Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/H_DX7XVqhUg72dtCs-xB-fTc_pU.roa
File: H_DX7XVqhUg72dtCs-xB-fTc_pU.roa (raw, json)
Hash identifier: YFeVvaStJ1tHzZrBuG9CvQsnN38u14ZD97KWb0EQQU4=
Subject key identifier: 1F:F0:D7:ED:75:6A:85:48:3B:D9:DB:42:B3:EC:41:F9:F4:DC:FE:95
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 019422FB89DB30AA6176F1BBC58247915B28
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/H_DX7XVqhUg72dtCs-xB-fTc_pU.roa
Signing time: Wed 01 Jan 2025 17:48:17 +0000
ROA not before: Wed 01 Jan 2025 17:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34442
IP address blocks: 46.232.192.0/21 maxlen: 24
77.246.16.0/20 maxlen: 24
80.77.240.0/20 maxlen: 24
195.8.116.0/24 maxlen: 24
2a00:1990::/32 maxlen: 64
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:89:db:30:aa:61:76:f1:bb:c5:82:47:91:5b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Jan 1 17:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ff0d7ed756a85483bd9db42b3ec41f9f4dcfe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:d2:9d:5d:60:63:cd:d6:9e:e1:cb:4d:fb:
35:0a:a3:a6:d2:36:2a:a7:06:f5:e4:8e:fa:fa:28:
b1:c1:7d:34:69:2e:ba:d0:83:b0:8a:cd:85:2a:f9:
36:aa:8c:b8:f2:19:6c:51:9c:b4:4b:3c:93:a3:a7:
b8:82:31:9b:b2:e2:c1:5c:03:ec:5a:81:00:17:dc:
b8:d3:a4:88:ba:5d:a5:31:cf:11:f7:9f:61:bf:b3:
c6:b9:46:98:fe:c9:a7:fd:30:c6:60:e8:55:9b:41:
fa:d2:99:d4:57:43:28:53:b3:06:58:ad:1c:8f:be:
7b:f2:5f:b5:e0:1a:86:5e:a0:26:cf:0c:ec:d9:c5:
73:46:af:d9:18:87:e8:8b:5b:16:2c:78:58:aa:7a:
4d:61:85:54:fe:9b:47:94:e4:8e:6b:c8:55:e0:f7:
66:2c:f5:10:52:bf:93:d3:d1:87:8d:ab:62:06:ad:
3d:ff:5e:fc:43:30:78:46:f6:58:27:f7:45:1a:e8:
b1:a6:88:8a:b6:db:65:77:d4:2a:45:6a:98:48:ee:
ad:27:95:57:05:42:01:cb:76:6e:99:d1:72:88:f7:
78:3b:ad:4f:1c:4d:b0:9d:79:08:27:28:68:6d:ad:
97:b7:bf:01:e8:13:e9:af:82:36:27:c3:d6:fd:9a:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F0:D7:ED:75:6A:85:48:3B:D9:DB:42:B3:EC:41:F9:F4:DC:FE:95
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/H_DX7XVqhUg72dtCs-xB-fTc_pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.192.0/21
77.246.16.0/20
80.77.240.0/20
195.8.116.0/24
IPv6:
2a00:1990::/32
Signature Algorithm: sha256WithRSAEncryption
cf:b6:ec:40:07:f4:51:2b:98:10:c3:1f:17:76:f1:23:3b:e0:
aa:94:e5:67:58:2f:c7:cb:37:b2:8a:fd:89:45:5a:30:f0:b3:
ce:da:73:42:9d:99:df:ea:3c:c1:eb:3b:e6:74:4a:0d:fe:fe:
47:32:c8:88:33:45:95:07:bb:10:e0:85:2e:8d:51:ef:74:1f:
af:41:d3:05:1f:36:3f:c0:84:7f:43:cb:56:ce:01:8c:52:20:
41:54:a2:87:cd:0b:3d:4d:ac:38:30:93:1b:c5:8a:af:6c:00:
14:35:ee:5c:71:f9:49:dc:c4:9c:41:d2:f3:29:0e:0a:c9:4f:
cc:52:eb:29:b2:fe:90:f1:cd:9b:2a:26:62:de:c9:68:c0:90:
f2:96:1d:b8:9a:54:7c:50:60:51:3a:55:5a:39:f4:22:4a:3f:
86:7a:fb:5f:92:ae:d7:9e:f2:00:1b:e6:f0:2c:89:da:21:ba:
8b:66:77:a8:c0:5e:dc:46:33:ae:da:08:ab:6e:c3:d4:ed:8c:
3a:78:97:66:2d:d4:73:80:5e:3e:d2:e9:5f:5f:57:26:40:58:
3f:07:7d:27:eb:8f:39:8a:c2:e9:15:a6:8f:e9:f9:6a:9f:a8:
14:40:4d:00:6e:02:42:a9:11:f1:eb:82:17:fb:25:b9:ed:58:
89:69:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:43:44 2025 by rpki-client