Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/HFTD_iNbKCBj-HaRnTC5hbJLEKA.roa
File: HFTD_iNbKCBj-HaRnTC5hbJLEKA.roa (raw, json)
Hash identifier: xl/1lROUOFgR09/r7MRRWwXVZO3+p3JWCFdG6JZQIK8=
Subject key identifier: 1C:54:C3:FE:23:5B:28:20:63:F8:76:91:9D:30:B9:85:B2:4B:10:A0
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0192AF2DA531DC71CDCFC0C4BC558AFE064F
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/HFTD_iNbKCBj-HaRnTC5hbJLEKA.roa
Signing time: Mon 21 Oct 2024 13:04:17 +0000
ROA not before: Mon 21 Oct 2024 13:04:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214934
IP address blocks: 217.177.74.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 08:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:2d:a5:31:dc:71:cd:cf:c0:c4:bc:55:8a:fe:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Oct 21 13:04:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c54c3fe235b282063f876919d30b985b24b10a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:02:9d:c5:67:f2:7a:3b:f1:25:ab:14:b6:
0f:ea:f0:98:fa:e5:d8:85:e5:9f:2b:b2:dd:55:b3:
a6:aa:58:ce:96:aa:d5:49:b3:ce:2f:26:59:4e:73:
c1:d7:10:65:47:7b:d0:36:58:35:0d:ba:a3:4e:19:
3c:9c:e4:b0:85:09:f3:dd:8f:67:4d:20:c7:32:92:
42:5b:37:4e:d4:34:cb:36:75:d2:8e:5d:4a:e8:8e:
55:69:94:28:f6:23:42:0c:ca:eb:a6:a0:d9:82:ba:
60:0d:10:67:e4:4d:61:8d:6e:37:ee:de:68:d1:e4:
89:56:e2:ba:9c:9a:f4:5c:b4:e8:be:89:fa:0b:a7:
0e:f0:01:ce:d4:02:b0:00:62:f5:4a:a6:b6:8c:29:
4a:a7:46:5b:73:47:0d:03:6e:7f:4b:7d:ee:a2:01:
25:14:f8:b3:b8:67:e8:99:ca:60:a7:84:b7:8e:58:
bb:7a:7d:ff:2d:81:7e:8c:a4:44:cc:4e:3c:f7:15:
4d:a1:99:88:6a:33:8e:9a:35:50:b7:4c:5f:df:24:
46:c5:cf:2e:31:3a:eb:51:00:62:de:7d:5b:16:1f:
60:14:82:a3:f1:c3:43:cb:58:37:b8:d2:cf:ab:61:
16:38:bf:b5:91:1b:ec:20:93:6f:82:61:dd:19:e0:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:C3:FE:23:5B:28:20:63:F8:76:91:9D:30:B9:85:B2:4B:10:A0
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/HFTD_iNbKCBj-HaRnTC5hbJLEKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.74.0/24
217.180.46.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2b:bf:4b:e7:f8:fd:f0:6d:c5:81:bf:98:0e:31:49:4d:b8:
09:8d:17:a1:3e:ae:c2:ef:c5:5f:f8:c8:82:c2:5b:02:59:ea:
40:ce:56:e4:87:fe:50:9c:71:64:24:30:35:26:22:f5:9c:6d:
9f:df:cd:c3:bb:a9:58:54:fd:e5:bb:ee:67:e0:c4:84:45:af:
80:87:9b:47:e9:7e:09:ae:b5:f0:9f:48:5d:df:c6:cc:35:69:
73:41:c5:91:54:70:44:a3:e6:1f:57:a1:43:ee:70:dc:b0:58:
06:eb:ea:ac:d6:36:34:c9:54:5b:50:cc:49:5b:9a:1d:5c:b8:
22:78:d5:df:5b:3f:d2:4a:ed:da:9a:af:2a:c8:c8:49:1f:05:
40:95:b2:7e:a0:a7:91:a7:97:7d:89:03:5d:c9:6f:47:ce:75:
fe:ea:10:de:76:d4:98:34:9b:28:27:39:ea:a5:d2:e2:19:93:
1e:77:5a:71:42:02:30:5d:41:e0:04:11:19:8a:1c:53:7c:b7:
0e:85:ba:96:9a:8d:46:9b:e7:ea:9b:cd:a2:b7:28:93:fa:11:
fc:8d:da:86:e3:fb:01:3e:97:f4:a7:0e:e2:53:28:39:4f:03:
a8:86:08:8a:fd:b2:7d:ea:55:fb:19:8c:3b:f1:1a:b0:41:9b:
4d:14:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:09 2024 by rpki-client on console-fra.rpki-client.org