Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/hmPxxG2piENBdGRV3fEk4BIFpLU.roa
File: hmPxxG2piENBdGRV3fEk4BIFpLU.roa (raw, json)
Hash identifier: UD9nxtfOL5hQZDruZGzwnKxQSLTWQfyDhbnTH1xdejg=
Subject key identifier: 86:63:F1:C4:6D:A9:88:43:41:74:64:55:DD:F1:24:E0:12:05:A4:B5
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0193CF5AEB12EFEA6D2B2704DFA4876B8625
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/hmPxxG2piENBdGRV3fEk4BIFpLU.roa
Signing time: Mon 16 Dec 2024 12:04:22 +0000
ROA not before: Mon 16 Dec 2024 12:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29584
IP address blocks: 82.194.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 21:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:5a:eb:12:ef:ea:6d:2b:27:04:df:a4:87:6b:86:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Dec 16 12:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8663f1c46da9884341746455ddf124e01205a4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:ce:7b:36:d7:70:88:55:cf:a8:84:06:2e:
51:bb:d1:c5:8e:b8:f2:fe:7c:d3:c8:c8:b0:99:71:
1c:3d:f9:2c:17:9a:da:b4:23:c9:9b:09:44:2a:80:
29:27:dd:2f:93:97:13:ee:a0:ae:3e:bd:0e:7d:15:
9e:e7:e2:c3:7f:f4:ea:e1:c2:95:b3:b7:05:bd:78:
1d:a3:11:c1:c0:5a:eb:a9:4e:ab:f9:0e:f8:8e:28:
2d:3d:fe:9d:ec:38:74:e9:2e:e9:32:36:55:e1:58:
e1:bc:19:68:16:a0:db:74:0c:27:13:4b:60:de:87:
97:a9:77:c5:93:1b:6b:c5:ea:96:88:10:c5:3f:51:
75:40:fb:54:c8:76:4e:d6:8e:74:d9:18:25:a7:ae:
7d:f7:b1:7e:36:db:14:e3:a4:b6:69:bb:ee:26:ef:
c5:77:b8:5d:77:ff:77:26:d0:b0:e8:77:3b:6e:a5:
46:ed:f8:0c:8b:55:59:bf:52:d0:2c:42:f5:ed:90:
6e:45:a6:4b:27:4d:b5:d1:39:37:28:79:17:bd:e1:
d2:2a:31:d7:8d:c9:53:f6:6b:b1:10:e5:4f:a4:8e:
4a:a0:a2:0b:4d:9a:80:b5:c5:e2:f9:52:24:7e:ce:
51:87:d2:92:b3:52:46:0a:86:f1:54:af:c3:3f:e4:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:F1:C4:6D:A9:88:43:41:74:64:55:DD:F1:24:E0:12:05:A4:B5
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/hmPxxG2piENBdGRV3fEk4BIFpLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
22:01:1f:03:02:ff:af:19:c2:4f:e5:eb:e0:53:3b:7f:85:64:
e5:7e:4b:04:ab:7c:ef:bf:27:3c:57:bd:a3:15:b3:44:2f:90:
c6:6c:af:75:ee:d9:b5:d8:bb:40:34:2d:03:25:65:95:36:62:
6a:84:f5:15:2b:14:d9:a3:da:8c:e6:9a:db:80:bd:1e:45:74:
0a:7c:1b:c7:74:0b:d8:d4:8d:d0:bf:62:4b:f7:97:df:96:34:
16:be:54:d7:9e:97:f7:f0:99:60:66:12:62:51:04:ba:11:1b:
f7:a3:90:53:6b:3f:0f:26:2e:ce:d5:96:b5:7f:d8:77:d0:33:
20:3d:9e:30:26:d8:bc:7a:3e:a9:7f:35:d9:b9:f3:d2:05:3b:
7b:a7:c9:d3:ce:9b:4d:d0:d8:0f:4e:5d:f2:66:89:7b:89:1b:
d1:ec:ab:68:1e:9b:7c:d4:7a:e5:ce:58:4b:37:09:41:9e:9f:
a6:24:6b:15:03:df:c0:91:90:19:1a:78:d4:52:f6:e4:f7:ff:
80:8f:9a:8f:86:ae:e3:c1:9f:28:48:81:7d:b5:d1:c0:8b:c7:
65:68:f4:bd:48:61:68:f6:95:3b:34:77:ef:38:12:7d:9c:ba:
7b:af:36:de:38:92:89:6b:06:3c:51:cd:0b:85:63:3b:89:63:
f2:46:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:37:57 2025 by rpki-client