Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/hggJ1sOA15iZmeCkrb7g0PeBHVA.roa
File: hggJ1sOA15iZmeCkrb7g0PeBHVA.roa (raw, json)
Hash identifier: Y+yg2YzUmaTyvU7GJZIjb9OKI5Q1JYWcB/7XVpXNc0s=
Subject key identifier: 86:08:09:D6:C3:80:D7:98:99:99:E0:A4:AD:BE:E0:D0:F7:81:1D:50
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 0185714C2C5CA495FC11A6A78C2733837D25
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/hggJ1sOA15iZmeCkrb7g0PeBHVA.roa
Signing time: Mon 02 Jan 2023 07:04:55 +0000
ROA not before: Mon 02 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59788
IP address blocks: 185.44.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 15:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2c:5c:a4:95:fc:11:a6:a7:8c:27:33:83:7d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jan 2 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=860809d6c380d7989999e0a4adbee0d0f7811d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:07:f0:2a:e2:2b:6c:7e:d9:f2:3e:44:c8:
96:b8:bc:f1:c6:40:67:2d:f4:0c:8b:51:07:ae:88:
a3:99:69:3d:5b:e8:2a:5a:08:62:99:f9:15:51:af:
a3:07:ed:f8:4a:a8:cd:82:51:90:25:7b:4a:95:55:
a5:6a:bd:c2:19:d2:5f:a2:e5:e5:2e:dd:dd:2d:77:
8d:c5:c0:e5:7a:83:40:1e:6b:81:0a:bf:93:52:f7:
87:47:bb:71:a5:0e:59:e3:ce:9a:c6:e5:62:ab:1b:
ea:0b:76:6f:6c:a6:ef:0a:3a:e3:10:f5:ee:44:55:
b3:61:5b:d4:81:ce:c2:d0:b6:15:14:04:b7:82:5f:
f2:27:3c:81:3b:17:34:10:ff:d8:95:ee:ac:37:f5:
e7:1d:c7:fa:71:a5:e2:7f:32:dd:1a:55:86:e0:6a:
08:48:b9:5c:fc:a3:df:8a:7f:e4:cd:b2:86:ca:1c:
04:f5:66:90:e8:38:90:6f:71:01:33:36:57:36:f5:
cd:0f:08:45:29:46:d5:92:b0:90:fb:86:62:0c:8d:
de:9b:58:bd:fc:35:3b:47:c3:20:eb:46:0d:d1:c8:
2c:db:e9:70:7e:f4:23:c0:e0:bf:3d:33:f7:02:06:
40:1c:9d:23:6d:a6:f4:97:1b:ea:ee:f0:db:06:c6:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:09:D6:C3:80:D7:98:99:99:E0:A4:AD:BE:E0:D0:F7:81:1D:50
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/hggJ1sOA15iZmeCkrb7g0PeBHVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:13:5c:be:90:5b:17:49:19:45:28:14:7b:c2:b4:4a:df:69:
3f:68:2c:63:d0:18:76:a6:d7:c6:47:56:1b:bd:d9:dd:10:ca:
0c:a2:4f:fa:2e:c7:d0:a8:0c:3b:56:6c:37:94:03:c4:6e:4f:
11:9b:77:ba:65:20:cc:b2:20:18:1f:df:a7:f8:92:15:48:78:
b3:a6:32:77:a2:21:12:a8:3c:50:10:04:4b:aa:f6:1c:38:cc:
7e:bd:84:9b:05:92:5d:e0:98:58:58:5e:34:1f:7e:af:b6:a7:
2c:74:ed:96:1b:c0:1f:8e:9a:83:7d:13:b7:f8:5c:35:48:19:
5b:e4:5c:52:a2:5f:9f:85:b1:c0:63:03:d3:02:32:2c:4f:5f:
ae:52:d9:f3:5f:85:9f:b0:b8:46:04:e1:7a:7a:85:e0:7d:c3:
2e:11:0f:72:4c:25:a8:02:b0:9d:b4:0c:97:4f:a6:07:5c:52:
ec:4d:b8:7c:21:e3:48:29:5b:79:ad:f9:09:7a:e1:ab:cc:46:
03:7d:00:d6:a6:25:d6:8b:3c:ce:d0:4b:f8:d8:fc:b4:95:fc:
b3:e2:a9:23:a2:f6:a4:e3:83:8a:b8:49:d1:79:5b:1a:60:c0:
a1:2c:26:d6:25:d1:c3:9c:d1:16:f0:17:4a:e2:5d:e2:06:07:
9c:aa:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:54 2024 by rpki-client on console-fra.rpki-client.org