Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hu725E3yCxZma-_DaNOVA4ZxpdQ.roa
File: hu725E3yCxZma-_DaNOVA4ZxpdQ.roa (raw, json)
Hash identifier: MnKyiVdiop4wNxw14OaffVdP+DRe2MBtdsTWJXn44YY=
Subject key identifier: 86:EE:F6:E4:4D:F2:0B:16:66:6B:EF:C3:68:D3:95:03:86:71:A5:D4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F95C14EBAC23FA189E8FD76F05DC48FC2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hu725E3yCxZma-_DaNOVA4ZxpdQ.roa
Signing time: Mon 20 May 2024 11:27:04 +0000
ROA not before: Mon 20 May 2024 11:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 45.129.86.0/23 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 10:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:c1:4e:ba:c2:3f:a1:89:e8:fd:76:f0:5d:c4:8f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 20 11:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86eef6e44df20b16666befc368d395038671a5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:8e:a1:27:aa:ec:9f:c2:df:da:b9:31:47:
b6:03:cd:7d:4a:6b:a7:3d:0d:35:d6:cd:0c:35:db:
53:66:f5:53:00:7a:a5:d3:60:3d:6d:b5:bb:38:8a:
f5:a0:8f:1d:1b:8f:7c:39:b1:3a:d8:64:12:bd:bb:
17:f9:f5:23:69:da:d9:ca:0c:4b:94:65:db:f8:80:
ef:12:82:17:3f:78:88:ae:a6:e9:f5:f7:d2:40:a6:
1e:9e:de:25:c9:83:98:46:4f:da:b7:54:2a:55:8d:
12:29:e4:9c:34:c8:a6:23:1f:cc:e4:87:21:cc:46:
5b:3b:51:26:db:36:1a:fe:7e:82:fa:17:c3:f9:3c:
a7:c8:03:2e:40:a5:4f:14:91:5c:79:10:ef:ec:34:
67:96:20:13:97:7a:1a:ba:7e:0b:8d:94:62:fa:be:
e1:17:a2:df:98:14:44:59:f3:06:43:bc:d0:43:3e:
03:6a:42:60:04:e3:d0:07:cd:b7:f6:06:65:21:a9:
04:11:2a:ea:f7:63:a1:71:ce:4a:ce:62:fc:ac:e1:
7b:36:8a:39:e1:c8:e1:27:a5:0e:76:7a:79:3c:bf:
94:a3:8e:2e:1b:4f:ba:f4:9d:84:91:ec:3a:6e:90:
cf:d1:dd:1c:20:53:15:42:68:b0:b1:56:16:2b:98:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EE:F6:E4:4D:F2:0B:16:66:6B:EF:C3:68:D3:95:03:86:71:A5:D4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hu725E3yCxZma-_DaNOVA4ZxpdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.86.0/23
82.115.211.0/24
94.154.161.0/24
171.22.31.0/24
185.252.176.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b2:7d:30:bf:78:5c:f3:c2:78:08:e9:6f:25:4d:f1:45:d2:
13:86:1a:16:7a:f0:79:7f:24:d4:36:f9:8e:ca:ab:54:2d:31:
a6:b5:f0:f9:4d:96:f6:4c:cd:62:9c:66:f3:9f:88:aa:d9:af:
58:ee:b7:46:57:a1:77:f5:67:df:33:15:16:bf:c8:73:a2:7a:
24:c6:37:0e:07:78:62:9b:7e:75:82:8e:00:f7:bf:94:8a:f8:
00:46:f2:d9:97:0b:f6:42:a8:69:80:94:e9:ac:21:e1:e5:d7:
f5:d6:ad:48:52:91:4a:48:d7:b9:71:45:6c:22:4a:97:a1:09:
ae:09:40:15:8d:04:e9:20:c9:de:27:e6:97:08:aa:8e:0d:99:
af:e1:f3:07:bb:ee:6c:28:8e:b8:e6:ba:0a:c1:42:59:0e:6e:
cf:6b:35:d0:b7:2b:ce:40:72:1d:66:36:d4:14:08:9c:93:f3:
a9:0c:6c:87:42:7c:c9:db:3a:9a:3c:eb:98:1c:57:eb:98:92:
b3:67:86:de:bb:f4:f7:14:04:bc:cd:99:6d:12:c5:1a:6c:1b:
d5:23:be:69:38:e8:87:6a:f7:1d:ff:4b:5c:ca:68:65:48:37:
70:c4:0f:f4:6e:8b:a8:b3:5e:f9:b8:d0:0f:56:7f:e6:18:bb:
b5:9b:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:17 2024 by rpki-client on console-fra.rpki-client.org