Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/HP4E2RKj7U5N8kBfD7qpeDW6gZA.roa
File: HP4E2RKj7U5N8kBfD7qpeDW6gZA.roa (raw, json)
Hash identifier: B/V9EaE/Cmndgc752SkMDNYIs0JgG9QCtKVlcxVFbaU=
Subject key identifier: 1C:FE:04:D9:12:A3:ED:4E:4D:F2:40:5F:0F:BA:A9:78:35:BA:81:90
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 018CC649B586243B76E36C6A2999283E6A74
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/HP4E2RKj7U5N8kBfD7qpeDW6gZA.roa
Signing time: Mon 01 Jan 2024 18:29:28 +0000
ROA not before: Mon 01 Jan 2024 18:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39505
IP address blocks: 185.75.48.0/24 maxlen: 24
87.247.250.0/24 maxlen: 24
93.93.8.0/24 maxlen: 24
178.249.170.0/24 maxlen: 24
87.247.248.0/24 maxlen: 24
87.247.249.0/24 maxlen: 24
78.40.136.0/24 maxlen: 24
78.40.137.0/24 maxlen: 24
78.40.138.0/24 maxlen: 24
87.247.254.0/24 maxlen: 24
93.93.12.0/24 maxlen: 24
87.247.255.0/24 maxlen: 24
93.93.13.0/24 maxlen: 24
2a00:6580::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jul 2024 12:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:b5:86:24:3b:76:e3:6c:6a:29:99:28:3e:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Jan 1 18:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cfe04d912a3ed4e4df2405f0fbaa97835ba8190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:54:22:56:af:d7:93:13:a6:c4:80:ae:15:
ab:9d:d8:a3:7a:12:5f:85:37:fe:8b:08:3a:42:de:
1e:1c:82:dc:2e:4e:eb:51:38:6a:3b:cb:e9:ca:e5:
93:48:c3:93:cb:82:79:eb:a0:a4:59:4b:14:1f:bc:
9b:45:aa:d2:4e:6c:0d:59:7a:fd:9f:1b:63:ec:47:
e8:81:53:2f:f7:54:b6:bb:1d:75:1c:64:a2:a9:0d:
62:51:cf:86:00:98:11:7a:94:9e:31:33:ae:ae:94:
65:5e:e1:69:ab:b6:74:1b:5c:f0:6d:20:89:74:7b:
5a:a2:ac:b0:43:f3:88:b2:91:91:c7:69:1f:5b:12:
f1:db:e7:d8:26:f1:84:b5:ac:d9:7b:0e:6e:f3:11:
86:59:f3:2f:db:78:d3:57:88:a6:73:77:97:85:64:
10:e8:26:1d:ac:62:26:ae:d5:23:b2:9c:74:6f:92:
90:55:44:2e:b0:d0:f2:96:55:d7:fc:aa:f6:43:18:
32:99:49:56:53:93:48:3d:b6:82:40:46:42:83:95:
07:8f:7a:7f:1b:39:45:29:ad:ce:0c:72:9f:29:29:
64:e1:4f:41:44:ce:88:c6:76:25:c4:2c:75:9a:46:
eb:12:7c:bb:ca:6b:19:64:69:d1:0b:42:91:3b:22:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FE:04:D9:12:A3:ED:4E:4D:F2:40:5F:0F:BA:A9:78:35:BA:81:90
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/HP4E2RKj7U5N8kBfD7qpeDW6gZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.136.0-78.40.138.255
87.247.248.0-87.247.250.255
87.247.254.0/23
93.93.8.0/24
93.93.12.0/23
