Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Hp0-EfRi0HOn88Twz01AO5pTs6I.roa
File: Hp0-EfRi0HOn88Twz01AO5pTs6I.roa (raw, json)
Hash identifier: aaiIGOb/LDz8h3I59LuJ3DuAV5dvEgduVil0WpR5dnY=
Subject key identifier: 1E:9D:3E:11:F4:62:D0:73:A7:F3:C4:F0:CF:4D:40:3B:9A:53:B3:A2
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01865449DEAED8E74FF629D24EFEBC49AACD
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Hp0-EfRi0HOn88Twz01AO5pTs6I.roa
Signing time: Wed 15 Feb 2023 08:56:12 +0000
ROA not before: Wed 15 Feb 2023 08:56:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 192.145.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 15:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:49:de:ae:d8:e7:4f:f6:29:d2:4e:fe:bc:49:aa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Feb 15 08:56:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e9d3e11f462d073a7f3c4f0cf4d403b9a53b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:08:4f:14:87:8b:f1:c0:fb:a0:46:74:e3:
28:b6:e3:24:35:02:aa:14:ea:1f:a2:2e:2a:18:0c:
6b:d1:67:35:58:2e:5b:48:6d:6d:bd:67:31:49:a2:
5a:d2:f2:d7:98:7a:81:93:6b:a5:62:3e:d5:cd:d9:
b7:e2:30:36:a0:a6:61:c7:9a:07:4b:dd:77:8a:bd:
c8:c5:a5:23:a0:df:b6:c8:50:4f:94:a5:f7:2e:76:
f5:37:76:5c:50:e2:e5:3f:81:60:0a:f9:02:99:d3:
bf:a9:3b:ad:e5:e6:84:57:f4:84:82:bf:c4:84:b8:
f8:4f:1b:c7:e1:32:72:28:f7:7e:6e:67:bf:97:b7:
f4:70:5c:41:52:88:8e:a9:04:44:8a:43:bb:e9:d2:
75:bb:a5:93:aa:10:dc:a2:00:b5:14:e4:87:dd:53:
e6:4f:d5:72:d6:2b:23:a1:79:13:d2:8d:d9:1a:75:
52:5e:d4:ca:cb:af:c8:31:bd:2e:4f:d0:cc:e7:45:
a6:10:bd:83:d4:da:f9:30:e5:0c:31:8d:9c:2c:09:
7c:cb:3c:7a:bd:3e:ff:7a:9f:23:e2:a0:3d:78:9b:
c3:b5:22:c0:72:86:cc:6b:5f:b2:76:68:39:f1:2d:
9b:77:fd:f8:86:9e:7c:13:d9:bc:6b:e1:7e:c0:0d:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:3E:11:F4:62:D0:73:A7:F3:C4:F0:CF:4D:40:3B:9A:53:B3:A2
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Hp0-EfRi0HOn88Twz01AO5pTs6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.55.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2a:f8:59:4a:da:ed:eb:24:57:42:c2:21:27:00:84:0a:ab:
80:f6:76:77:79:e7:43:a2:81:df:02:82:c0:4d:d1:a4:dd:89:
c6:12:58:a1:f6:f2:13:c3:14:5f:32:de:ce:2e:6f:bd:15:0c:
6a:c7:d9:55:9d:73:40:59:5b:46:fd:00:7f:fe:0a:71:0a:69:
81:39:c4:2c:8c:6b:03:a7:fb:52:0e:fa:e9:a2:84:98:00:1a:
71:dc:12:1e:55:44:b1:4a:e1:00:92:f3:5c:13:81:0b:ac:ed:
4f:a3:0f:57:b9:61:af:3e:eb:da:ff:6f:19:64:3d:a8:a4:ed:
fd:65:6a:a4:a4:a4:43:1b:d1:5e:dc:58:18:70:97:2d:22:ef:
74:a9:f3:6e:4a:75:ec:aa:ed:a9:d4:e0:e6:8e:4f:cf:4d:5a:
90:74:21:e1:c4:5f:bb:60:6c:f2:68:39:73:f3:da:f6:a1:2a:
9b:be:70:ba:3b:d6:97:7a:55:b2:82:f8:a0:63:1f:8f:44:3a:
2c:78:f2:1f:b8:37:38:93:45:64:27:21:14:45:95:0f:d1:cb:
fa:b0:53:bd:8f:7e:dc:36:23:61:c6:5b:38:19:3e:94:4f:ab:
fb:52:11:0f:76:a8:c7:71:df:05:52:7d:2d:2a:4a:86:0b:9e:
13:5b:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org