
c4:81:68:6b:6d:e8:fc:29:b0:47:ac:0a:44:fd:ee:d1:75:5a:
56:45:4a:cf:8d:3b:52:2f:ae:92:05:38:ca:83:37:ac:6f:66:
0b:e1:9b:22:9a:00:b6:f5:16:89:28:ba:5d:39:7f:e5:40:3e:
6e:ea:b1:59:5a:59:bd:4a:82:aa:57:3a:cd:37:63:bc:b3:ea:
2a:c3:00:e7:b3:8f:d2:4b:2b:0e:80:c8:50:80:f7:fd:59:24:
95:31:f1:2e:0c:ab:95:78:8a:29:c8:6b:8c:58:e1:d0:49:33:
98:d9:dd:05:a7:20:3c:32:3b:84:b1:c8:30:06:62:6e:6e:31:
b1:ed:21:b8:96:fe:71:3b:43:7a:21:7d:db:b9:12:ec:dc:48:
be:2d:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:47 2025 by rpki-client