Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HwN5eeKEKNbPJva_vz7bO7t5F5M.roa
File: HwN5eeKEKNbPJva_vz7bO7t5F5M.roa (raw, json)
Hash identifier: i/aPVux71rkEAclmxLVUQySfaH/62vOKRWfaq/uUymA=
Subject key identifier: 1F:03:79:79:E2:84:28:D6:CF:26:F6:BF:BF:3E:DB:3B:BB:79:17:93
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0191BB24E3C7D44EE26A2A5C3AB3776C3A38
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HwN5eeKEKNbPJva_vz7bO7t5F5M.roa
Signing time: Wed 04 Sep 2024 03:47:22 +0000
ROA not before: Wed 04 Sep 2024 03:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 46.249.110.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
82.115.28.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
91.132.57.0/24 maxlen: 24
159.255.32.0/22 maxlen: 24
185.231.172.0/22 maxlen: 24
188.214.236.0/22 maxlen: 22
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 02:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:24:e3:c7:d4:4e:e2:6a:2a:5c:3a:b3:77:6c:3a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 4 03:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f037979e28428d6cf26f6bfbf3edb3bbb791793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:53:9d:77:7e:a4:8d:d6:f4:5f:b2:e8:c0:
e8:d3:b3:0a:bc:57:89:f1:e5:66:3d:a0:e8:7e:67:
56:a2:0f:ba:6a:6a:e5:2e:fd:ff:11:ec:62:dc:e4:
25:9f:5f:b9:1d:89:d9:85:47:e6:8c:16:00:a6:ef:
09:0f:d2:10:86:16:78:35:89:05:86:e5:76:fa:51:
71:3a:a9:ca:96:f1:0b:93:16:9a:fc:cc:28:f9:f0:
05:52:1a:7d:b0:8e:49:75:db:17:4b:b2:61:2b:6d:
ad:12:46:40:45:6f:f1:a8:2f:94:f4:19:fa:28:62:
ec:81:49:b8:57:f9:71:5c:1c:7b:ed:a0:d2:c6:38:
86:fa:b3:da:4d:bf:80:c9:d1:24:12:1d:f9:c0:3f:
14:77:55:c0:7b:3a:3d:b5:62:f7:48:6c:a5:6e:db:
a9:34:7e:74:9e:68:25:30:57:59:11:03:9b:8f:d4:
3e:40:b0:ec:b5:70:a6:d9:1e:c9:37:f7:99:df:34:
61:df:45:52:47:9f:f7:df:31:35:ca:a3:18:c4:1d:
22:9e:cf:a2:84:e4:2b:41:f2:ac:0a:bf:90:43:6b:
f4:a7:9c:49:fc:3c:70:c5:2a:95:ac:dc:0f:64:f7:
8c:55:cb:e6:77:f3:3b:42:3b:a7:e7:ea:01:bf:84:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:03:79:79:E2:84:28:D6:CF:26:F6:BF:BF:3E:DB:3B:BB:79:17:93
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/HwN5eeKEKNbPJva_vz7bO7t5F5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
82.115.9.0/24
82.115.28.0/23
89.251.10.0/24
91.132.57.0/24
159.255.32.0/22
185.231.172.0/22
188.214.236.0/22
188.253.8.0/21
202.133.90.0/23
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:37:8e:da:4f:77:9f:ff:44:ae:2d:90:17:70:d6:be:d8:32:
61:58:a2:de:46:9d:10:5b:ad:3c:5e:56:88:49:a3:ff:af:29:
a4:03:26:79:46:37:94:a0:a7:c7:4c:02:b9:84:2a:c1:3c:d2:
09:11:d7:f6:09:ee:73:a8:23:3f:46:b0:aa:d6:a8:6d:ca:c0:
8b:fe:1b:80:32:4a:be:14:7d:6e:de:0e:da:31:da:13:71:ee:
99:05:a2:e8:6b:02:26:3e:15:a0:a4:83:2c:0b:0a:f4:a8:17:
07:cd:20:b2:c9:15:d0:1f:0d:15:e7:23:04:d9:82:1f:6e:02:
1c:f1:4f:2e:df:63:9b:66:e9:f8:cb:59:df:c8:2a:17:00:1b:
80:7d:64:d4:5e:65:67:3d:af:72:0c:bc:d5:14:14:7b:66:11:
f8:2c:0c:12:d4:68:d3:50:8b:57:41:ea:4f:62:52:4b:e6:66:
f9:1d:22:27:ca:ed:04:e8:9e:e1:a8:17:11:a3:20:9e:5e:9d:
5f:7d:fe:cf:cf:ed:1e:d2:ab:86:ed:2f:ef:b8:54:ca:61:eb:
9e:b7:5e:49:6a:1a:47:6a:01:26:61:eb:1f:d6:54:93:87:fe:
d1:82:9d:4a:26:6f:75:af:93:39:0c:0d:97:88:cf:93:94:c1:
d9:4d:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 04:24:09 2024 by rpki-client on console-fra.rpki-client.org