Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/HplVed_kbCDJBQOsMhmiJxcLd4Q.roa
File: HplVed_kbCDJBQOsMhmiJxcLd4Q.roa (raw, json)
Hash identifier: UM0BC+ZPPjCBPh0rPfgXfzQtzjKxQH+es6Zszv0hJWI=
Subject key identifier: 1E:99:55:79:DF:E4:6C:20:C9:05:03:AC:32:19:A2:27:17:0B:77:84
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF93EF28C989EE3B7C484363141F109
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/HplVed_kbCDJBQOsMhmiJxcLd4Q.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41412
IP address blocks: 46.245.176.0/21 maxlen: 24
89.38.36.0/23 maxlen: 24
185.187.64.0/22 maxlen: 24
91.230.172.0/22 maxlen: 24
194.1.181.0/24 maxlen: 24
91.90.144.0/20 maxlen: 24
195.93.242.0/23 maxlen: 24
109.70.216.0/21 maxlen: 24
86.105.222.0/23 maxlen: 24
2a00:14e0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3e:f2:8c:98:9e:e3:b7:c4:84:36:31:41:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e995579dfe46c20c90503ac3219a227170b7784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:3c:e2:1c:67:c9:4b:66:3d:1d:e6:b8:67:
5c:69:7a:73:41:9a:ff:bc:12:3d:b4:f7:a8:b1:4f:
4c:b0:63:44:12:9a:b3:59:24:1b:65:63:6a:43:77:
a6:2a:11:c8:a2:53:e3:87:75:7c:15:fb:af:9c:ee:
c4:f8:f5:b0:37:d7:8a:98:52:22:7c:6e:66:9b:d2:
ba:92:1b:6d:67:26:24:2f:f2:88:52:19:5e:91:14:
b9:71:a7:06:2b:ef:51:9c:e2:e8:be:20:20:cf:c8:
1e:b6:cb:2c:9b:d3:b3:29:8c:02:35:c6:fd:08:a8:
c2:e0:ef:23:3c:31:ff:96:11:2e:2b:0a:8e:cc:57:
9a:f0:35:e7:57:f8:1b:aa:0a:fe:4a:44:ab:18:e9:
2b:a8:cf:90:e4:53:ac:b0:9d:37:82:75:ce:67:a0:
bd:9a:b1:f2:f2:c6:90:29:b2:7c:88:7c:9d:a9:fe:
e4:e1:e6:a6:53:7c:5c:17:01:a5:14:24:f1:36:e8:
fd:b9:10:90:a2:01:9c:c3:62:13:f9:a3:96:c3:0e:
ea:92:2c:69:cf:ff:f9:01:6c:a6:91:91:92:16:74:
93:91:2d:52:35:be:77:8e:d9:5b:2b:63:04:3e:68:
42:b1:97:c3:e2:6e:e6:45:76:68:9e:1c:12:ad:a8:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:99:55:79:DF:E4:6C:20:C9:05:03:AC:32:19:A2:27:17:0B:77:84
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/HplVed_kbCDJBQOsMhmiJxcLd4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.176.0/21
86.105.222.0/23
89.38.36.0/23
91.90.144.0/20
91.230.172.0/22
109.70.216.0/21
185.187.64.0/22
194.1.181.0/24
195.93.242.0/23
IPv6:
2a00:14e0::/29
Signature Algorithm: sha256WithRSAEncryption
25:fc:99:d8:1b:19:b0:96:e7:cb:46:1b:98:78:8b:e3:73:29:
60:71:24:82:85:19:8f:8f:33:f1:e1:bc:4d:16:96:6b:53:87:
b7:45:aa:15:77:33:b6:1d:73:10:48:21:4d:3f:25:02:27:f6:
a6:8c:c0:f0:9b:91:cd:2e:49:01:17:1d:74:46:18:04:76:c8:
93:bf:cb:a6:cb:04:6f:71:78:3e:c9:ba:91:bc:a9:1d:8e:82:
26:eb:7b:12:4d:6a:18:5b:a6:ed:b2:6b:b3:91:f4:88:b2:b9:
66:f7:73:17:36:c0:93:8a:6a:f3:4e:e3:27:99:fd:9a:bd:6d:
87:90:7b:8f:27:6c:77:ec:f1:03:38:7d:f3:49:26:26:1e:f9:
34:a8:b0:94:97:ae:9c:27:d5:60:d3:fd:ef:3a:6e:58:3e:32:
29:1e:c0:d9:9d:66:ad:0d:12:8d:87:d7:30:7e:28:7e:1e:93:
b8:d0:dc:1e:d6:bd:65:e5:4b:2e:f1:b4:65:f4:0a:10:58:bd:
bd:ed:d6:a6:65:ef:9c:d7:6d:5a:e2:f9:d6:78:ac:a4:5d:6c:
8d:b9:2b:74:8d:78:c4:6f:5d:e5:4c:14:e7:ae:fe:b1:16:bf:
11:dc:5d:6f:c5:e3:d1:3e:70:05:42:0e:81:ba:66:10:18:a4:
5a:bf:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org