Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HbHegn_2VF6pxg4Tgo8Q85OHdTw.roa
File: HbHegn_2VF6pxg4Tgo8Q85OHdTw.roa (raw, json)
Hash identifier: KMIYMkalLLIjYvu63SzTyDausOh8q6ggZHxNH4nzzPI=
Subject key identifier: 1D:B1:DE:82:7F:F6:54:5E:A9:C6:0E:13:82:8F:10:F3:93:87:75:3C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01859190C63F4526732A5D17BDE784C76ECB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HbHegn_2VF6pxg4Tgo8Q85OHdTw.roa
Signing time: Sun 08 Jan 2023 13:27:42 +0000
ROA not before: Sun 08 Jan 2023 13:27:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 06:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:90:c6:3f:45:26:73:2a:5d:17:bd:e7:84:c7:6e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 8 13:27:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1db1de827ff6545ea9c60e13828f10f39387753c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:c3:35:cf:21:04:74:03:ed:9b:5b:2f:d7:
bb:e1:15:48:a1:1b:9e:51:51:ef:2c:0c:58:10:10:
f5:9a:72:eb:96:5d:da:de:bf:7a:c1:92:c1:7a:3f:
0c:84:82:21:8b:fc:e6:a3:65:b4:a2:b2:7f:eb:74:
05:54:43:85:e4:af:b7:3e:5d:6e:0c:13:8e:79:bc:
ed:43:37:35:93:e4:cb:fa:3d:ee:6c:98:62:aa:2b:
7c:bc:85:ef:53:6c:f8:2f:d7:b6:76:df:4f:db:cd:
16:60:93:f0:44:03:96:e0:7a:00:79:4a:6c:f5:55:
49:e0:a8:16:aa:c9:6d:31:df:5c:85:cf:69:c8:3d:
c8:03:c9:f4:27:64:d4:50:33:da:8c:4a:e8:52:5f:
a4:ec:d4:a4:03:b1:57:4f:7f:39:5d:55:bc:9d:60:
4f:dd:60:0f:40:ad:48:97:06:9f:7b:2b:88:b9:d3:
28:1f:6d:fe:49:01:2d:41:2e:93:7a:7d:af:3b:35:
76:59:4c:1e:9f:32:48:fe:35:04:02:1b:50:b3:ac:
5b:87:a4:08:c5:b5:41:25:e0:e8:c2:67:5c:de:b1:
cb:e6:6e:94:15:88:6e:c3:b5:6f:97:a0:9b:c4:bf:
3a:e0:61:eb:5d:f6:72:52:0d:22:e8:df:f7:ce:72:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B1:DE:82:7F:F6:54:5E:A9:C6:0E:13:82:8F:10:F3:93:87:75:3C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HbHegn_2VF6pxg4Tgo8Q85OHdTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.35.0/24
194.87.220.0/23
194.87.227.0/24
195.133.39.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e0:b1:2e:b0:91:36:66:7e:d6:2b:2c:f0:36:15:46:36:9c:
6b:7d:dd:01:eb:0e:0f:8c:34:cb:ef:21:9c:62:26:2e:2c:ba:
61:4a:19:83:0b:c8:5b:20:84:b9:f5:c6:9e:34:ad:98:ce:5f:
d6:89:c2:35:ff:d3:b1:8d:63:a8:a8:50:9a:7e:95:fa:65:83:
01:c6:e7:dd:90:a1:0c:65:29:bf:9f:da:37:8e:61:e1:6b:92:
5d:f0:8f:35:ff:de:ed:55:69:4d:50:51:b8:8f:08:6b:96:1a:
a0:48:95:4d:b2:fd:27:7d:90:fc:a4:d2:2a:ec:dd:10:f5:e3:
f2:10:8c:9a:6c:49:48:56:c4:71:a6:e7:b3:59:62:13:2d:f3:
97:47:8a:45:4a:6f:90:93:d3:78:1d:6d:71:ea:03:58:42:7f:
a2:71:61:74:a5:c3:5d:09:59:06:89:73:3d:b6:9a:e2:35:51:
2a:14:45:e4:09:a8:20:c2:aa:60:89:61:03:3e:2a:a4:93:8b:
31:63:bf:89:f4:25:0b:1f:44:8a:82:7e:8a:67:3b:0f:e1:76:
fb:26:4a:24:2d:cb:2f:53:91:5f:22:97:c2:bd:ec:5c:14:fd:
05:af:63:62:36:e9:14:e1:ad:3f:73:2a:66:79:79:e8:c8:90:
88:c4:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org