Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/HOXB_FKdXOF73Xiibd2Aow-9bdw.roa
File: HOXB_FKdXOF73Xiibd2Aow-9bdw.roa (raw, json)
Hash identifier: J060ThNXm7GfIR/bAtVwKWQRuaMWzJFQxiQX+5+TY4Q=
Subject key identifier: 1C:E5:C1:FC:52:9D:5C:E1:7B:DD:78:A2:6D:DD:80:A3:0F:BD:6D:DC
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 018EA44C42F46303581F1E5A8C3D26AB4600
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/HOXB_FKdXOF73Xiibd2Aow-9bdw.roa
Signing time: Wed 03 Apr 2024 14:10:45 +0000
ROA not before: Wed 03 Apr 2024 14:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.91.121.0/24 maxlen: 24
45.93.148.0/24 maxlen: 24
45.131.180.0/24 maxlen: 24
45.140.132.0/24 maxlen: 24
45.147.95.0/24 maxlen: 24
46.229.240.0/24 maxlen: 24
185.201.16.0/24 maxlen: 24
185.201.17.0/24 maxlen: 24
185.201.19.0/24 maxlen: 24
185.209.51.0/24 maxlen: 24
185.218.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:4c:42:f4:63:03:58:1f:1e:5a:8c:3d:26:ab:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Apr 3 14:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ce5c1fc529d5ce17bdd78a26ddd80a30fbd6ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:8e:ec:4c:96:19:84:58:29:81:a7:3a:20:
a1:5e:99:61:db:3d:2a:e8:e3:ab:98:91:72:3f:17:
0c:70:4b:01:8c:0b:a6:36:a7:75:3e:28:f8:b8:06:
30:1a:23:db:7e:b5:45:c4:45:77:67:a5:3c:62:c3:
75:d7:5d:4b:f2:8f:18:44:2d:ae:c6:d5:1b:f4:67:
40:bd:9b:c3:09:28:9a:4d:49:90:9a:82:77:b8:78:
71:c2:8d:9d:cf:9a:e0:49:1e:f4:7d:2a:69:9a:94:
97:ba:1a:8c:84:8c:ce:4b:a7:25:f4:27:48:67:48:
cd:bb:0a:a7:2e:fd:e7:21:76:25:42:6a:a5:b0:e6:
c9:9e:f6:43:cc:27:71:4b:99:74:32:f9:24:ea:dc:
e3:82:57:ec:14:d4:dc:8b:e4:31:b8:63:1d:03:d0:
ea:d8:36:ed:1b:4e:de:8b:3e:91:61:1d:7d:aa:69:
e5:67:51:48:7e:a5:65:f1:48:31:19:d1:be:0d:53:
bf:a1:b0:93:f0:c4:45:65:21:97:5f:02:ad:5d:0a:
22:32:3c:f9:55:f1:2e:c0:e4:07:e8:1e:bc:03:d4:
16:68:79:54:74:a5:43:52:b4:c4:3d:f7:92:24:ac:
d7:7b:30:48:59:0e:e1:87:f9:93:d1:4d:32:9a:71:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:C1:FC:52:9D:5C:E1:7B:DD:78:A2:6D:DD:80:A3:0F:BD:6D:DC
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/HOXB_FKdXOF73Xiibd2Aow-9bdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
45.93.148.0/24
45.131.180.0/24
45.140.132.0/24
45.147.95.0/24
46.229.240.0/24
185.201.16.0/23
185.201.19.0/24
185.209.51.0/24
185.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b6:e0:09:44:7f:f5:19:d8:61:d9:27:e5:d2:7a:64:ec:bb:
24:a7:ba:74:50:f4:b2:ef:b6:47:99:7b:78:f6:cc:da:9e:14:
29:32:af:fd:0a:2b:62:6d:19:af:53:b4:4e:0a:8f:4c:01:bf:
ce:aa:03:6e:1c:16:a4:57:91:d0:58:d6:1a:43:18:b8:e3:e7:
bb:96:ba:75:93:29:b5:a0:cc:6d:bc:29:3f:15:05:99:73:a9:
a2:07:e9:32:12:2c:9b:d0:e2:7e:64:bd:46:e3:3a:a6:a9:fa:
50:0b:17:f0:22:69:28:7d:e8:1f:6c:96:b4:dc:15:a3:76:01:
70:1f:df:5f:e8:c3:31:3c:6f:7b:b8:ed:98:71:25:5a:f1:fe:
f7:c0:aa:be:75:4d:f2:5b:ed:84:70:99:e0:c8:aa:5d:51:4f:
49:d4:df:50:14:58:11:31:17:ba:b3:30:e3:de:ce:ac:9e:38:
34:a5:46:fe:8e:13:17:99:e8:cc:99:d1:be:67:54:74:61:0b:
8f:aa:3c:0c:b8:d3:6f:60:b1:8a:1f:9e:9a:3e:06:40:9f:9a:
08:2b:b5:ec:f5:fd:2d:8d:15:2f:0f:9a:95:80:25:a5:8e:dc:
82:03:26:f6:5f:a7:7b:21:fa:47:c2:4c:be:f2:27:05:41:71:
b0:21:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:14 2025 by rpki-client