Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hm4dKlhV6obFDBXs1p9fVHD5C3Q.roa
File: hm4dKlhV6obFDBXs1p9fVHD5C3Q.roa (raw, json)
Hash identifier: OxaFEHaguFh9PWSG/jbtimmhPhJY4zHTzhD3CDeUY0E=
Subject key identifier: 86:6E:1D:2A:58:55:EA:86:C5:0C:15:EC:D6:9F:5F:54:70:F9:0B:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F5D7D325DC2ADF03D9A6D414BAFA68853
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hm4dKlhV6obFDBXs1p9fVHD5C3Q.roa
Signing time: Thu 09 May 2024 13:13:57 +0000
ROA not before: Thu 09 May 2024 13:13:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.132.0/24 maxlen: 24
192.145.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 11:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:7d:32:5d:c2:ad:f0:3d:9a:6d:41:4b:af:a6:88:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 9 13:13:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=866e1d2a5855ea86c50c15ecd69f5f5470f90b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:f9:8f:91:83:0b:0c:1c:49:46:64:9d:74:
14:a8:3f:3d:3a:71:ab:41:9f:c2:9c:71:16:a3:6f:
44:09:f6:aa:2b:2a:db:0f:0b:42:4d:96:01:1f:4f:
7b:47:c0:02:50:9e:e1:1a:c5:10:58:58:b2:a4:8e:
b9:e3:be:b1:50:a7:f9:52:50:02:79:fe:2f:13:b1:
b5:33:e4:be:f2:fb:62:01:00:8d:b6:ef:3c:fc:f9:
50:47:6a:84:ce:b0:3c:f0:d7:0b:13:a0:d2:e7:ce:
79:dd:2e:9e:b1:35:59:cd:12:38:99:d5:32:49:5c:
a4:04:bb:97:78:b1:e6:ee:43:63:8b:fd:1d:9e:d4:
cc:32:67:ac:df:4f:a7:7f:5d:2a:fa:d4:e3:9a:3d:
49:0b:a4:71:e4:fd:54:3d:7f:bc:c4:dc:37:42:04:
24:e8:0c:6a:e9:2e:fd:a8:5e:9c:ce:75:8d:72:33:
14:06:4c:66:fd:68:03:d0:c8:29:a2:96:57:85:1a:
1d:6e:61:88:a8:b9:6c:5b:26:d4:70:13:65:2a:56:
aa:f7:1e:5b:79:25:90:4a:6b:4a:3e:dc:81:e7:ec:
07:85:61:01:a1:30:d9:2a:59:74:2b:03:e3:80:e1:
0b:1a:92:16:b0:18:89:c5:e3:a6:9d:36:e2:94:a1:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:1D:2A:58:55:EA:86:C5:0C:15:EC:D6:9F:5F:54:70:F9:0B:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hm4dKlhV6obFDBXs1p9fVHD5C3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
192.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:96:01:0c:d1:62:7e:09:c3:a4:00:6d:ce:3a:f7:8f:d6:d6:
a2:f4:d4:b8:24:65:d8:77:8d:f1:7a:e5:21:f1:59:d0:0e:51:
fc:5b:a8:c5:fc:e2:5c:b0:6e:dd:cf:02:f9:e3:c4:7e:83:c6:
9a:20:ae:82:63:b6:aa:e7:2c:1c:b4:e0:f5:35:a6:49:0b:97:
6e:04:d3:6d:01:21:62:52:7e:a9:00:29:e6:23:ef:65:b7:00:
cf:e3:42:4e:ba:02:23:a6:b0:eb:76:dd:3d:f5:64:56:70:99:
de:54:35:33:09:36:82:eb:bb:7b:87:95:ac:c1:9d:9b:94:ff:
94:80:3e:fa:d7:61:c8:19:1b:3b:37:3b:eb:e7:68:08:50:c3:
06:16:67:d1:2c:c7:4a:dd:40:c2:2f:fe:8b:b8:e8:b3:5a:3e:
10:f7:f6:a1:77:47:09:c5:57:a7:3e:45:06:48:a5:4c:4b:f8:
c5:7b:8e:8e:26:06:21:d9:b8:7a:22:06:c1:b5:4f:54:97:f8:
12:e2:d3:b7:29:90:c1:6f:94:ed:b2:e3:61:b1:5c:f5:75:fd:
37:78:8f:e0:12:73:da:66:e3:60:79:03:f3:f9:95:77:bc:6f:
74:f2:81:45:ba:a2:e9:ab:9a:43:97:bb:f1:4f:3d:f4:6e:61:
a7:88:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:17 2024 by rpki-client on console-fra.rpki-client.org