Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HM928DH20vxE_wxBCpNYm4rLkSA.roa
File: HM928DH20vxE_wxBCpNYm4rLkSA.roa (raw, json)
Hash identifier: a9xmxljAqqB8W7Fqoy8Kna8jhyATaOQxSsi5U8qKjHc=
Subject key identifier: 1C:CF:76:F0:31:F6:D2:FC:44:FF:0C:41:0A:93:58:9B:8A:CB:91:20
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01859A777E87A538CF4B3A36EFDDDCBF4D89
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HM928DH20vxE_wxBCpNYm4rLkSA.roa
Signing time: Tue 10 Jan 2023 06:56:40 +0000
ROA not before: Tue 10 Jan 2023 06:56:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 194.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 06:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:77:7e:87:a5:38:cf:4b:3a:36:ef:dd:dc:bf:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 10 06:56:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ccf76f031f6d2fc44ff0c410a93589b8acb9120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:8f:25:8f:ff:ea:0b:c5:20:d1:59:8e:52:
39:84:75:a7:79:8d:b3:ff:a8:fc:68:9f:00:5c:1c:
8d:a8:16:82:88:0a:8d:92:6b:86:13:4d:80:4b:1d:
a3:02:1f:ac:7d:b3:53:fc:2a:af:dd:9b:d3:4c:de:
ed:f9:35:39:80:bd:46:8e:44:b6:3f:27:d5:42:4d:
68:1b:5e:e2:6d:fe:66:00:7e:cc:ce:e7:db:1f:c5:
fc:37:82:51:c4:f1:9b:be:c5:cc:19:d2:38:06:31:
47:2d:1a:e4:11:ea:63:06:7a:fb:59:3d:a1:f4:9e:
a6:12:dc:90:b4:d6:dc:5e:d7:33:2a:80:43:01:f2:
5f:6f:cb:fd:ba:01:e4:02:8a:0f:df:4c:88:8d:cf:
71:0a:15:b7:12:8e:21:dd:2c:3f:2c:b3:0f:0e:0e:
27:21:d6:13:76:d6:41:0f:38:44:6b:77:42:f0:e8:
e4:56:a9:2f:d3:27:be:c8:17:f4:cb:84:6d:0c:4c:
54:b0:3c:bc:88:01:c0:1c:6b:09:d8:0a:6a:ce:00:
69:7e:be:0b:1a:f6:bf:8c:ee:6b:2e:d9:e7:3f:9b:
67:39:ec:ca:e7:17:57:a6:8f:73:ef:66:93:ae:1d:
8e:c9:92:c8:65:e8:be:74:bb:d8:3f:cc:36:39:f0:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:76:F0:31:F6:D2:FC:44:FF:0C:41:0A:93:58:9B:8A:CB:91:20
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HM928DH20vxE_wxBCpNYm4rLkSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.58.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1e:8c:fd:7b:b9:25:1f:0a:4b:0b:25:74:1b:a6:00:1b:2f:
9d:e1:cb:c5:25:b8:15:27:f7:90:36:8d:fa:84:b5:59:d1:ed:
96:3f:c0:97:9b:4c:67:1b:d5:46:aa:d2:86:e9:f1:5b:95:27:
6f:af:ac:9f:cd:f8:e3:3b:8a:0e:cb:2b:0b:71:7d:f7:1f:38:
f5:f7:eb:86:e8:d1:11:b6:dd:88:00:e6:67:d9:40:38:f9:82:
17:54:a8:98:42:27:dd:4a:cf:86:39:ae:aa:ed:c2:b1:65:42:
39:1c:b2:35:b7:8c:94:87:68:74:ea:08:ba:60:24:b6:f1:7e:
ea:5a:df:fc:a7:8f:3e:72:ac:e1:55:d1:02:ea:cd:01:1d:a9:
d4:35:21:ca:a2:37:e7:4e:2d:28:a0:7f:f0:86:31:5c:e9:82:
43:94:7c:a4:59:31:fb:d4:d4:69:23:78:40:e4:c2:20:9a:8f:
85:ea:8d:5a:80:94:b5:92:0c:1a:33:50:16:f4:20:2b:00:63:
56:9a:a5:b4:0d:cf:be:04:a9:2e:25:6b:3d:ba:36:ce:0d:26:
8b:ac:44:f3:d2:a2:91:f9:1e:8d:64:72:ec:0c:e0:e3:61:e6:
ea:26:ae:b5:36:43:2a:d7:ef:0b:19:60:ec:9d:28:02:55:b1:
41:39:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:11 2024 by rpki-client on console-fra.rpki-client.org