Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/HgbQa1fNvZe-dVZWi2DOms051dk.roa
File: HgbQa1fNvZe-dVZWi2DOms051dk.roa (raw, json)
Hash identifier: GmCkfeA03yN4PIyQDHMiqyI9xl4ThmqHmHIhMn+XJdM=
Subject key identifier: 1E:06:D0:6B:57:CD:BD:97:BE:75:56:56:8B:60:CE:9A:CD:39:D5:D9
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 018D31BC78D0ABCAAD9C2192BE0553A0F8B1
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/HgbQa1fNvZe-dVZWi2DOms051dk.roa
Signing time: Mon 22 Jan 2024 15:14:11 +0000
ROA not before: Mon 22 Jan 2024 15:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207709
IP address blocks: 185.157.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 22:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:bc:78:d0:ab:ca:ad:9c:21:92:be:05:53:a0:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jan 22 15:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e06d06b57cdbd97be7556568b60ce9acd39d5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:de:08:18:d6:7f:51:4f:1d:05:fa:b3:a5:
14:34:16:5a:b7:2a:aa:e9:0a:47:53:16:a3:6d:b2:
80:33:0d:2b:4c:97:a0:0b:53:dc:37:34:e5:22:28:
8d:81:74:56:c1:7f:f6:83:d4:bd:11:95:b6:f9:a2:
75:33:ed:35:cd:36:49:a4:35:87:41:d1:59:76:66:
f4:f6:eb:68:30:84:9e:a2:61:70:3f:77:d3:f5:eb:
74:c2:88:38:61:33:32:f2:6a:91:88:4d:cb:22:f2:
71:bb:95:5f:54:d6:a5:9f:5e:47:7d:02:3f:bd:43:
48:1d:b7:c9:89:d3:26:e3:b5:68:9a:e9:3a:fd:33:
e3:a8:73:e7:99:24:93:dd:02:27:89:ca:a6:67:1f:
09:8d:aa:24:bc:91:7a:af:03:8a:b9:8f:e7:e4:f6:
60:de:4e:a5:32:c5:af:ea:9c:53:1b:ee:f9:fc:c6:
d8:73:0d:08:59:36:7f:3d:75:c0:ff:b8:0c:02:5c:
b2:f8:dd:cc:d8:a8:9e:9e:73:6d:4d:84:66:0b:08:
97:ea:3b:6f:be:a5:4a:38:65:df:ef:9c:76:13:1a:
23:79:00:f5:79:aa:4e:13:b8:04:70:92:c4:a8:51:
e4:79:67:60:16:7d:e2:52:94:dc:c8:5d:4e:be:e7:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:06:D0:6B:57:CD:BD:97:BE:75:56:56:8B:60:CE:9A:CD:39:D5:D9
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/HgbQa1fNvZe-dVZWi2DOms051dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.50.0/24
Signature Algorithm: sha256WithRSAEncryption
09:61:ef:16:80:96:0e:24:91:ea:14:a4:f9:d4:21:14:71:c5:
d4:69:e9:d2:24:47:84:db:29:73:1d:19:6e:b7:15:14:61:03:
85:c1:3e:5a:f5:30:b0:79:a2:6c:71:33:d3:63:d6:4a:b8:9d:
e1:44:42:32:ae:fa:b3:ea:1d:15:ce:5b:d0:f6:8c:28:1a:13:
75:76:25:1a:9f:8c:84:0f:b1:2f:4d:8a:3c:dd:52:0d:1c:45:
8f:13:74:c6:ae:77:05:db:78:07:f8:64:b1:ca:bd:64:e0:5a:
05:f1:7c:fb:f3:eb:c1:65:20:18:c3:c9:ed:5a:0e:2a:09:ae:
d9:cd:f1:84:33:21:77:77:bb:98:49:33:85:26:f3:50:e1:85:
99:06:10:20:3b:b2:d1:6c:78:1a:64:a0:03:7d:70:80:c4:b4:
ef:d7:69:7e:f8:b6:30:0b:65:47:63:33:48:94:af:09:9e:44:
90:e5:09:79:e0:89:1e:b1:92:5c:de:45:62:d9:6c:26:d6:da:
a8:40:02:ae:ef:7c:f5:a5:dc:12:f6:7f:33:e7:8a:40:b4:1f:
b2:66:49:67:cc:a7:5b:d7:01:ca:12:20:07:cf:bf:f3:a5:3e:
5d:17:1a:43:41:d2:db:d9:d7:27:f6:ae:9f:ac:6a:e3:77:93:
a0:6a:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 00:18:28 2024 by rpki-client on console-fra.rpki-client.org