Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/hHPmi6EnyXkHJ_adLS6GhmuIMV0.roa
File: hHPmi6EnyXkHJ_adLS6GhmuIMV0.roa (raw, json)
Hash identifier: wQnuEnGb93VAs8KguttcItvAw9C4D6UJGuhgaUBRK9M=
Subject key identifier: 84:73:E6:8B:A1:27:C9:79:07:27:F6:9D:2D:2E:86:86:6B:88:31:5D
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0190AAC102E75E2D3E45EF014CF16D08E079
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/hHPmi6EnyXkHJ_adLS6GhmuIMV0.roa
Signing time: Sat 13 Jul 2024 06:21:34 +0000
ROA not before: Sat 13 Jul 2024 06:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.31.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 05:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:aa:c1:02:e7:5e:2d:3e:45:ef:01:4c:f1:6d:08:e0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jul 13 06:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8473e68ba127c9790727f69d2d2e86866b88315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:f3:a7:ee:20:9a:24:5f:51:b1:d0:c8:2e:
19:78:d0:88:68:b7:98:fe:3b:3b:09:5f:1c:c7:95:
99:bb:9d:7f:e2:06:15:e3:4a:83:82:c2:4a:f8:7e:
71:9a:97:46:b2:db:f2:a6:82:05:9e:52:9c:3b:63:
f7:c7:c8:db:9e:33:8d:e3:c5:cd:93:f8:bd:21:63:
f2:c3:a3:dd:8c:30:1d:08:7b:a1:63:a4:c0:e2:30:
c0:93:1d:98:9b:f9:01:e0:5d:d7:df:d2:4f:07:a4:
6b:a9:34:82:1a:1e:50:f8:40:f4:64:b8:79:34:53:
bc:9f:04:48:88:76:12:6b:f6:99:f9:87:4b:c0:b9:
46:c5:67:5d:5d:00:69:40:10:46:e6:8e:08:d8:02:
78:40:45:55:49:80:f7:8f:32:0e:93:d5:bf:7d:e2:
6f:52:37:21:61:07:a9:1d:91:95:01:05:a9:56:cd:
67:a2:09:84:c5:32:fb:da:90:77:28:0f:b6:c2:ae:
1a:04:1a:de:8f:65:66:dd:87:59:3e:2d:b6:8e:f4:
4f:da:32:23:80:5a:21:b7:2a:4e:06:31:23:93:8c:
62:73:0a:d2:6c:3d:0c:c2:4b:27:a4:a8:dc:3f:f3:
29:40:82:a0:b7:de:5b:91:fc:e5:4d:dd:79:ce:b0:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:E6:8B:A1:27:C9:79:07:27:F6:9D:2D:2E:86:86:6B:88:31:5D
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/hHPmi6EnyXkHJ_adLS6GhmuIMV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fe:b1:25:31:36:e0:7e:f1:ad:cb:64:69:59:8d:d6:80:c5:
72:e4:10:0a:3a:6d:49:62:24:6a:64:0e:10:73:21:79:81:20:
23:56:8e:b7:f7:24:1c:4f:2a:e8:30:73:1a:00:f8:f3:1f:84:
f0:f3:e9:95:b0:5c:ad:e4:08:db:c1:d0:7e:44:fd:5e:e1:c9:
d0:5b:85:01:08:94:32:76:a8:88:90:c6:24:5d:71:45:de:5c:
a9:21:d1:70:19:e7:1e:15:b2:d1:7b:e1:8f:69:47:23:37:81:
d0:bd:8b:17:cd:ef:9c:9a:30:c8:ea:0a:34:cd:19:45:f9:01:
e6:7c:e8:37:c3:fc:16:a6:62:1d:f8:12:4d:bb:c5:2d:b7:f9:
e1:10:62:6d:c1:f9:85:17:ce:cc:e7:ed:65:a0:ea:14:ef:d6:
1f:3d:b9:67:f3:f6:6a:67:dd:e6:7c:8c:5d:0a:05:37:ce:f2:
d5:1b:46:9f:72:4f:8d:05:7b:c1:33:13:49:e1:aa:89:88:db:
b5:9f:e9:cd:e8:6e:d3:e4:8f:26:cd:6a:b2:7e:5d:95:3c:5f:
94:a0:74:4a:2f:ce:c6:c8:1d:29:fe:36:ac:46:56:83:e8:ac:
da:5b:f3:8d:51:6f:29:a1:7c:4d:49:ff:1b:43:00:1b:25:83:
e4:99:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:46 2025 by rpki-client