Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HPG0mnpbYUAPhNEgs2U2WlV8lBs.roa
File: HPG0mnpbYUAPhNEgs2U2WlV8lBs.roa (raw, json)
Hash identifier: DOSOGxJxlG2Qeb7BT4DpNTR3Gn8ZqUeghlVh0LALIao=
Subject key identifier: 1C:F1:B4:9A:7A:5B:61:40:0F:84:D1:20:B3:65:36:5A:55:7C:94:1B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCFA15A56B26ACF0CEDFA5DCB6E38C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HPG0mnpbYUAPhNEgs2U2WlV8lBs.roa
Signing time: Tue 02 Jan 2024 06:29:34 +0000
ROA not before: Tue 02 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199605
IP address blocks: 171.22.31.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:fa:15:a5:6b:26:ac:f0:ce:df:a5:dc:b6:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cf1b49a7a5b61400f84d120b365365a557c941b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:3e:0c:8d:fe:49:59:fc:b0:2d:e8:e6:05:
ae:df:8e:d1:67:d3:6b:09:f0:0e:29:0c:6e:8a:8d:
3c:36:c6:50:93:f0:4a:ff:11:3b:3e:0f:72:08:6e:
92:3e:01:15:35:d6:b1:5b:db:b9:01:0c:c6:6c:a2:
2c:3f:64:a1:2f:58:de:d6:6b:d0:c6:24:b7:2a:2d:
53:bf:90:7f:b7:a1:9f:5c:a6:cf:b9:6e:ce:d5:d2:
11:44:d0:d8:29:84:9a:7a:6b:3d:7b:f2:2c:2c:06:
4c:6f:75:03:f0:af:59:c1:04:02:3c:72:6b:33:96:
6b:5f:ae:62:81:88:66:3a:b5:cd:43:55:8b:48:d6:
db:9e:ed:05:36:39:04:3a:0a:ad:20:ed:ea:8d:6b:
6f:52:64:d5:61:05:60:e8:17:14:ac:5f:6a:71:ef:
e6:dc:1c:3f:4b:34:fa:16:e7:45:12:b8:d2:e8:ae:
ce:23:fb:d9:5b:a4:79:8c:c3:bd:ec:1e:da:b4:a8:
2a:0b:5c:0b:18:5f:7c:9f:c0:28:92:72:42:00:9a:
d4:11:48:db:40:04:bc:95:44:9e:ee:01:b2:47:7b:
05:30:ed:54:2f:ba:09:1c:70:5a:c9:15:5d:cc:a3:
85:ab:bb:70:38:bf:5a:01:1a:f3:7d:ef:16:15:b7:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:B4:9A:7A:5B:61:40:0F:84:D1:20:B3:65:36:5A:55:7C:94:1B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HPG0mnpbYUAPhNEgs2U2WlV8lBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
171.22.31.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:4c:8a:be:84:d5:b8:b8:ac:8e:38:5e:c9:c2:23:9b:65:40:
39:93:ef:b5:bd:8d:85:86:70:ce:fc:d5:f2:7b:f0:93:86:1a:
93:9d:b9:03:0c:2e:3b:e1:55:3b:3c:97:7e:5f:f7:d3:06:43:
06:a0:67:d5:01:e9:81:99:98:97:6a:1a:51:30:53:23:ee:df:
5b:e2:76:19:0e:11:d5:c1:18:f5:ca:50:ee:e9:2a:92:96:cf:
1f:eb:47:ec:e5:9b:c5:f2:0c:49:85:51:1f:7c:1e:7f:a3:d6:
17:b4:48:64:66:21:ab:3c:e7:de:eb:0c:8d:2b:f8:f3:54:63:
7a:90:2d:8a:cb:d5:bc:3f:68:91:46:fa:4d:66:35:9c:ac:3e:
cd:c4:33:24:43:4a:dc:a3:d0:5d:ba:38:72:a4:11:88:b5:1d:
95:9e:12:f6:e6:5b:c8:7c:4e:20:05:cf:14:3d:4c:c8:f3:87:
51:5c:38:bd:47:7e:1f:35:89:30:9b:49:f1:09:64:c9:79:81:
f3:83:bd:c7:3e:a3:c2:fe:b1:45:34:46:a3:b8:3d:66:62:3c:
be:82:93:67:d0:a2:1d:59:0c:ad:15:0d:0a:39:8e:c7:0b:37:
de:3f:5b:30:ca:1a:6e:00:92:65:b2:cf:3f:1d:7e:32:3d:cc:
df:2e:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:13:14 2024 by rpki-client on console-ams.rpki-client.org