Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/Hi8xfAKDIJScTzDKRwm0V3TbChk.roa
File: Hi8xfAKDIJScTzDKRwm0V3TbChk.roa (raw, json)
Hash identifier: Kv++2eddrYkVv+tQp/Z78KUA1gddItdUYgBJadxiRqQ=
Subject key identifier: 1E:2F:31:7C:02:83:20:94:9C:4F:30:CA:47:09:B4:57:74:DB:0A:19
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019590BA18A373B1E29FE1D2AF46B9B772D0
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/Hi8xfAKDIJScTzDKRwm0V3TbChk.roa
Signing time: Thu 13 Mar 2025 18:17:49 +0000
ROA not before: Thu 13 Mar 2025 18:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 188.211.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 12:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ba:18:a3:73:b1:e2:9f:e1:d2:af:46:b9:b7:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Mar 13 18:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e2f317c028320949c4f30ca4709b45774db0a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:78:e1:04:b0:0a:02:d2:fb:dd:3b:31:0c:
3c:2f:87:07:7e:f1:45:59:8d:b9:6a:8d:67:92:5b:
5f:ff:8f:84:f1:db:01:8f:03:b7:1e:3e:1f:b7:79:
17:9b:af:4b:48:12:e3:ea:1e:16:34:0d:34:4b:67:
d7:35:4e:a1:36:4e:ac:a9:b2:6c:b7:96:70:25:16:
f8:7c:8d:f6:d4:b3:51:74:8e:ae:9a:fb:e4:56:87:
2e:c9:87:44:67:32:26:dc:87:92:e0:05:de:7a:d4:
da:1e:62:43:92:be:53:55:03:3a:2e:91:ea:ee:85:
c0:93:74:64:af:1d:f2:f3:4c:25:91:52:5e:74:3c:
79:b7:49:45:74:10:6c:f3:92:9e:5e:3b:18:9a:14:
49:7d:67:37:09:e6:1b:c7:71:72:aa:5a:aa:cf:ea:
48:0c:c5:de:40:10:ea:ab:30:e9:74:f6:54:37:19:
d3:ee:94:2b:ac:9d:0c:cf:c7:44:09:a6:62:1b:f7:
06:b9:36:4c:7f:82:2f:33:2b:be:79:72:b9:b0:9b:
89:9a:b0:ae:d4:43:54:a5:2f:15:0f:c2:69:f5:1b:
01:08:9c:a9:26:c6:73:b0:85:f3:62:90:7d:b9:43:
54:3e:40:1f:4e:cf:7e:4e:6c:72:97:73:63:22:b0:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2F:31:7C:02:83:20:94:9C:4F:30:CA:47:09:B4:57:74:DB:0A:19
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/Hi8xfAKDIJScTzDKRwm0V3TbChk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.169.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c8:57:e4:49:d8:91:e3:84:c1:00:1a:a4:1a:31:11:72:7e:
5d:da:02:6f:ce:37:95:d4:f6:35:56:97:0c:9e:31:6d:bb:6e:
16:14:99:7d:1c:d2:d4:e7:7f:77:82:bf:bf:0b:58:c6:75:e8:
88:a2:ce:3a:06:c5:3f:58:6e:79:1b:12:b6:51:e4:d3:26:0e:
33:b6:21:59:a1:07:9e:aa:f6:d3:8b:2b:22:f2:11:c1:f7:f3:
80:00:3f:96:62:5d:f4:9e:56:4d:f8:5e:6e:61:5b:d7:56:7b:
79:32:1c:af:e7:64:2c:9f:08:c0:10:34:b7:3a:bb:14:11:1b:
6d:09:9d:fc:28:49:56:86:50:60:1e:93:4a:54:a2:e9:c2:7b:
b9:48:d4:7b:02:bc:f4:7d:e9:ac:d9:8b:53:20:93:40:0e:f6:
30:f9:6f:52:b9:ee:72:39:9a:85:3d:c8:00:35:35:72:69:fa:
38:5f:b2:94:10:34:f5:d9:1a:bc:03:75:e8:d9:ab:bd:79:73:
92:e4:4f:37:2c:05:b2:50:d6:2a:d6:b7:01:f2:28:76:8c:04:
0f:2d:db:a5:05:2a:44:ab:3b:b2:d5:77:70:51:8b:23:91:0e:
35:7c:4c:0a:ff:52:cf:fb:3b:a9:90:f4:44:44:9a:7a:03:82:
c8:34:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:42:07 2025 by rpki-client