Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HcuAXLsRai1-tSHEDGGCB0iJygY.roa
File: HcuAXLsRai1-tSHEDGGCB0iJygY.roa (raw, json)
Hash identifier: 7Vrb4XvWXKg5/+4g9YiE79cKDMNDduAqsVw0aOP5Hyo=
Subject key identifier: 1D:CB:80:5C:BB:11:6A:2D:7E:B5:21:C4:0C:61:82:07:48:89:CA:06
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B188E887A206B397BBCCDDB99BD42D6D2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HcuAXLsRai1-tSHEDGGCB0iJygY.roa
Signing time: Tue 10 Oct 2023 07:47:56 +0000
ROA not before: Tue 10 Oct 2023 07:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 194.135.38.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:8e:88:7a:20:6b:39:7b:bc:cd:db:99:bd:42:d6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 10 07:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dcb805cbb116a2d7eb521c40c6182074889ca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:a5:7a:d2:38:fd:01:01:58:c5:4f:06:ae:
50:97:6e:3a:89:bf:ee:85:78:9b:69:4f:55:b5:c0:
38:0f:95:a1:3a:3f:48:7c:d4:a8:71:4e:2b:62:b8:
64:8e:bb:f9:cc:50:89:be:dc:d1:9d:98:55:27:7f:
9c:73:88:e9:0d:32:19:06:d8:12:67:1e:61:0b:b8:
c8:61:5b:91:f6:7a:23:dd:4f:a5:60:5c:d0:c0:ed:
c4:4e:88:ab:85:bc:8d:83:3c:ad:28:c5:5f:c8:e9:
b3:2c:4e:a9:4a:8b:69:0c:83:1d:f7:35:75:12:05:
b6:4b:e8:ea:f1:c0:18:f9:07:51:ce:25:ac:9b:19:
91:4d:99:34:af:3b:9a:54:1c:4c:4f:9b:6a:ca:7e:
22:dd:8a:19:b5:03:49:9e:e9:83:45:53:be:c4:4b:
d6:68:0c:da:00:5b:79:19:d7:8f:e9:14:af:41:e6:
a9:aa:fd:e8:d9:4f:8d:7b:9d:fe:c3:a9:ec:21:cc:
8c:ca:68:ad:b4:09:26:e4:17:99:10:91:c1:9e:2c:
b5:f3:48:c4:9a:2b:9f:5d:ef:91:33:26:4f:a7:82:
07:35:e6:63:fc:c6:95:ae:eb:6c:35:16:92:7e:0f:
22:d9:4c:a7:ca:b7:09:b4:13:86:68:e8:99:76:e4:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CB:80:5C:BB:11:6A:2D:7E:B5:21:C4:0C:61:82:07:48:89:CA:06
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HcuAXLsRai1-tSHEDGGCB0iJygY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.38.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:94:c2:31:26:2f:3a:8c:69:e0:44:e6:41:0d:9a:9d:dc:81:
4a:87:24:c9:bb:71:05:9b:a0:fc:a6:22:a3:27:58:d6:9e:20:
dd:6a:2f:b7:31:e0:b9:ac:ea:22:d5:60:06:19:f6:26:22:d7:
0e:a5:2f:ee:2e:89:cf:74:44:64:43:d0:e1:eb:5e:80:b2:b5:
ea:da:cf:d5:bf:af:54:1a:c6:42:35:fc:62:21:7f:0a:28:f4:
e1:62:f7:2f:87:5f:26:d2:1f:7b:0e:2e:de:b8:4b:e8:24:13:
f8:ca:95:28:66:07:e1:14:32:fe:22:84:02:47:35:1f:43:12:
fc:d8:14:0f:35:ed:1b:9d:5b:08:cd:15:18:cc:b1:91:7e:26:
74:ce:79:8d:f9:5d:49:60:30:33:fe:93:ee:c3:7c:ed:fa:1d:
69:6d:a0:15:cd:15:58:29:92:be:c3:8a:57:6b:89:05:79:65:
58:92:3e:ab:15:00:9e:bd:af:eb:cf:f7:f6:a0:ae:a7:af:0e:
0e:be:ef:b1:b2:c4:42:81:1f:00:66:94:c0:15:54:5a:12:2d:
fc:2c:78:13:c2:78:f6:2a:58:ec:d1:aa:28:7f:fb:7b:01:75:
7a:77:ed:72:dc:3b:5c:a8:52:a5:d8:d8:04:62:99:a0:70:f4:
b0:9b:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 13:43:00 2023 by rpki-client on console-fra.rpki-client.org