Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HMlJjdtjeGrbvVujQRzKnEW9gRU.roa
File: HMlJjdtjeGrbvVujQRzKnEW9gRU.roa (raw, json)
Hash identifier: Pe2MltQkb9bVpK+3HyG0zRY93YnPApOwPiTnu6YDGDY=
Subject key identifier: 1C:C9:49:8D:DB:63:78:6A:DB:BD:5B:A3:41:1C:CA:9C:45:BD:81:15
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CE67D4F6F59FA15C8DDF54D4CCC55
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HMlJjdtjeGrbvVujQRzKnEW9gRU.roa
Signing time: Mon 02 Jan 2023 03:36:00 +0000
ROA not before: Mon 02 Jan 2023 03:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204304
IP address blocks: 92.50.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e6:7d:4f:6f:59:fa:15:c8:dd:f5:4d:4c:cc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cc9498ddb63786adbbd5ba3411cca9c45bd8115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:31:6c:6e:f7:89:a3:cb:de:3e:5a:47:d6:
4d:5a:5b:02:42:41:42:21:6c:79:69:07:47:a3:ca:
bd:8e:67:27:59:00:fa:e6:57:eb:6c:4a:30:22:0e:
20:bb:60:ce:05:ec:9e:86:35:28:b9:71:0b:c3:aa:
4f:51:0a:7f:7d:b7:be:67:05:47:d3:ee:10:a9:68:
a8:f7:ac:92:49:8d:55:f4:85:d7:f4:73:99:a8:20:
a4:5d:24:c3:c8:0c:68:41:bd:7c:2b:47:6c:bb:ba:
2f:ed:9c:c6:f3:c1:34:a4:5a:3e:68:51:c5:8d:6b:
09:bc:08:2d:20:13:c7:53:7f:90:63:17:39:85:42:
e2:da:9f:f5:dd:08:67:2f:70:fa:58:6e:18:ab:0f:
20:f1:f5:97:00:84:00:2e:de:9c:f4:03:ab:de:0a:
f4:44:ff:a6:76:4b:bd:c2:f3:5e:d8:63:b2:ff:c1:
89:4e:0d:0b:81:50:46:80:24:ca:81:9a:14:60:aa:
49:d1:25:85:be:f3:94:92:d3:cf:4d:b5:8d:bc:0b:
3b:1d:63:43:75:26:76:f9:bc:03:22:86:7d:70:9f:
b0:ba:d4:e9:cd:b8:ad:16:d1:37:cb:17:3a:7a:a0:
41:f2:e7:96:c3:7b:5f:3f:c4:fb:ba:5a:98:70:dc:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C9:49:8D:DB:63:78:6A:DB:BD:5B:A3:41:1C:CA:9C:45:BD:81:15
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HMlJjdtjeGrbvVujQRzKnEW9gRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.246.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ad:db:0c:d8:c3:cc:40:2b:49:2e:5a:9b:cb:f6:87:1f:d5:
c4:d3:a3:5a:f1:b1:2c:5f:68:70:cd:37:a1:4c:d5:ef:20:50:
a8:d5:6f:21:31:bf:b6:c1:35:eb:a1:91:c1:4d:51:cb:54:38:
df:b5:fa:9f:10:2d:85:1b:c1:bf:6d:2a:c9:6b:d8:ae:fc:c9:
49:fa:d0:cd:78:a7:5e:12:ec:41:71:ef:42:61:42:fd:6d:3f:
a4:1c:cb:d5:a7:19:78:07:82:00:a3:30:7a:5d:fb:24:ec:4c:
73:16:23:72:05:f4:00:70:03:59:b1:2a:48:0d:61:35:62:06:
b8:23:1b:39:9f:70:65:a4:39:66:9b:eb:56:1e:a0:99:2e:5c:
b5:f3:ca:8b:86:6a:ae:4c:e7:55:f5:c7:8c:34:5c:ba:7b:db:
b2:c3:ed:49:47:54:19:c8:c4:f2:8f:8e:b5:eb:59:ed:b9:ec:
7b:df:f6:9c:e9:84:9c:6d:64:2e:9a:6b:f6:5c:71:c5:2b:a4:
b9:44:cc:1a:39:44:13:be:a4:92:6e:69:b2:88:71:48:04:41:
aa:0a:4e:e5:4e:56:24:7c:17:3d:69:b6:83:62:4d:13:ea:28:
d1:f6:fd:ca:f6:35:20:1c:bf:e8:c2:3b:b3:52:82:84:86:9d:
ec:9b:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org