Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Sv8-HEL5ad_qff82dl6r8CZ_usE.roa
File: Sv8-HEL5ad_qff82dl6r8CZ_usE.roa (raw, json)
Hash identifier: GS61EwW2UCpsFnRoUqj4YglXgwswFa9C0oBIvB517+g=
Subject key identifier: 4A:FF:3E:1C:42:F9:69:DF:EA:7D:FF:36:76:5E:AB:F0:26:7F:BA:C1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0185F26B2E57BD7DED17A2317550A31D6BCB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Sv8-HEL5ad_qff82dl6r8CZ_usE.roa
Signing time: Fri 27 Jan 2023 08:49:48 +0000
ROA not before: Fri 27 Jan 2023 08:49:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202050
IP address blocks: 193.192.178.0/23 maxlen: 24
193.192.176.0/23 maxlen: 24
193.192.180.0/24 maxlen: 24
77.65.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 07 Apr 2023 06:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:6b:2e:57:bd:7d:ed:17:a2:31:75:50:a3:1d:6b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 27 08:49:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aff3e1c42f969dfea7dff36765eabf0267fbac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:37:4c:ec:72:da:22:8c:b6:bd:28:b6:c8:
d7:81:0f:d0:df:d0:25:c7:c0:b6:07:f9:3b:e5:5b:
7d:1a:d0:70:5d:df:55:06:d4:8b:2c:ba:1c:b5:09:
16:3e:48:87:6c:7d:16:ed:05:e7:b5:0d:85:80:45:
1d:f1:a1:e3:37:ea:a9:22:95:67:c1:b6:47:34:a7:
fd:c0:15:c6:52:00:12:c8:60:3c:d0:06:ce:88:85:
f8:36:71:27:2a:34:a3:1c:5d:4f:41:b7:56:1a:53:
3f:7c:6d:6e:52:2c:75:05:0a:bd:0d:a3:a7:b9:e9:
7d:85:12:4b:e5:84:95:08:db:b1:cd:9e:31:9d:cf:
67:1b:9e:f0:39:e3:56:08:11:94:cb:9b:d6:70:f1:
78:79:9c:f7:60:4e:94:17:bb:88:fc:bf:24:d8:f9:
46:77:3e:83:68:d7:35:77:b7:15:c3:47:1f:1a:3a:
fc:97:7d:25:12:ab:0f:d4:e1:1a:5d:30:d0:f9:c0:
19:9a:bb:2c:d0:17:bd:c4:b0:00:c8:ea:a5:ce:2f:
8e:ae:5f:11:12:08:ea:8e:30:52:e3:d7:1f:12:68:
fc:aa:e2:b9:8a:a9:c8:f4:8c:67:6b:e2:0f:bc:72:
58:fa:16:2d:80:cc:ff:aa:a8:7a:97:1c:f8:c3:1e:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:3E:1C:42:F9:69:DF:EA:7D:FF:36:76:5E:AB:F0:26:7F:BA:C1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Sv8-HEL5ad_qff82dl6r8CZ_usE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.142.0/23
193.192.176.0-193.192.180.255
Signature Algorithm: sha256WithRSAEncryption
17:40:32:44:95:79:79:1d:da:b6:0f:6e:25:41:03:17:45:c9:
b0:c1:a9:6b:89:f5:4c:84:fa:e1:cd:90:84:2b:79:3e:c1:65:
27:76:38:55:d9:ac:fa:95:b1:66:9f:89:ec:a6:ae:2a:1a:02:
46:6d:24:d2:a0:41:8e:c6:3f:ac:5a:b5:3c:4c:f0:d7:20:71:
4c:d0:4d:f1:f3:1a:bc:06:5c:61:84:6b:4b:3e:d4:d5:fe:c5:
b3:8c:ad:73:4e:08:03:e1:d4:5f:a0:1c:e6:35:c0:c6:8f:9a:
17:9d:fa:59:f8:d6:78:3d:77:8c:f5:1f:69:41:20:7b:39:34:
be:6f:fb:04:e9:b9:3e:c4:e3:ef:30:ff:b0:54:70:50:fd:af:
8f:3a:4a:84:29:83:c0:cc:8b:93:c1:35:85:67:c8:39:a4:f6:
de:66:ec:0c:ff:95:a8:65:41:8e:8a:79:2f:00:e7:3f:66:8a:
90:8c:cd:88:bf:b0:c5:80:ed:cd:0f:df:01:60:e9:1d:ad:c6:
46:d4:80:42:7b:a9:66:1f:f2:e1:6b:dd:0e:e1:49:29:2e:4f:
04:08:05:8a:fc:71:51:61:7b:da:cf:95:9d:f3:06:9a:fe:2c:
18:3a:51:79:f5:49:5f:3c:34:69:3e:1e:48:17:2e:e9:f7:3c:
9e:b5:89:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org