Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HupcXCDNrHccJZXQw6bWnvL_3J8.roa
File: HupcXCDNrHccJZXQw6bWnvL_3J8.roa (raw, json)
Hash identifier: bljS/j7v6qDq2v64l6br8dQMBWE/Z9bYJHPTQn5vpjw=
Subject key identifier: 1E:EA:5C:5C:20:CD:AC:77:1C:25:95:D0:C3:A6:D6:9E:F2:FF:DC:9F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BB510C88A455E89FAE7A462F9F3B4A129
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HupcXCDNrHccJZXQw6bWnvL_3J8.roa
Signing time: Thu 09 Nov 2023 17:10:57 +0000
ROA not before: Thu 09 Nov 2023 17:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209193
IP address blocks: 185.216.69.0/24 maxlen: 24
185.207.12.0/24 maxlen: 24
83.171.206.0/24 maxlen: 24
185.147.102.0/24 maxlen: 24
185.147.103.0/24 maxlen: 24
185.147.100.0/24 maxlen: 24
185.147.101.0/24 maxlen: 24
83.171.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:10:c8:8a:45:5e:89:fa:e7:a4:62:f9:f3:b4:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 9 17:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eea5c5c20cdac771c2595d0c3a6d69ef2ffdc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:a2:64:d1:65:f8:3d:96:3e:27:fc:b4:c1:
c9:fe:83:63:60:3d:e2:08:b7:7b:49:2f:b6:8f:c9:
a2:12:9f:07:9b:a1:87:0c:b5:88:9a:88:21:b9:f3:
5c:8d:a6:b7:21:16:6d:01:f3:28:98:04:17:45:de:
f6:81:b2:40:f6:7b:88:3b:03:22:9c:f3:d6:cb:e6:
4b:b4:3e:e1:b7:45:ef:44:68:77:89:c3:a9:da:9e:
7f:92:7f:23:96:23:52:06:b9:75:9c:16:3b:fc:0a:
ea:da:60:35:c9:c6:52:53:f6:0b:7a:6e:ba:fc:72:
f3:7a:68:36:ea:eb:3e:14:b5:d6:28:bc:c8:8e:fb:
89:6d:4b:63:c6:92:ea:e5:2a:eb:9a:7f:5e:3f:a4:
03:4a:5c:b9:12:48:b0:53:62:03:ed:8b:03:07:ab:
4f:76:05:e1:10:f1:3d:fb:c9:3b:60:30:25:64:c6:
56:0d:7c:cf:55:26:2b:96:48:18:8d:d2:46:9e:24:
1c:23:b4:88:06:d3:44:b0:00:e4:f9:fc:b9:93:da:
23:d6:ee:10:75:51:68:51:f9:d8:28:80:62:17:29:
42:e2:10:22:31:3b:ac:17:a5:9b:62:be:eb:6c:7c:
a5:4c:bb:7c:99:f3:02:49:c7:3e:7a:99:53:de:26:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:5C:5C:20:CD:AC:77:1C:25:95:D0:C3:A6:D6:9E:F2:FF:DC:9F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HupcXCDNrHccJZXQw6bWnvL_3J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.206.0/23
185.147.100.0/22
185.207.12.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:48:b9:06:78:60:74:85:67:ca:39:9a:f0:5d:8e:d3:a1:30:
e2:63:bb:25:8d:f4:a6:d4:80:c3:f0:f2:8e:70:01:3b:5d:bd:
88:78:97:bc:fa:87:22:46:7b:81:e9:d0:f5:d8:e7:00:cf:3c:
d2:21:25:b7:c9:49:db:77:4e:f9:d4:da:84:e8:e8:65:06:c4:
81:27:f3:f4:f0:3c:0a:14:1f:8b:d7:e8:bc:6c:a0:f1:f5:a1:
e4:0c:28:08:59:66:00:22:c3:20:b6:e0:e4:6a:a9:e6:4e:f1:
9c:bf:65:a8:78:9d:c3:d5:5b:4a:d0:da:c8:1a:d3:5d:f0:d4:
9b:96:6a:ad:27:d5:8d:51:16:77:7f:90:09:cf:48:78:0b:b0:
1e:dc:5d:16:89:03:ee:c8:c5:20:b3:75:13:96:c1:bf:d1:cf:
4c:b7:be:7b:84:10:26:2f:b2:cf:75:d7:55:79:31:f1:30:09:
71:35:7b:b9:5b:72:0a:a6:35:ea:bd:ec:d5:d7:09:40:5c:b0:
9b:28:eb:94:0e:e2:52:ae:d4:a4:35:d9:da:b4:13:82:b1:07:
29:e4:b1:8a:6c:e9:2a:62:c2:75:7f:81:f1:7a:18:f0:97:80:
ab:9a:50:ff:ed:70:86:34:8a:85:1b:99:d7:20:9f:67:db:71:
3a:d3:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:29 2024 by rpki-client on console-ams.rpki-client.org