Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/hnUaDstRPs_D_6-dusZU4oA5MvI.roa
File: hnUaDstRPs_D_6-dusZU4oA5MvI.roa (raw, json)
Hash identifier: koxLqshBew2QOUgUPIRcX8BEfe4fRuu11LszapJ+K/Q=
Subject key identifier: 86:75:1A:0E:CB:51:3E:CF:C3:FF:AF:9D:BA:C6:54:E2:80:39:32:F2
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018EFAF03018B0DC9FC329B2C9D5D28A80A5
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/hnUaDstRPs_D_6-dusZU4oA5MvI.roa
Signing time: Sat 20 Apr 2024 09:57:08 +0000
ROA not before: Sat 20 Apr 2024 09:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8342
IP address blocks: 45.151.60.0/22 maxlen: 24
81.17.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 07:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fa:f0:30:18:b0:dc:9f:c3:29:b2:c9:d5:d2:8a:80:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Apr 20 09:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86751a0ecb513ecfc3ffaf9dbac654e2803932f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:a9:b6:52:99:bc:05:f4:c2:99:b1:ae:b1:
41:ca:7e:14:37:1c:80:29:17:8a:d5:63:0d:37:f3:
f7:72:12:f7:f8:3a:ed:ce:36:f9:d2:5d:ec:f8:d6:
1f:25:9b:f4:50:82:6c:84:6c:40:0f:7b:43:8e:46:
ca:22:13:b1:7d:57:47:30:32:34:29:5d:10:65:f5:
e0:41:e3:75:b0:b7:19:c0:aa:4c:0b:e1:87:f8:e4:
55:17:42:e7:11:63:b7:b9:41:8e:10:5c:13:de:d3:
e9:78:00:83:6e:b3:21:e8:62:3d:73:5b:2b:85:4d:
60:2d:29:1d:05:03:4d:d9:23:04:72:81:e4:e8:88:
3a:01:d6:66:77:18:bb:70:fe:ce:74:5e:6c:83:be:
b2:7a:30:f5:84:db:8e:d4:60:c4:c5:e8:f5:f4:13:
c2:30:3f:81:12:e8:d8:b3:cd:ff:9a:e4:0b:e4:61:
41:a5:ff:07:64:24:59:a3:3f:0b:18:5a:e4:11:b6:
c4:4f:3c:e8:2a:3e:a7:e2:ff:16:90:32:70:2b:f0:
03:9a:1f:95:0e:67:ac:c9:7c:bd:bb:47:10:b6:33:
f2:78:65:43:41:27:2a:89:06:fb:e6:a9:87:07:29:
af:3e:be:a9:ad:ba:39:f2:5f:85:50:9a:4b:cf:be:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:1A:0E:CB:51:3E:CF:C3:FF:AF:9D:BA:C6:54:E2:80:39:32:F2
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/hnUaDstRPs_D_6-dusZU4oA5MvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.60.0/22
81.17.158.0/24
Signature Algorithm: sha256WithRSAEncryption
33:20:af:fa:c6:82:0f:bb:e9:45:79:e1:89:17:45:54:a7:ec:
61:4b:95:48:19:6c:e3:c6:d8:2c:7d:6f:e1:3d:c4:5e:f4:17:
f5:bc:c8:d3:16:ae:0d:e3:70:80:a5:12:d8:26:04:12:ce:8a:
f8:c8:fd:4d:4e:c0:8f:a3:c0:59:8d:fb:b7:49:3d:74:dc:8e:
ca:ff:e9:1c:4c:83:f9:e7:2e:48:50:b3:59:b1:79:69:d3:b3:
91:b1:5f:2c:68:0e:b8:a8:6b:f5:70:bf:b4:ef:a9:e4:fa:5f:
46:1c:e0:be:56:62:97:65:1c:b1:ea:3d:5b:0b:fb:af:d0:a0:
09:61:34:6b:38:47:26:b7:c6:8b:34:1b:2d:93:ce:86:72:15:
d3:23:7f:31:19:65:03:39:f4:33:c0:71:2f:c9:0e:5f:75:b1:
4f:73:4a:66:86:17:52:cb:f6:c3:60:38:28:ce:a1:f5:10:c6:
15:12:13:67:17:e1:83:6b:6d:f6:12:1c:08:4f:2a:da:e7:f0:
3a:ff:2e:1e:48:53:81:c9:6f:48:8e:59:75:6a:04:47:ff:de:
10:41:7a:4a:97:9f:5e:09:55:02:b7:3e:bf:ea:51:01:7d:89:
cb:3f:68:c3:ab:fe:90:73:19:e6:fa:15:08:2b:78:3f:f1:cc:
fc:b6:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:34 2025 by rpki-client