Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/HGVVklCoLYFcgUm-mVHlBL7PQHA.roa
File: HGVVklCoLYFcgUm-mVHlBL7PQHA.roa (raw, json)
Hash identifier: Vw8Gt6FBzz0bCBG9SIjR0uR7m44aW0F4+v9soihrsk0=
Subject key identifier: 1C:65:55:92:50:A8:2D:81:5C:81:49:BE:99:51:E5:04:BE:CF:40:70
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 018CC94BD3B4750548397CE5D27B161C0471
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/HGVVklCoLYFcgUm-mVHlBL7PQHA.roa
Signing time: Tue 02 Jan 2024 08:30:38 +0000
ROA not before: Tue 02 Jan 2024 08:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47605
IP address blocks: 85.194.194.0/23 maxlen: 23
62.220.228.0/22 maxlen: 22
85.194.220.0/22 maxlen: 22
87.236.152.0/21 maxlen: 21
85.194.234.0/23 maxlen: 23
185.38.0.0/22 maxlen: 22
80.208.240.0/21 maxlen: 21
2a00:1d50:3::/48 maxlen: 48
2a00:1d50::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:d3:b4:75:05:48:39:7c:e5:d2:7b:16:1c:04:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Jan 2 08:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c65559250a82d815c8149be9951e504becf4070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c4:27:30:bf:ba:74:96:ca:86:73:2b:ce:0d:
8c:96:dc:9e:3f:ee:71:2b:2e:95:1b:af:a0:82:cb:
4e:26:ef:a8:c8:75:aa:19:e5:9f:56:79:ad:c2:f7:
fa:33:57:65:45:60:62:f6:c9:8d:ef:41:fd:fb:ea:
59:11:e7:2d:4e:f1:e5:1e:61:30:4c:c1:8e:56:8c:
21:63:47:ec:1c:91:36:57:66:63:5d:63:26:51:05:
49:bd:10:b3:7e:c7:ad:19:40:06:fa:00:67:aa:a1:
6b:78:6f:39:bb:e3:98:8b:f8:31:4c:7d:99:ab:e7:
36:67:61:3e:ac:c0:04:d7:62:7d:ab:97:bd:3d:ed:
e4:34:8a:67:61:61:ce:68:14:e8:58:2d:4a:20:34:
c1:ca:28:64:42:c9:d6:5c:de:dc:df:15:46:8d:3e:
87:26:5c:c1:70:a0:f8:92:c2:ee:58:e0:3e:5b:c8:
d2:2a:f1:53:44:59:b2:84:c3:03:22:1c:73:0f:fe:
49:34:cf:e6:71:38:90:94:d5:4a:64:a1:d6:6a:ca:
3e:ad:8e:1d:2b:92:33:fb:2a:ce:d0:25:ec:05:d1:
9f:b9:f9:12:e0:41:90:07:0f:04:07:22:d0:06:4a:
dc:f3:d9:62:19:6d:01:e4:00:43:1e:03:a5:4d:0c:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:65:55:92:50:A8:2D:81:5C:81:49:BE:99:51:E5:04:BE:CF:40:70
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/HGVVklCoLYFcgUm-mVHlBL7PQHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.228.0/22
80.208.240.0/21
85.194.194.0/23
85.194.220.0/22
85.194.234.0/23
87.236.152.0/21
185.38.0.0/22
IPv6:
2a00:1d50::/32
Signature Algorithm: sha256WithRSAEncryption
b6:ce:85:24:30:83:ae:7f:f9:d6:df:30:e3:45:a9:9a:e3:01:
6f:b7:8d:ee:82:dd:c8:cc:93:33:59:8f:53:69:75:ab:e8:65:
b7:98:9e:04:73:fd:9e:2a:79:97:67:f1:d3:35:c9:05:53:36:
61:ed:41:8f:f9:ff:75:19:6c:3b:5a:17:93:87:8a:f6:44:c8:
c1:55:6c:5e:9a:22:9d:07:30:20:e7:3a:e0:45:9f:6e:1a:e0:
06:e8:d1:64:bb:62:f9:02:2b:dc:6d:cb:74:a9:22:57:11:a1:
df:dc:28:07:93:3c:49:39:b2:da:21:b2:4a:f3:a0:05:be:06:
a8:f6:6f:a7:dd:a5:d7:b7:ab:2d:63:f6:c4:18:09:8a:60:dd:
1f:7d:ce:cd:5d:3b:38:8d:c4:ba:bb:e9:7b:7d:d8:ae:0d:eb:
b9:95:d1:a9:4b:2a:89:e6:76:0a:6f:0b:0b:a2:85:34:1f:75:
c7:30:57:6a:c0:37:5f:82:8b:90:82:bc:50:31:17:83:ce:74:
34:3c:09:12:cd:f0:f2:db:d3:a3:a4:7e:67:b7:ca:5f:96:c5:
cb:f6:84:a6:80:7d:bd:3d:00:2d:9a:0d:ab:08:cb:e6:93:f2:
d7:55:59:9e:c0:bb:43:93:25:08:42:bd:40:e1:c3:dd:3a:66:
df:da:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:22 2025 by rpki-client