178.249.170.0/24
185.75.48.0/24
IPv6:
2a00:6580::/32
Signature Algorithm: sha256WithRSAEncryption
81:85:8c:da:a4:bb:1f:27:f4:4a:ae:b7:cd:da:64:86:6d:0a:
74:13:17:06:8e:37:60:33:b8:7b:d6:52:88:84:c8:02:de:eb:
4c:ab:32:df:eb:ca:46:23:77:63:af:ab:c9:5d:df:a0:b7:c5:
a4:c6:ad:31:42:6c:df:de:4c:b1:b9:12:e9:b5:90:af:ed:ac:
92:2b:fa:27:bd:56:67:b8:94:ed:fa:0d:61:57:4b:ce:7f:c8:
40:73:db:2d:1b:f9:f6:93:7f:78:23:f9:8a:3e:a0:26:37:e7:
40:f2:38:0b:21:06:d9:31:a4:97:1e:8c:36:39:95:69:03:b9:
c7:1b:15:9d:bf:4c:22:fa:b2:cd:00:20:54:1a:c3:4c:d5:38:
ee:55:23:cd:58:2b:27:38:81:e0:d5:c6:88:2a:d3:c9:02:cd:
70:87:9e:82:04:e6:b6:c4:e6:91:a9:4e:05:87:7b:42:05:3f:
01:18:d7:82:d7:71:20:a2:26:92:d8:3a:30:00:42:ac:90:14:
38:4e:53:3c:2c:df:ce:df:ef:3a:9b:78:fe:16:39:12:00:77:
03:b1:7c:9f:df:28:53:65:1a:59:d0:de:b9:18:6f:ec:cb:a6:
94:bd:7f:48:bd:40:2f:57:32:71:cf:83:96:3b:c5:5f:8d:9a:
21:fe:25:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAYzGSbWGJDt242xqKZkoPmp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh
ODJlZDUwHhcNMjQwMTAxMTgyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2ZlMDRkOTEyYTNlZDRlNGRmMjQwNWYwZmJhYTk3ODM1YmE4MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoVUIlav15MTpsSArhWrndijehJf
hTf+iwg6Qt4eHILcLk7rUThqO8vpyuWTSMOTy4J566CkWUsUH7ybRarSTmwNWXr9
nxtj7EfogVMv91S2ux11HGSiqQ1iUc+GAJgRepSeMTOurpRlXuFpq7Z0G1zwbSCJ
dHtaoqywQ/OIspGRx2kfWxLx2+fYJvGEtazZew5u8xGGWfMv23jTV4imc3eXhWQQ
6CYdrGImrtUjspx0b5KQVUQusNDyllXX/Kr2QxgymUlWU5NIPbaCQEZCg5UHj3p/
GzlFKa3ODHKfKSlk4U9BRM6IxnYlxCx1mkbrEny7ymsZZGnRC0KROyIIXwIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFBz+BNkSo+1OTfJAXw+6qXg1uoGQMB8GA1UdIwQY
MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt
NWEzN2FmNDM5MDRjLzEvSFA0RTJSS2o3VTVOOGtCZkQ3cXBlRFc2Z1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj
LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6MAwDBANOKIgD
BABOKIowDAMEA1f3+AMEAFf3+gMEAVf3/gMEAF1dCAMEAV1dDAMEALL5qgMEALlL
MDANBAIAAjAHAwUAKgBlgDANBgkqhkiG9w0BAQsFAAOCAQEAgYWM2qS7Hyf0Sq63
zdpkhm0KdBMXBo43YDO4e9ZSiITIAt7rTKsy3+vKRiN3Y6+ryV3foLfFpMatMUJs
395MsbkS6bWQr+2skiv6J71WZ7iU7foNYVdLzn/IQHPbLRv59pN/eCP5ij6gJjfn
QPI4CyEG2TGklx6MNjmVaQO5xxsVnb9MIvqyzQAgVBrDTNU47lUjzVgrJziB4NXG
iCrTyQLNcIeeggTmtsTmkalOBYd7QgU/ARjXgtdxIKImktg6MABCrJAUOE5TPCzf
zt/vOpt4/hY5EgB3A7F8n98oU2UaWdDeuRhv7MumlL1/SL1AL1cycc+DljvFX42a
If4lgQ==
-----END CERTIFICATE-----
Generated at Tue Jul 30 14:42:36 2024 by rpki-client on console-ams.rpki-client.org