Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/H0ltuLRPJv04T4woKw_MWUWe2i0.roa
File: H0ltuLRPJv04T4woKw_MWUWe2i0.roa (raw, json)
Hash identifier: m3ickytd5CK47V/4I4DuqnJgVWU/rMN3PeNq/croOns=
Subject key identifier: 1F:49:6D:B8:B4:4F:26:FD:38:4F:8C:28:2B:0F:CC:59:45:9E:DA:2D
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018F8544BB10B17A23160795B25A7AB684E7
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/H0ltuLRPJv04T4woKw_MWUWe2i0.roa
Signing time: Fri 17 May 2024 06:37:04 +0000
ROA not before: Fri 17 May 2024 06:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58074
IP address blocks: 193.138.99.0/24 maxlen: 24
193.169.142.0/23 maxlen: 24
194.6.201.0/24 maxlen: 24
195.245.82.0/23 maxlen: 24
195.245.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 16:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:44:bb:10:b1:7a:23:16:07:95:b2:5a:7a:b6:84:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: May 17 06:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f496db8b44f26fd384f8c282b0fcc59459eda2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:2b:c1:3c:7d:21:da:b5:29:ac:62:8a:65:
cb:31:ae:59:6c:fa:27:9a:ab:b9:77:cf:ed:ad:55:
f3:93:e8:80:97:67:2a:ec:da:48:91:4e:d6:ff:00:
74:fb:ab:b1:2f:bb:70:d9:12:da:5d:c6:6a:40:e0:
d5:d0:15:09:39:e1:b8:b8:2f:70:35:45:90:f9:e4:
dc:05:db:5b:67:77:45:1e:4d:e9:14:91:48:95:b4:
0a:da:63:5e:21:2b:67:3f:96:7e:1c:23:2c:ec:fa:
df:01:27:af:68:38:82:4a:b9:87:bd:c1:d7:1a:56:
20:83:be:50:da:0f:7e:bb:b7:89:f6:7f:60:1c:66:
fb:0b:0c:3e:18:d6:c9:b4:b6:28:d6:2e:fc:43:fe:
83:4d:bc:17:20:88:c5:ef:33:af:5c:3e:56:f5:de:
73:96:1a:c4:b4:ff:1e:84:38:2e:52:c2:bc:24:95:
1e:ee:86:9c:c0:b5:d0:6c:3e:bb:f9:a0:88:95:76:
f9:7b:7a:c5:85:40:3e:9c:b8:c3:5c:0b:2d:26:45:
8d:cb:df:ac:58:1e:f4:3a:60:73:f6:d1:39:b5:60:
1e:63:c8:5e:65:f5:af:04:7f:95:6d:e5:cb:60:16:
a0:b2:fd:9b:9e:fa:c5:88:30:d6:94:7e:6d:af:b2:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:6D:B8:B4:4F:26:FD:38:4F:8C:28:2B:0F:CC:59:45:9E:DA:2D
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/H0ltuLRPJv04T4woKw_MWUWe2i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.99.0/24
193.169.142.0/23
194.6.201.0/24
195.245.82.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a8:27:fa:77:45:94:44:68:e4:13:4b:18:5e:a1:1c:99:81:
d6:52:17:a2:95:17:82:06:7b:09:6b:a4:7c:32:8f:f9:8f:2c:
78:89:f7:ba:18:e5:fa:04:9d:c1:b6:6e:34:9a:84:6b:ed:69:
06:b4:e5:b1:e3:f5:63:c5:20:53:b7:c3:9c:d4:ac:0e:09:79:
4f:fb:e7:ec:4c:49:a6:c6:81:f7:94:1c:68:56:8d:dc:25:ae:
23:4f:1d:d9:03:51:b7:ac:66:ea:4e:48:09:73:68:1e:2f:52:
5e:0a:d8:5b:0c:1c:80:e0:ef:8b:a6:30:b1:f2:48:a1:6c:c3:
4c:b2:11:7a:e1:7b:fc:0f:ff:de:4f:43:50:64:fe:25:7c:ad:
e9:5e:17:67:9e:86:b7:55:69:d4:c5:f0:a1:86:b9:94:ac:bc:
a1:c5:66:a4:a5:16:3d:08:0d:26:d4:2a:13:2b:fa:2b:4b:22:
3a:e9:b4:bc:0b:05:62:88:85:4a:12:c0:e5:b1:19:62:6d:2a:
71:1f:53:80:4b:27:07:9f:d5:f1:9a:91:8b:35:0f:cc:0f:bd:
a5:8d:0d:03:a9:05:b4:b0:60:6d:e4:7e:fa:9b:78:b0:d5:2b:
2f:b9:b4:2c:88:e3:6b:d4:64:d7:08:2e:6f:72:55:fc:61:cd:
ce:d6:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 20:54:28 2024 by rpki-client on console-ams.rpki-client.org