Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hxPGCq1dw68qLThRlBGzIJI6cAU.roa
File: hxPGCq1dw68qLThRlBGzIJI6cAU.roa (raw, json)
Hash identifier: AsKNnAIAu4FtIjaFLKHspWEUsbophk/oJ5FBOOMU65s=
Subject key identifier: 87:13:C6:0A:AD:5D:C3:AF:2A:2D:38:51:94:11:B3:20:92:3A:70:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0190695E31D33064A6453CAB8D0C1F68A2F6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hxPGCq1dw68qLThRlBGzIJI6cAU.roa
Signing time: Sun 30 Jun 2024 13:38:18 +0000
ROA not before: Sun 30 Jun 2024 13:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 04:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:5e:31:d3:30:64:a6:45:3c:ab:8d:0c:1f:68:a2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 30 13:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8713c60aad5dc3af2a2d38519411b320923a7005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:fc:13:73:62:94:ab:b6:2c:c9:68:01:03:
18:20:81:cb:10:bc:96:2f:1b:02:51:09:63:9e:5e:
2a:02:e4:71:49:78:93:ff:d5:9b:34:cd:5a:9f:00:
d8:77:b2:b1:e7:95:f9:85:76:7c:51:32:b6:f9:89:
5b:aa:04:43:21:6e:25:c3:c2:42:10:ad:0a:1b:c4:
27:9f:15:08:fc:ef:d5:cc:f7:9d:e8:ca:ab:b7:c3:
f3:3e:d8:46:73:64:f0:45:78:42:3f:e3:86:26:81:
6d:aa:9d:64:39:c4:f4:a8:81:07:60:65:6e:77:27:
62:35:da:88:a2:45:88:08:60:54:02:f6:90:9c:b0:
64:88:c3:e2:9a:d4:ec:61:4d:cb:64:80:1f:63:f9:
50:dd:75:bf:7c:c3:78:f5:d1:bc:06:4e:27:3d:fd:
a1:6c:e9:a9:3c:77:e1:c5:10:03:52:5e:ad:cc:d7:
eb:37:45:53:13:0a:30:e6:52:b6:80:3e:61:c9:47:
83:74:fb:5f:29:45:5d:f5:e2:83:32:b0:a0:a0:87:
c4:cc:16:a2:be:f5:6c:8a:56:a0:84:94:4e:08:b8:
5f:c5:78:28:dc:89:67:89:99:cb:da:f7:dc:62:83:
cb:5c:45:e4:29:f9:73:84:0e:1a:5b:a2:2f:47:37:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:C6:0A:AD:5D:C3:AF:2A:2D:38:51:94:11:B3:20:92:3A:70:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hxPGCq1dw68qLThRlBGzIJI6cAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
195.58.39.0/24
195.133.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5e:8d:21:ac:d9:0f:7a:ce:7b:8a:9a:16:10:b7:80:54:09:
54:69:4b:91:fb:5e:13:3a:28:71:51:d8:bb:16:58:7a:41:47:
14:c5:1d:31:0b:ff:de:48:2b:a9:23:da:c0:cd:67:c3:d8:e3:
ab:60:5e:5c:c6:6a:4e:4c:f3:b6:25:1c:b8:ec:c7:61:5f:10:
5e:6c:1b:91:fa:9a:18:53:09:8d:14:9f:cd:22:d7:4c:64:34:
3c:9a:1c:cc:16:9a:79:90:27:8c:81:54:1f:22:24:5f:d1:45:
7d:5f:94:09:ef:eb:1a:cf:f5:9b:e0:ca:49:82:15:ec:5d:de:
e3:24:5f:67:eb:ef:ac:5d:2f:62:4a:6d:b0:bf:de:22:eb:64:
5f:4f:5c:e4:36:d3:98:c7:ad:c0:53:a7:0a:d9:0f:a1:f1:cc:
4e:9d:cb:5d:21:ab:b1:7a:73:f1:18:6a:4f:b1:11:48:ab:2b:
f3:fb:2e:69:79:06:b4:af:f6:f5:96:67:6e:26:98:66:a9:8d:
26:79:96:d8:d9:b9:a7:b7:f3:4d:90:a4:93:cf:70:7c:1c:c5:
ed:5b:5b:c7:05:e3:c0:e6:3b:ef:4a:37:70:d2:8c:27:9d:51:
29:d0:8a:26:5c:d9:5c:cf:d0:8b:3f:b8:1d:aa:05:81:2b:43:
2c:72:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 06:10:47 2024 by rpki-client on console-ams.rpki-client.org