Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HOvMSYt-je-EJcF2eZDEl20Ygus.roa
File: HOvMSYt-je-EJcF2eZDEl20Ygus.roa (raw, json)
Hash identifier: 3reSH0mP0j754HXApl/dhaaPa4wCO7fxIeuYRNam5g4=
Subject key identifier: 1C:EB:CC:49:8B:7E:8D:EF:84:25:C1:76:79:90:C4:97:6D:18:82:EB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E894D91051B4C71520157E2B2D20B5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HOvMSYt-je-EJcF2eZDEl20Ygus.roa
Signing time: Mon 02 Jan 2023 09:55:45 +0000
ROA not before: Mon 02 Jan 2023 09:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211632
IP address blocks: 5.181.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:94:d9:10:51:b4:c7:15:20:15:7e:2b:2d:20:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cebcc498b7e8def8425c1767990c4976d1882eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:18:98:56:2f:af:c0:cd:5c:36:ab:a0:2e:
22:6a:e9:37:00:8a:98:d9:fd:7d:d9:56:e4:53:d3:
d4:79:c8:98:d1:b9:96:95:37:0e:84:92:78:b8:27:
7e:16:c9:ac:03:b8:b6:81:1e:7b:46:f9:6d:f4:55:
58:a5:73:12:df:67:9d:ae:31:06:8e:32:41:14:dd:
86:9c:c6:46:1d:ed:e9:32:09:cb:64:74:cc:41:09:
5b:77:06:73:52:f4:ba:3d:1c:10:2e:64:0d:aa:1d:
fa:b3:3d:d3:66:ef:8c:8d:81:e2:b4:ca:64:4c:6b:
92:61:bf:2b:13:db:2d:4f:78:d7:e3:8b:c1:ad:ae:
67:8b:67:35:14:56:ea:d9:e2:8e:07:92:c3:df:86:
e0:75:56:2c:94:87:30:cd:93:63:b1:1a:e9:27:b1:
c0:3f:89:8d:57:a7:0e:6a:f0:26:26:3d:08:92:7e:
ee:ed:2a:98:30:9b:69:75:36:db:1f:ee:ca:8f:f5:
99:5c:09:0f:10:8f:4f:5b:75:42:b7:40:83:1f:ed:
b1:f6:76:de:e2:6b:5e:b9:92:66:ac:26:b6:f5:e1:
ab:64:b4:94:28:dd:dd:f9:3e:b6:d4:8a:c4:5e:52:
74:4c:5b:cc:11:15:4d:c5:6a:ab:a5:49:2d:8e:3e:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:CC:49:8B:7E:8D:EF:84:25:C1:76:79:90:C4:97:6D:18:82:EB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HOvMSYt-je-EJcF2eZDEl20Ygus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:20:8d:c9:69:14:70:40:f3:cd:be:91:88:ea:2e:3b:68:36:
21:89:d2:82:96:5d:2c:f4:4e:f0:c4:f3:ef:69:d7:d9:5f:8c:
a1:12:da:12:5c:f1:bf:d9:48:3d:5c:6f:67:f1:97:17:00:a2:
87:4c:40:ee:8f:62:7d:66:ec:27:62:ee:ee:b2:5f:54:c3:2a:
3c:90:ce:fe:fb:56:58:ab:85:d6:7c:a3:b9:96:62:7e:f5:c2:
09:df:26:71:0e:13:59:fc:35:fe:fe:49:eb:53:48:eb:d5:30:
8e:97:6b:ae:e8:b1:b9:f7:64:3f:5a:43:1e:e0:49:e1:1b:72:
1f:76:7d:ac:29:86:cc:31:03:7e:fd:35:2a:97:cc:f7:e5:0c:
eb:90:1b:6d:e4:90:38:10:d1:8a:21:6b:d0:14:cb:e5:53:16:
01:82:e1:b6:a9:5a:f9:8f:68:ae:a5:fc:b5:9c:f0:82:aa:7a:
d8:8c:2b:30:85:be:ee:09:62:68:a7:50:ae:99:a3:3a:d5:48:
53:ad:24:74:13:c7:a1:51:1a:e0:35:36:90:a7:a9:fd:d3:b7:
70:bb:6c:a1:0b:9d:42:56:5a:03:b2:41:09:9f:ab:92:3b:27:
49:77:09:fa:2a:bc:ca:5a:82:32:b6:f9:ba:5a:ce:70:d8:6e:
d1:f9:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org