Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/66HQ17Ng3Z6duZFD8iDO48gEjBY.roa
File: 66HQ17Ng3Z6duZFD8iDO48gEjBY.roa (raw, json)
Hash identifier: lh/NNCv3nUy22YmTw7yfuufAlPiIaC3RTlMws2CX6Jw=
Subject key identifier: EB:A1:D0:D7:B3:60:DD:9E:9D:B9:91:43:F2:20:CE:E3:C8:04:8C:16
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 01953C708DED1AFAD7A198F784539D376477
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/66HQ17Ng3Z6duZFD8iDO48gEjBY.roa
Signing time: Tue 25 Feb 2025 09:29:24 +0000
ROA not before: Tue 25 Feb 2025 09:29:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 194.180.158.0/24 maxlen: 24
2a0a:c802:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Feb 2025 11:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:70:8d:ed:1a:fa:d7:a1:98:f7:84:53:9d:37:64:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Feb 25 09:29:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eba1d0d7b360dd9e9db99143f220cee3c8048c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:24:bb:7e:1a:b2:5a:c4:e1:9c:87:c2:6c:
ae:f6:46:f2:0f:40:84:46:43:37:3b:93:e3:77:c7:
69:dc:c1:ab:2e:0f:f9:60:e3:98:31:c0:25:7b:69:
bc:f5:c1:78:f2:86:9c:f3:68:9a:13:66:5e:6b:ac:
20:cb:1f:96:78:96:0f:ab:f8:ef:d9:5f:e9:40:96:
e2:69:eb:de:a7:c3:06:5a:3d:17:df:96:39:5c:17:
bf:12:ef:bf:d5:d9:5b:c9:95:69:ba:16:83:ca:e9:
1f:4d:d5:1d:a5:19:46:e0:f2:7b:43:e0:5f:ed:80:
05:8b:84:8f:4b:06:cd:db:c1:9b:e9:8c:e8:85:9b:
c4:8f:08:8e:2b:e4:d8:2f:a3:3b:82:a2:d4:7f:bc:
1d:c8:3d:a5:6d:2f:51:80:ba:ae:69:0e:bc:32:da:
9f:0c:7d:47:6b:ea:4b:88:bf:ca:07:64:d5:fd:be:
1d:7b:f0:e0:11:b1:36:20:11:c2:37:86:ca:42:70:
2b:a1:53:fd:e6:3f:b1:80:5f:c6:ca:37:cd:36:31:
fe:1a:2e:1f:a6:7a:6e:6c:2b:61:7f:f8:e2:60:40:
81:1f:92:8f:50:4f:28:9b:c2:09:d4:c1:d4:fd:61:
6b:61:21:3f:c6:c0:d2:a1:0a:1d:69:e0:69:f6:9f:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:D0:D7:B3:60:DD:9E:9D:B9:91:43:F2:20:CE:E3:C8:04:8C:16
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/66HQ17Ng3Z6duZFD8iDO48gEjBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.158.0/24
IPv6:
2a0a:c802:5::/48
Signature Algorithm: sha256WithRSAEncryption
94:e0:fc:dc:bf:9b:bd:03:32:08:b5:15:b5:09:54:7d:0d:eb:
fc:12:5f:53:29:c6:56:6d:e9:3f:ab:7a:77:5f:86:8f:99:00:
5a:ab:b1:e0:1e:a3:a0:56:e6:f1:19:06:13:2b:bb:db:c3:a2:
60:55:79:c6:54:c7:45:0c:fe:e5:d9:21:dd:3e:5b:25:77:48:
ec:e7:de:96:62:32:2b:4d:66:d1:70:f6:79:71:7c:9d:9b:f1:
29:69:da:5d:a5:2d:23:03:c1:3a:3b:60:ab:39:7d:9d:17:95:
3d:a4:98:82:eb:c0:c4:81:39:ed:17:45:ce:ad:d4:65:74:d0:
4a:40:45:13:63:a9:9c:e2:86:9b:a8:e4:09:9d:77:09:b0:75:
08:27:03:71:2f:f4:ef:01:c7:52:e4:11:07:9a:f2:3b:34:04:
37:3b:bf:c0:87:33:34:4b:b5:51:af:82:83:f1:b0:ba:7a:8b:
e5:70:d8:f3:e3:05:f4:53:1f:d6:c5:0f:f3:d2:65:94:a5:6d:
62:7e:82:b4:34:95:ff:5b:bb:b7:78:ed:47:33:b2:60:0f:a7:
d4:ba:04:f5:7e:b4:8b:33:d2:90:b6:86:bc:8f:0e:45:d1:5f:
23:bd:75:49:1c:8e:7c:1c:30:d9:21:77:fb:92:b0:b5:fc:5a:
a8:83:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:47:27 2025 by rpki-client