Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/HNraQ8NpuQqjiei5599h3m948X8.roa
File: HNraQ8NpuQqjiei5599h3m948X8.roa (raw, json)
Hash identifier: X6CA7fSKRpsv9zQkrHSQGCzcHlQX5gi/2yjIhfjG/uE=
Subject key identifier: 1C:DA:DA:43:C3:69:B9:0A:A3:89:E8:B9:E7:DF:61:DE:6F:78:F1:7F
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 01934D789B8B18E39931833B6A4D43D6C1C9
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/HNraQ8NpuQqjiei5599h3m948X8.roa
Signing time: Thu 21 Nov 2024 06:46:09 +0000
ROA not before: Thu 21 Nov 2024 06:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42772
IP address blocks: 87.252.246.0/24 maxlen: 24
87.252.252.0/24 maxlen: 24
87.252.254.0/24 maxlen: 24
87.252.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 06:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:78:9b:8b:18:e3:99:31:83:3b:6a:4d:43:d6:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Nov 21 06:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cdada43c369b90aa389e8b9e7df61de6f78f17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:98:1b:a3:42:40:a7:4e:5c:d9:99:f2:9e:
fe:dc:46:63:0b:04:ff:21:ef:a3:b2:4d:98:85:ee:
67:0f:d6:16:bd:bb:e0:a5:f7:97:de:92:2c:de:84:
c9:1e:09:9c:e5:27:1b:26:b8:ee:31:85:c2:ef:35:
84:ce:95:cb:af:16:61:4d:4e:dc:03:f2:bb:88:22:
23:c6:e2:8e:94:a1:b2:12:b6:ea:6a:2a:24:23:87:
33:0f:74:94:87:9d:68:81:b0:6a:6a:f0:0a:37:a5:
ad:3c:9d:25:06:b8:b6:ee:a9:b7:a2:5f:0d:a1:78:
13:76:af:76:20:a9:dd:2c:8b:4d:ac:e2:f3:75:b0:
f3:d1:1c:4a:ba:b1:b4:f4:60:b6:45:be:2c:bc:1a:
cb:89:3c:8a:c4:b5:41:65:e7:7a:06:d6:2c:14:43:
3d:4f:49:d8:14:0f:90:15:55:a5:3f:58:32:0a:c2:
18:f1:e4:3a:e0:48:2e:c3:77:7a:34:c3:a4:5d:b8:
41:e9:c9:c8:90:f6:55:d9:62:bd:5d:f5:0f:98:3f:
22:67:c1:db:0b:4b:68:61:11:7b:ca:1f:ed:33:92:
87:05:19:02:a7:d4:ca:0f:d1:25:3e:4b:b6:e3:f6:
b3:84:10:37:bb:1e:ec:60:6c:1a:80:a8:76:2e:2f:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DA:DA:43:C3:69:B9:0A:A3:89:E8:B9:E7:DF:61:DE:6F:78:F1:7F
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/HNraQ8NpuQqjiei5599h3m948X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.246.0/24
87.252.252.0/24
87.252.254.0/23
Signature Algorithm: sha256WithRSAEncryption
85:12:8f:4d:bd:6f:07:e4:bc:b3:35:b7:a2:20:03:4d:6b:76:
bc:93:12:0b:ae:ee:5b:76:98:d3:0f:48:9d:d6:0c:1c:45:68:
7a:b9:05:ca:a2:72:84:35:f0:65:5b:6c:5c:fc:fa:95:51:25:
71:5f:c0:33:7c:09:d2:e1:ef:11:75:53:03:50:63:4e:99:84:
cc:7c:40:56:ff:ff:e0:a1:f3:49:91:50:5e:4b:62:c6:97:12:
3c:06:7d:f2:5d:da:01:0c:dd:1f:5c:d8:a0:71:b7:c7:15:17:
40:87:5d:81:77:3b:b5:13:ca:57:bd:74:26:14:45:e8:2f:4d:
a1:c5:22:ac:c3:cc:a3:26:81:d9:5b:6f:61:22:2e:ee:3e:0b:
90:6b:b1:da:f3:9c:8e:df:01:b2:69:a7:c9:b5:bd:b2:2c:b6:
18:45:e4:16:5e:cf:ac:4e:c9:e5:19:a2:f6:e9:11:e2:8e:a4:
4a:8e:45:8c:e3:86:d5:e7:4c:2c:84:d4:04:8e:c0:5a:35:de:
d9:d6:28:43:bd:56:bf:90:a3:79:3f:ee:f4:7e:5e:ba:4c:d8:
9a:d3:d4:c0:36:f1:a8:60:bf:59:94:4d:08:0e:ba:3d:6d:1a:
a3:57:10:20:36:13:fe:13:45:bb:8c:86:65:46:8a:55:c3:19:
9d:04:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:52:40 2025 by rpki-client