Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/HCAGV0GA-oqIG2fP1OBzOjNi5cc.roa
File: HCAGV0GA-oqIG2fP1OBzOjNi5cc.roa (raw, json)
Hash identifier: UMzo6Zazj7XP+EQEGkg8nJvk7IaUakl6cvCza0uK4zo=
Subject key identifier: 1C:20:06:57:41:80:FA:8A:88:1B:67:CF:D4:E0:73:3A:33:62:E5:C7
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 018CC2DB012CF213B387789779170ABBD107
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/HCAGV0GA-oqIG2fP1OBzOjNi5cc.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209354
IP address blocks: 85.208.205.0/24 maxlen: 24
85.208.206.0/24 maxlen: 24
85.208.204.0/24 maxlen: 24
85.208.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:01:2c:f2:13:b3:87:78:97:79:17:0a:bb:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c2006574180fa8a881b67cfd4e0733a3362e5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:0c:70:52:7c:f3:7b:5f:92:20:17:6f:16:
e7:eb:5e:4c:19:06:51:a1:d0:52:cc:13:14:00:ea:
6b:34:0d:63:53:00:e2:d5:f8:dc:1d:9f:69:04:f1:
19:69:e8:a1:9e:69:dc:cb:66:ff:55:87:28:8f:cd:
09:af:b4:17:fc:3e:94:a8:0c:75:c8:75:97:5c:0a:
b3:b5:a7:24:b4:04:71:43:31:be:44:15:76:24:8a:
5c:73:31:70:4d:b7:90:5d:e5:21:91:2b:ed:fc:ea:
93:0c:d5:6a:ee:5b:08:0c:f5:8b:7e:7f:dc:17:fd:
50:1c:a6:da:c7:6f:45:43:76:a3:d3:e9:06:6b:0d:
21:6a:d7:ae:55:90:37:b9:ac:76:ed:30:1f:52:51:
ad:a9:60:bd:ad:c1:13:e0:1a:d4:b2:be:c9:28:42:
d8:4c:bc:f2:22:9b:bb:46:fc:fa:65:81:23:1a:8e:
49:6d:b2:3b:4c:04:32:63:23:b1:85:70:31:91:c2:
76:6e:da:8c:a4:61:46:6c:60:b2:ed:d0:17:70:7a:
2b:c9:24:e9:1a:43:e4:fa:44:52:53:46:ce:88:5d:
5c:bf:f2:16:ab:8a:59:c1:1a:52:c0:78:18:4d:ea:
a7:9e:c3:46:81:f9:8c:02:78:8a:48:4a:1e:94:02:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:06:57:41:80:FA:8A:88:1B:67:CF:D4:E0:73:3A:33:62:E5:C7
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/HCAGV0GA-oqIG2fP1OBzOjNi5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:ee:73:57:28:90:b0:dd:88:3e:7d:cd:bd:60:00:48:1a:71:
78:8e:51:32:f2:49:ea:2f:87:88:47:ed:f7:42:3f:d5:34:f4:
19:3f:e4:45:80:43:55:0b:38:90:63:97:05:56:a2:db:f6:b3:
31:48:c2:9b:fa:04:a5:03:83:ec:d2:ff:a3:40:3f:ae:81:73:
e1:2f:91:6e:35:8a:25:4f:a6:29:9d:4b:8f:4d:24:88:d4:5a:
2c:92:da:76:ae:84:4e:72:be:f3:e7:15:7f:eb:de:f7:07:2d:
ab:1e:66:e9:2a:be:6c:a1:74:8e:69:88:9c:17:e9:18:d4:37:
12:72:9b:fc:45:e4:31:93:0c:62:2c:07:c5:4b:7f:dd:6c:c4:
e6:a9:00:97:93:ff:d9:a6:4a:6c:47:e2:b2:68:ec:66:97:3e:
27:ff:13:a8:e0:d4:1d:a8:10:3c:5b:c0:56:44:84:81:3f:1b:
c4:b5:ee:b8:86:d6:fa:f5:2e:62:0a:1f:c8:7f:92:c0:78:ed:
36:cc:1b:93:d0:4a:97:8a:35:19:06:0d:ea:82:58:b3:cd:e3:
df:a9:5a:34:54:65:0e:24:6b:7b:fe:2c:f1:43:ad:47:56:ec:
9c:e7:80:7a:3c:59:7a:09:39:fd:39:fd:b5:e5:60:3b:0e:b0:
98:5f:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:49:28 2025 by rpki-client