Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hq4fqEfRI9jD1uZz64LWRnHOckU.roa
File: hq4fqEfRI9jD1uZz64LWRnHOckU.roa (raw, json)
Hash identifier: jc0pMgmEf43NI7Eq6bXmIrpcSqHL3qf90p1Fnjw1tVo=
Subject key identifier: 86:AE:1F:A8:47:D1:23:D8:C3:D6:E6:73:EB:82:D6:46:71:CE:72:45
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019001033E8D283DBC0CD08EB26A8DA1B3BF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hq4fqEfRI9jD1uZz64LWRnHOckU.roa
Signing time: Mon 10 Jun 2024 07:18:28 +0000
ROA not before: Mon 10 Jun 2024 07:18:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215998
IP address blocks: 193.25.216.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 15:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:03:3e:8d:28:3d:bc:0c:d0:8e:b2:6a:8d:a1:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 10 07:18:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86ae1fa847d123d8c3d6e673eb82d64671ce7245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:d1:1d:a3:9b:19:98:c7:b8:60:20:94:fe:
5e:69:2c:59:a5:ee:0b:88:41:f1:c4:e9:59:28:6d:
a0:f7:30:12:a1:f6:17:df:91:c5:f8:45:f5:89:29:
93:3f:d4:45:d8:c9:f4:ef:71:7c:8d:d7:34:5a:3e:
6c:b7:08:76:68:5b:98:bf:32:e3:51:4a:b9:54:cf:
d8:20:58:fb:83:1c:d0:86:45:7d:9e:0a:ec:77:30:
27:83:ef:11:fa:04:77:1e:bd:3a:82:18:52:e4:22:
e9:c0:a0:7d:c4:7d:de:c7:da:6a:8c:37:49:de:4b:
6e:0b:8a:a5:3e:a0:83:82:f9:0c:7c:1d:dd:09:2b:
22:fe:a7:82:6f:2d:36:f7:5d:8c:68:f9:47:55:7a:
8b:80:8a:6c:97:61:aa:9d:31:20:e0:78:6d:85:9f:
13:29:e3:31:45:d1:a8:be:3b:3c:40:71:b4:38:b8:
cb:b3:bb:ad:69:e8:09:69:c9:97:cf:97:46:b5:53:
f2:e0:74:10:5d:e5:d9:71:6a:f0:a1:e1:59:34:39:
63:15:0d:85:64:e5:4d:55:39:30:a4:6d:8e:78:21:
ff:29:9a:57:ae:e1:fb:02:e8:68:01:57:5d:79:df:
8e:97:17:7f:f5:57:48:d4:47:ab:18:e9:e0:6d:5d:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AE:1F:A8:47:D1:23:D8:C3:D6:E6:73:EB:82:D6:46:71:CE:72:45
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hq4fqEfRI9jD1uZz64LWRnHOckU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.216.0/24
194.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b8:93:88:ad:ce:b1:28:1e:0c:89:4a:c9:1d:98:ad:76:35:
e3:0a:b9:a1:8a:cf:ec:94:ea:4a:0e:43:51:f1:5e:03:a5:16:
82:15:4d:1d:67:95:9e:a2:49:0d:c3:c4:a0:18:25:e5:c1:0c:
fb:b0:fa:78:dc:fd:f5:52:a7:a3:53:7d:c9:f7:72:ef:b1:83:
ab:2a:c3:e1:96:4b:bd:61:ac:b2:62:42:fe:ce:7a:bb:d9:6d:
4d:e6:98:01:3d:7b:01:8f:b1:b1:94:4a:d4:70:4e:48:1c:2f:
5c:47:6a:a4:81:d2:0d:68:00:99:78:bf:79:e8:20:3f:c7:a4:
31:c7:00:99:2a:56:4a:c4:45:ca:bd:32:26:00:f0:a6:99:eb:
58:e0:89:20:8e:31:2a:09:7c:2a:01:43:14:96:6b:5f:46:4e:
ce:a5:ef:a1:fd:96:8d:2c:a9:d9:94:a6:d4:4a:57:e2:5e:6d:
ed:88:27:cb:6d:2c:48:e5:1e:bd:53:82:73:de:75:99:88:11:
28:ab:87:f0:e9:15:7c:77:10:29:d1:61:2f:9e:b4:73:f7:fb:
a8:81:a8:34:2b:21:fd:e2:7e:67:67:73:57:4d:d2:f6:1c:43:
23:2d:d4:3a:a0:03:a9:41:05:fc:e6:37:a2:40:8c:ee:a9:23:
fd:e1:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 19:58:12 2024 by rpki-client on console-fra.rpki-client.org