Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/HHaXoKH7wYsF30YtP87twrZVrF8.roa
File: HHaXoKH7wYsF30YtP87twrZVrF8.roa (raw, json)
Hash identifier: FcVMEDmC0YfDGGh9SzRtXagr8H01r12Z6sqj1kvVws0=
Subject key identifier: 1C:76:97:A0:A1:FB:C1:8B:05:DF:46:2D:3F:CE:ED:C2:B6:55:AC:5F
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 018CC493126D3C23CCC1BF0F4FFEED52D48C
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/HHaXoKH7wYsF30YtP87twrZVrF8.roa
Signing time: Mon 01 Jan 2024 10:30:21 +0000
ROA not before: Mon 01 Jan 2024 10:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201841
IP address blocks: 185.63.157.0/24 maxlen: 24
185.63.158.0/23 maxlen: 23
185.63.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:12:6d:3c:23:cc:c1:bf:0f:4f:fe:ed:52:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Jan 1 10:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c7697a0a1fbc18b05df462d3fceedc2b655ac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:31:07:c9:24:67:b7:df:59:d7:59:f8:3d:
c5:0d:c5:78:29:5d:8e:33:c7:1b:a3:e4:33:1c:72:
5d:26:44:f3:3c:66:3e:e3:ee:54:d4:8f:6c:0a:29:
a6:5d:ea:85:54:0a:5c:5c:84:cd:7f:98:8a:28:a0:
4e:b4:27:34:ac:32:2a:ca:28:8f:71:4b:83:43:82:
d7:ab:dd:47:f8:71:0d:70:21:4c:fe:0c:7e:dd:01:
31:55:16:31:d2:ff:55:02:54:a4:3b:5b:54:cd:63:
b6:0c:43:69:64:8f:f0:97:5f:47:7c:f3:ab:e2:56:
09:16:c9:97:12:ac:76:b3:82:37:22:9d:d4:39:25:
12:36:f6:28:8e:18:4b:b9:d0:f5:3b:a0:ab:f6:0b:
e5:98:65:8e:ba:a5:ce:47:ef:94:29:00:0b:3b:fb:
77:f5:a2:16:8f:76:9b:58:f4:a5:e2:b3:a2:f7:17:
d8:2a:f3:e5:64:7e:22:ea:ba:03:86:5c:84:b9:92:
19:18:f1:61:b7:38:75:d3:3a:fd:dd:e0:f8:47:a7:
c2:e0:f2:27:9b:e8:3b:1b:2e:2b:9d:b8:d7:fa:de:
77:fe:0d:e9:cd:ea:3b:50:e7:fc:8c:2c:2b:51:41:
6c:72:53:63:08:42:f8:34:8a:b1:35:3a:0f:a5:1c:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:97:A0:A1:FB:C1:8B:05:DF:46:2D:3F:CE:ED:C2:B6:55:AC:5F
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/HHaXoKH7wYsF30YtP87twrZVrF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.156.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b4:80:b6:37:48:18:a2:41:39:f8:64:b5:0e:a4:4d:05:a0:
c6:b1:d8:e4:13:7a:54:6e:82:21:29:f4:78:ab:3f:7b:a8:ca:
f3:0c:f6:de:37:b5:df:30:df:24:1d:b2:95:4f:c9:94:9d:aa:
2a:bc:8b:2f:d3:fa:6c:69:c5:4c:77:54:b5:f3:cb:b6:42:89:
22:a5:5e:b4:95:52:43:8a:4c:97:d1:e7:49:cc:82:2b:46:2b:
44:dc:3d:0d:a0:8f:e5:89:95:5a:32:57:72:fc:34:ac:2a:60:
7d:31:cd:04:53:5a:45:07:fd:d4:38:c3:d2:ee:22:94:5e:41:
ce:ba:a0:ea:06:a0:7d:e3:13:3b:ba:29:42:d4:62:2d:fa:aa:
0f:b3:b0:1d:ed:47:27:fe:fa:35:bf:8b:d3:eb:4b:f5:10:fc:
f7:7f:1b:26:3c:f9:64:a5:eb:2b:cf:57:96:a5:07:81:e6:12:
1d:3d:5e:8a:7a:ec:94:15:5b:d4:d7:02:39:f6:9d:20:5b:f2:
db:d4:38:06:de:40:3f:de:a9:0a:63:ea:d3:17:50:e3:fe:77:
1a:3b:74:74:07:c5:8d:1c:f8:2f:5a:02:40:f9:1e:26:28:e8:
75:89:46:3e:47:5b:dc:48:de:a6:01:09:4e:b3:52:f2:6b:8e:
1a:36:61:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkxJtPCPMwb8PT/7tUtSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjQwMTAxMTAzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzc2OTdhMGExZmJjMThiMDVkZjQ2MmQzZmNlZWRjMmI2NTVhYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpExB8kkZ7ffWddZ+D3FDcV4KV2O
M8cbo+QzHHJdJkTzPGY+4+5U1I9sCimmXeqFVApcXITNf5iKKKBOtCc0rDIqyiiP
cUuDQ4LXq91H+HENcCFM/gx+3QExVRYx0v9VAlSkO1tUzWO2DENpZI/wl19HfPOr
4lYJFsmXEqx2s4I3Ip3UOSUSNvYojhhLudD1O6Cr9gvlmGWOuqXOR++UKQALO/t3
9aIWj3abWPSl4rOi9xfYKvPlZH4i6roDhlyEuZIZGPFhtzh10zr93eD4R6fC4PIn
m+g7Gy4rnbjX+t53/g3pzeo7UOf8jCwrUUFsclNjCEL4NIqxNToPpRzNIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBx2l6Ch+8GLBd9GLT/O7cK2VaxfMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvSEhhWG9LSDd3WXNGMzBZdFA4N3R3clpWckY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT+cMA0G
CSqGSIb3DQEBCwUAA4IBAQCGtIC2N0gYokE5+GS1DqRNBaDGsdjkE3pUboIhKfR4
qz97qMrzDPbeN7XfMN8kHbKVT8mUnaoqvIsv0/psacVMd1S188u2QokipV60lVJD
ikyX0edJzIIrRitE3D0NoI/liZVaMldy/DSsKmB9Mc0EU1pFB/3UOMPS7iKUXkHO
uqDqBqB94xM7uilC1GIt+qoPs7Ad7Ucn/vo1v4vT60v1EPz3fxsmPPlkpesrz1eW
pQeB5hIdPV6KeuyUFVvU1wI59p0gW/Lb1DgG3kA/3qkKY+rTF1Dj/ncaO3R0B8WN
HPgvWgJA+R4mKOh1iUY+R1vcSN6mAQlOs1Lya44aNmHR
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:22 2025 by rpki-client