Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HR_DLQbAf328dpqIZ2gXK0VBug8.roa
File: HR_DLQbAf328dpqIZ2gXK0VBug8.roa (raw, json)
Hash identifier: KcjTavhpyT52ioTu4CaOf6RmN2jyqNEUeLcwMlIpwvQ=
Subject key identifier: 1D:1F:C3:2D:06:C0:7F:7D:BC:76:9A:88:67:68:17:2B:45:41:BA:0F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01892661CDCE1B14F5CE851D63A0EBAC3F14
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HR_DLQbAf328dpqIZ2gXK0VBug8.roa
Signing time: Wed 05 Jul 2023 14:08:11 +0000
ROA not before: Wed 05 Jul 2023 14:08:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 263009
IP address blocks: 185.219.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:61:cd:ce:1b:14:f5:ce:85:1d:63:a0:eb:ac:3f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 14:08:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d1fc32d06c07f7dbc769a886768172b4541ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:64:a0:00:5f:f4:26:42:c6:c5:94:a7:00:
d7:e4:4d:1b:e3:cb:be:e5:fa:14:c7:38:5e:47:1b:
36:9b:4a:81:d4:31:86:b8:52:a0:f5:8a:dc:78:b5:
0d:e3:4d:4e:7c:e6:ad:a2:d4:2a:d7:c4:2c:50:5d:
b7:cc:e5:3a:16:0d:56:64:e9:52:03:28:6d:8d:76:
3b:26:96:fc:41:80:e5:58:e4:9f:e4:03:e3:bd:5e:
f6:a3:f9:28:19:02:b0:bb:8c:11:f0:7b:76:a0:df:
05:d1:0e:72:91:d4:f7:0b:aa:32:9c:37:c6:c1:f5:
04:4e:02:16:1a:d9:ce:51:3b:3b:f1:be:48:1e:fd:
73:91:51:0c:b3:29:47:72:84:30:4f:89:d1:95:1f:
a9:b0:25:2e:67:91:21:20:fd:75:2c:52:99:0a:b5:
05:5a:8d:23:b4:ea:d6:6e:7b:c7:52:40:9b:c4:63:
9d:63:d0:76:39:35:fc:b3:3e:a7:18:88:38:4e:a9:
a5:5f:95:45:60:89:fe:38:f4:20:fa:c4:ad:81:e1:
5b:9c:e2:ea:89:a8:45:e2:08:b1:26:f6:21:0e:54:
f1:e6:31:b4:80:7c:e2:b5:e4:b7:50:d1:05:49:57:
20:20:b2:eb:71:13:a6:8d:5f:78:4a:fa:72:02:77:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:C3:2D:06:C0:7F:7D:BC:76:9A:88:67:68:17:2B:45:41:BA:0F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HR_DLQbAf328dpqIZ2gXK0VBug8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.124.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b4:b8:62:89:ee:c1:10:af:fa:63:43:02:24:95:21:84:48:
31:86:d6:20:94:69:eb:44:67:36:b4:b3:b6:2e:7f:1f:de:05:
30:94:6c:25:89:67:52:e3:43:06:0b:b9:ff:02:ac:29:b3:13:
e0:6f:54:ad:9d:19:a3:29:40:98:9f:11:fe:a9:6c:a6:57:29:
27:53:86:fd:06:d9:fa:b2:4d:c9:da:19:48:1c:02:b4:4e:8b:
fb:bd:77:e4:85:57:7f:95:71:81:16:34:97:48:59:bc:69:6b:
aa:64:f9:67:4e:4b:57:ad:05:fa:51:3c:a5:94:44:2b:80:b0:
14:e4:9f:66:41:a4:72:ec:c1:1b:52:84:7e:96:ba:f7:3d:09:
fa:75:7b:92:8a:49:db:72:96:b9:54:e4:51:34:c8:b2:90:dc:
ec:9c:26:81:33:89:da:63:8c:f0:dd:cd:a9:c2:3a:f1:b4:f4:
09:57:97:72:5e:df:7e:82:2b:0f:fa:e5:d6:d6:25:d1:41:22:
20:0a:f7:cb:ed:ff:ea:1a:3b:6f:35:96:2a:18:cf:94:89:cb:
62:bf:dd:ab:4c:4b:1f:b6:83:23:2d:9c:b7:23:e4:64:b6:a3:
7b:5a:1a:7d:4f:a4:47:de:18:3a:70:22:41:ed:60:fe:53:8f:
e8:e4:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 12:57:58 2023 by rpki-client on console-ams.rpki-client.org