Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/hrfSVZi76-KU1BvcFDOzkQ5BSZE.roa
File: hrfSVZi76-KU1BvcFDOzkQ5BSZE.roa (raw, json)
Hash identifier: ekpCe7gn1qq2AGVXWclK6ITTbu/fFPVt/9Vp9GATmB0=
Subject key identifier: 86:B7:D2:55:98:BB:EB:E2:94:D4:1B:DC:14:33:B3:91:0E:41:49:91
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 018B19468CD947A770884CACA4FBF6CC15C6
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/hrfSVZi76-KU1BvcFDOzkQ5BSZE.roa
Signing time: Tue 10 Oct 2023 11:08:55 +0000
ROA not before: Tue 10 Oct 2023 11:08:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 188.244.122.0/24 maxlen: 24
45.14.174.0/24 maxlen: 24
45.80.111.0/24 maxlen: 24
80.94.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 21:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:46:8c:d9:47:a7:70:88:4c:ac:a4:fb:f6:cc:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Oct 10 11:08:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86b7d25598bbebe294d41bdc1433b3910e414991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:5e:2b:f8:34:1d:02:34:39:49:90:df:64:
d8:e7:c7:ec:6f:3a:38:29:ac:2d:b7:ce:52:c3:a7:
2b:be:4c:30:b9:c9:c7:b8:d2:66:68:02:45:f7:46:
86:c8:81:b7:67:ef:f4:c8:fa:28:0e:c9:12:f3:81:
bb:ba:3a:75:6b:8a:27:9f:1e:70:53:0f:ef:1f:7a:
6e:e2:c1:83:e1:38:c2:e5:9f:61:ee:2f:c7:7b:88:
5f:57:0f:0f:5d:5a:85:b1:0a:8e:bd:ff:d9:00:bc:
03:7b:e1:9c:a9:b4:00:ea:d4:63:c0:fa:20:d1:8d:
0d:54:3a:43:bc:9d:3d:ff:79:a0:da:2b:19:ef:5b:
99:5c:26:74:b7:99:a0:55:f0:35:46:94:e4:ec:be:
b7:a4:53:80:1e:3c:be:6d:c5:4e:db:cb:41:90:ad:
06:8c:75:95:13:f1:b1:97:28:57:58:52:34:22:ec:
3b:ea:3a:69:b9:fa:03:ec:65:f7:16:a0:2f:6b:9b:
f2:e9:ee:3c:e6:08:e1:40:25:e1:6a:b2:8f:a4:c6:
75:f6:02:a8:5a:bd:fa:f2:66:34:fd:7b:49:f5:1b:
c4:3f:a1:a2:db:20:d6:02:14:84:ea:e1:d6:ad:91:
b7:94:a5:af:dd:e9:27:85:3b:86:03:ec:f8:76:ab:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B7:D2:55:98:BB:EB:E2:94:D4:1B:DC:14:33:B3:91:0E:41:49:91
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/hrfSVZi76-KU1BvcFDOzkQ5BSZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.174.0/24
45.80.111.0/24
80.94.83.0/24
188.244.122.0/24
Signature Algorithm: sha256WithRSAEncryption
19:50:76:4b:85:2e:12:aa:64:fe:9a:57:d7:1b:9f:5c:67:38:
d0:e4:be:ed:da:5d:ba:3a:ab:cc:6a:ce:b6:aa:97:2a:e5:89:
42:a2:cc:2e:5c:82:ee:9e:12:bf:1f:ab:2f:63:82:2b:e8:6e:
16:2f:22:11:7b:08:7c:19:4c:6f:c2:11:f8:b0:12:fd:0c:25:
15:97:c6:66:82:cd:aa:63:cd:85:b1:98:81:50:f2:11:21:e6:
fa:37:90:f2:62:37:b3:8f:df:a0:9a:08:69:6b:e8:f9:20:fb:
0a:86:7c:4c:06:81:8a:ce:1c:8c:b8:42:25:59:aa:53:e7:24:
39:5e:d9:24:b9:e1:28:84:4b:9d:ef:0a:04:1f:42:d0:e7:73:
81:ab:02:70:50:e1:99:5e:6c:cb:b1:3f:1b:fb:18:af:1c:d2:
45:a2:db:07:57:85:7c:8f:50:73:46:c1:df:9b:ac:a4:77:97:
ba:80:65:4e:a9:10:0d:55:c8:f2:69:ef:96:85:6c:37:34:44:
be:4a:e4:da:14:c0:61:12:7e:55:7f:80:d1:e7:e3:18:27:28:
e7:8c:e8:2b:cf:04:90:67:6b:fb:af:6e:f8:3a:89:e4:09:be:
cd:f8:93:70:bc:69:4e:f9:b9:f8:16:94:d9:8d:da:f8:29:1a:
54:03:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org