Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Hl5dEA-sAUFdd87EqH6deAYyAXA.roa
File: Hl5dEA-sAUFdd87EqH6deAYyAXA.roa (raw, json)
Hash identifier: kacxhXbu6z6sLOpxvo9tUPk9UcPhwKYPzZcCQo5Ma50=
Subject key identifier: 1E:5E:5D:10:0F:AC:01:41:5D:77:CE:C4:A8:7E:9D:78:06:32:01:70
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018B8C573108AF7CF86795AFE8D9DC7F7A2B
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Hl5dEA-sAUFdd87EqH6deAYyAXA.roa
Signing time: Wed 01 Nov 2023 19:23:26 +0000
ROA not before: Wed 01 Nov 2023 19:23:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 188.215.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:57:31:08:af:7c:f8:67:95:af:e8:d9:dc:7f:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Nov 1 19:23:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e5e5d100fac01415d77cec4a87e9d7806320170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:3d:6e:ef:e6:92:b1:00:47:34:ca:02:b7:
af:cf:e2:94:b5:17:62:a0:fa:4f:21:08:b4:e3:b0:
cf:ba:6e:6e:c0:f7:f4:d2:ab:71:ea:23:7b:a8:fe:
7e:38:ba:f6:4b:86:53:e3:58:61:1b:c3:bd:f4:b2:
e9:47:50:1c:c7:60:e6:05:9a:31:96:05:45:44:2d:
77:f8:07:32:ff:8b:0b:be:bc:00:c8:15:ff:86:b2:
ea:df:46:0c:0f:0f:e1:cf:8f:bc:b9:86:d7:65:d0:
91:21:88:af:82:95:78:94:45:55:34:f0:3c:58:21:
31:d8:a4:12:a1:04:3a:ab:2c:f8:af:6c:fb:a7:99:
0d:32:d1:51:f5:d0:ad:0e:c3:33:45:9f:d1:b1:b1:
45:cd:2a:e6:50:4c:03:3c:62:83:07:50:04:a2:0c:
ae:a1:cc:f2:b9:d8:ca:ec:43:4b:cf:3d:79:a4:ec:
ca:1e:c4:95:f3:b7:57:55:1e:07:51:66:55:8d:51:
8c:f6:16:7b:a5:f2:c4:f6:c7:15:59:16:a5:ac:74:
a4:e1:72:c3:b9:2c:85:8f:e4:2c:16:7b:c6:2c:08:
29:2e:3e:6f:7d:c0:5f:7b:4d:14:c7:39:3a:c1:bd:
21:38:5d:41:de:04:25:c5:24:d6:44:22:c4:8e:58:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:5D:10:0F:AC:01:41:5D:77:CE:C4:A8:7E:9D:78:06:32:01:70
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Hl5dEA-sAUFdd87EqH6deAYyAXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.80.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f6:21:06:76:18:bd:bc:8f:69:3b:57:3d:55:65:44:07:56:
de:8d:16:71:10:da:4a:0c:3c:96:20:07:e7:8a:ef:1d:a5:7a:
ef:79:4a:32:5e:44:e4:d7:d9:73:48:1b:73:33:8e:6b:46:86:
bd:e2:39:13:32:2c:10:db:96:00:1b:cf:ba:d5:cf:69:87:38:
af:a1:16:b4:7c:ff:e0:66:d3:91:48:88:07:0a:4b:47:b9:8f:
1c:0b:6e:7a:13:93:e2:5f:89:55:53:d5:89:83:06:25:e1:94:
50:3d:db:95:6b:56:0e:fa:a2:0d:eb:75:95:2f:26:62:8e:4b:
09:b3:f4:ab:77:e2:8c:3e:3c:3d:9b:63:50:71:37:9a:42:f9:
ad:4d:54:b7:48:4f:26:ad:d5:09:41:2a:86:47:51:17:fa:2f:
63:de:f5:8b:b4:ce:35:31:b6:bc:b5:a5:b5:ea:d0:2b:5e:0b:
a2:58:f9:1e:cc:56:b8:72:73:15:7e:b6:b2:41:b7:5f:1b:ed:
2d:73:e2:fe:25:3f:06:19:aa:14:4d:00:be:13:4d:26:26:4c:
3c:d7:de:a6:7e:82:9e:7f:3a:b0:72:f4:82:b2:45:02:20:a4:
ed:64:11:12:4b:7e:84:a5:0b:85:cf:fb:c6:02:5d:15:c1:cb:
88:2e:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org