Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HHNnRPofB7IfEDlZ-cTF9rJPdEQ.roa
File: HHNnRPofB7IfEDlZ-cTF9rJPdEQ.roa (raw, json)
Hash identifier: CpZbh8e1ZO8PdUJcUeCDxgMz7HRxWrSlrXG/xmhvyyg=
Subject key identifier: 1C:73:67:44:FA:1F:07:B2:1F:10:39:59:F9:C4:C5:F6:B2:4F:74:44
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E616EA73DE9C91944012D2ABDA7741514
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HHNnRPofB7IfEDlZ-cTF9rJPdEQ.roa
Signing time: Thu 21 Mar 2024 14:33:45 +0000
ROA not before: Thu 21 Mar 2024 14:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 81.161.239.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 06:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:6e:a7:3d:e9:c9:19:44:01:2d:2a:bd:a7:74:15:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 14:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c736744fa1f07b21f103959f9c4c5f6b24f7444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:d3:b8:bb:d6:ff:66:48:0d:6f:74:bf:ac:
6e:65:74:16:1a:81:f8:0c:eb:80:75:9c:84:a3:9f:
82:90:47:3a:10:87:bb:3e:0e:d4:a9:7f:19:f8:1a:
6b:48:ac:63:88:90:63:91:a0:0a:48:50:57:84:1e:
45:b1:a7:ab:21:69:b7:61:8f:0b:5f:4d:a3:63:1d:
2d:d6:15:62:c1:12:69:1f:ee:5c:47:ce:c3:f3:fc:
34:94:72:8c:04:a6:d6:90:de:a6:fa:cb:7b:8f:a4:
a9:1a:01:d9:12:00:9a:6c:18:66:f6:40:ac:5e:88:
60:39:f2:28:40:48:fd:15:8b:0b:1b:7e:69:92:16:
ef:1e:65:62:a1:f4:60:b4:80:23:8a:0a:03:2d:fc:
cd:a7:7a:98:1a:df:fa:88:8c:4c:8d:8e:a9:15:3e:
4b:a8:b0:f4:0b:2d:87:d5:e0:33:ad:98:44:39:6e:
fd:52:6a:22:5e:1f:20:3b:b0:df:96:12:db:87:44:
20:cb:b3:67:c8:8a:15:67:07:fd:df:5d:03:c9:5c:
93:69:ae:aa:bf:f5:14:e3:93:f9:89:6a:6c:28:c9:
99:24:3b:b8:06:f0:f4:b3:52:ca:31:22:f4:cc:db:
d8:b5:d0:bf:fa:0c:42:2d:df:aa:6b:5f:15:8e:96:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:67:44:FA:1F:07:B2:1F:10:39:59:F9:C4:C5:F6:B2:4F:74:44
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HHNnRPofB7IfEDlZ-cTF9rJPdEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.239.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8f:26:0d:e6:c4:1a:be:53:ba:4c:ae:43:4b:f4:3f:52:01:
1e:81:83:57:57:a6:03:0a:b7:cb:1a:62:51:cc:27:03:1f:37:
0f:4d:ef:09:21:51:fe:fc:b4:37:b6:ef:f4:89:6c:19:ad:b2:
c3:c0:c9:35:df:da:96:62:ed:82:b6:bb:d2:05:e2:f3:49:0c:
9f:0d:e9:52:e9:3d:30:ab:0c:f9:49:0a:f1:36:69:93:2a:6a:
74:f2:01:ab:bd:1d:44:06:69:1f:f9:26:d2:f2:b3:a1:86:a9:
4b:1a:a1:2a:71:a4:f4:a1:09:30:f2:35:66:28:18:b5:41:35:
71:6e:72:dc:ac:fb:91:13:b7:f3:c8:36:6a:48:e4:cb:12:63:
09:0a:65:53:8e:6d:f6:3f:84:b9:f4:8c:80:0c:d4:aa:09:7d:
93:99:9f:c5:82:66:ce:7e:72:82:96:da:4c:15:26:53:4a:99:
8f:35:08:1f:0e:33:cd:61:83:2a:00:5d:7b:1f:29:4e:01:b9:
11:34:6d:7a:be:bb:9c:d5:9d:a9:36:2d:5f:00:a3:d6:11:ce:
a8:a5:22:8a:7e:1e:38:eb:bc:cd:c6:aa:e5:ac:3d:ff:2a:2a:
b1:89:c6:0a:85:2b:a4:0b:36:f0:75:8c:01:1a:14:4e:28:8c:
0b:0c:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 07:44:25 2024 by rpki-client on console-ams.rpki-client.org