Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/HItsaDH8x-uX6KCumvbOL_SHGCc.roa
File: HItsaDH8x-uX6KCumvbOL_SHGCc.roa (raw, json)
Hash identifier: mLrU9md5cmf7V3QuTGooCkv4K+fIEkN2/p2psObGa+4=
Subject key identifier: 1C:8B:6C:68:31:FC:C7:EB:97:E8:A0:AE:9A:F6:CE:2F:F4:87:18:27
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84F4C73A9E0A27E60D9F1F22B450C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/HItsaDH8x-uX6KCumvbOL_SHGCc.roa
Signing time: Thu 02 Jan 2025 11:48:17 +0000
ROA not before: Thu 02 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.37.99.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 08:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4f:4c:73:a9:e0:a2:7e:60:d9:f1:f2:2b:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c8b6c6831fcc7eb97e8a0ae9af6ce2ff4871827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:d7:f9:b2:c2:00:6c:67:75:aa:b1:70:31:
ed:ed:3c:36:52:ec:81:a5:22:11:db:9b:4f:ba:0e:
37:99:43:11:6d:da:5b:5d:d2:bf:83:0a:91:29:cc:
25:73:74:6d:59:5d:a1:cd:70:22:f5:93:29:23:a0:
ce:67:4e:fd:70:3b:05:ce:29:f7:59:0e:b5:8b:be:
f2:4e:dc:08:29:c6:1b:65:e1:8c:21:6d:d0:f3:e6:
12:fe:65:b3:9c:0a:b4:da:f6:55:57:cb:b0:a2:cb:
29:77:81:6b:e6:c3:36:f8:d6:71:e8:9e:49:c7:56:
c2:79:c8:1f:12:e5:b9:23:82:07:33:c4:e3:1e:11:
57:a8:b8:8e:cf:f9:8c:2e:2c:08:0b:50:4c:e6:13:
2d:0b:e5:ea:ce:77:98:6d:c4:56:11:0e:d9:a7:b0:
e9:2b:00:f9:ff:31:35:65:b7:c4:f3:ba:93:00:c2:
81:14:e7:4e:db:38:84:d7:93:9d:fb:02:59:24:c1:
46:3d:84:5a:e6:2c:ca:30:04:8b:4f:fc:2f:20:2b:
ab:e4:85:49:b3:ed:8a:b2:7a:e8:b5:b4:20:5a:5c:
e4:2d:0f:c3:01:3d:80:f9:28:4d:c7:84:d7:50:40:
7f:82:95:ae:a5:93:ea:90:a5:40:39:21:9e:69:4e:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8B:6C:68:31:FC:C7:EB:97:E8:A0:AE:9A:F6:CE:2F:F4:87:18:27
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/HItsaDH8x-uX6KCumvbOL_SHGCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:53:b9:8e:76:ca:d8:35:f8:ac:c8:81:3a:00:27:8d:48:32:
a5:a8:65:ca:8f:d5:a1:63:bb:46:12:36:b2:b2:4d:4b:97:f0:
41:05:e3:f0:03:88:19:07:4f:50:90:04:37:c4:20:b2:86:11:
fb:b8:aa:90:3d:06:2b:aa:e9:90:96:57:6d:83:23:fa:db:f2:
d7:e0:f1:04:35:15:77:15:96:29:c9:6b:97:27:6b:88:f2:04:
1c:0b:bf:95:e9:1c:05:02:15:ff:82:9e:76:c8:f8:8a:a9:06:
15:73:5e:ab:c7:6f:0c:ba:40:b0:c3:f6:c8:ee:e2:a8:43:75:
65:e8:9c:57:19:11:08:f1:3d:1c:fb:d7:92:af:43:77:ae:27:
3d:16:46:ef:c6:bc:36:97:8f:10:01:48:39:fa:cd:06:36:b3:
bb:a7:5a:bf:02:7d:b3:03:a8:2a:73:bd:ed:b0:3b:0b:aa:cf:
d2:43:58:0e:5e:70:35:84:b5:10:b2:c7:45:e6:01:48:63:b8:
fe:cb:86:50:e8:03:83:e8:ee:4d:2c:66:b1:f5:ac:6b:f6:59:
bb:8c:f3:96:66:5e:ee:0f:4b:86:58:b3:45:c5:cc:c9:4f:3b:
72:97:67:07:19:20:29:4b:81:2f:a1:b8:13:80:0b:ba:62:e3:
61:6d:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:52:41 2025 by rpki-client