Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/hmaisB1ffrK9tx3QFiQCib9vX5Y.roa
File: hmaisB1ffrK9tx3QFiQCib9vX5Y.roa (raw, json)
Hash identifier: oDJOWGtuGiwrMRuYACtj3oGIzgtPy2EGam2zMBDEqN0=
Subject key identifier: 86:66:A2:B0:1D:5F:7E:B2:BD:B7:1D:D0:16:24:02:89:BF:6F:5F:96
Certificate issuer: /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial: 01856FCB8DEA6FC76BC99F5C33670B81DA08
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/hmaisB1ffrK9tx3QFiQCib9vX5Y.roa
Signing time: Mon 02 Jan 2023 00:04:49 +0000
ROA not before: Mon 02 Jan 2023 00:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20900
IP address blocks: 176.111.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8d:ea:6f:c7:6b:c9:9f:5c:33:67:0b:81:da:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Validity
Not Before: Jan 2 00:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8666a2b01d5f7eb2bdb71dd016240289bf6f5f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:ff:2d:dc:a8:d8:c8:3e:d8:62:3d:85:fe:
20:5a:a8:5e:ca:73:cb:7b:d5:0a:ed:44:56:cc:b3:
60:cd:2a:85:c5:42:c8:36:6f:d0:36:41:da:8b:0d:
19:98:38:19:4c:97:51:a6:eb:72:a0:38:23:e7:20:
14:ce:94:8c:76:42:82:1d:72:16:70:ab:0c:04:1a:
60:0d:d7:5c:0b:9a:95:2d:92:be:74:dc:1d:97:b8:
0f:d4:08:20:11:2a:7c:2e:c8:88:bf:0a:6b:37:a2:
c5:35:50:82:c9:94:3c:a4:ef:60:82:c5:5e:a8:e5:
c7:00:2e:a4:13:c3:b3:5c:50:ab:b5:6c:39:e3:b9:
d8:b5:05:4d:2c:77:7c:bf:7c:02:27:e4:6f:b8:4b:
51:eb:78:aa:c5:77:de:01:c8:74:54:d7:43:4f:f0:
3c:41:99:0c:88:0a:ba:78:f6:a1:69:18:15:f0:e4:
c9:dc:23:12:08:f3:a4:c5:07:a6:e0:a2:92:ff:00:
28:f0:8b:98:93:a9:9c:14:09:90:d3:5a:bc:f2:ec:
7f:53:5a:11:da:8e:a2:66:44:a3:14:7f:36:a7:8e:
a9:61:4e:26:35:56:a9:5f:16:c5:35:29:f5:cb:4d:
74:2c:7d:f0:1f:89:7f:df:48:39:a4:c8:9d:5a:fc:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:A2:B0:1D:5F:7E:B2:BD:B7:1D:D0:16:24:02:89:BF:6F:5F:96
X509v3 Authority Key Identifier:
keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/hmaisB1ffrK9tx3QFiQCib9vX5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.246.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d5:25:84:3c:d0:fe:42:5e:93:ac:c2:66:f8:ea:c3:db:86:
77:fb:ed:06:57:4c:8c:08:a8:e5:eb:bc:99:b7:be:3c:25:bd:
2f:dc:64:bd:6f:e1:5e:be:05:7a:94:3f:3f:1c:3f:89:c2:9b:
d6:b3:94:6d:23:4e:7e:f2:c2:80:3e:91:f8:f6:31:9a:fd:8b:
a2:1b:04:b3:34:c8:1c:48:60:47:5c:1a:cb:96:83:ad:cd:c8:
83:41:54:81:19:1a:cf:db:ee:21:b9:43:02:88:0c:e2:c7:e1:
c2:d9:a4:00:6f:fc:9b:94:66:f3:13:95:56:53:01:ee:a8:a7:
59:3a:20:ce:a1:93:de:b6:b5:06:50:94:48:ba:27:24:75:65:
97:14:30:28:c0:57:eb:62:20:2c:e6:d1:a1:58:89:d2:75:3c:
d4:96:6c:9c:09:72:4c:19:09:66:33:e1:33:26:91:32:0e:81:
02:fd:2e:cd:91:43:af:af:ba:31:2b:b5:8a:6d:25:82:d0:04:
27:74:95:c7:f5:33:2d:5e:f4:94:be:18:1e:31:19:9f:bb:e5:
31:9b:e0:dd:e3:37:1b:3b:5a:34:20:c2:5d:d2:5d:6c:64:8a:
2d:ab:91:a0:75:23:18:61:1c:56:8b:3e:5b:23:eb:df:37:6c:
e5:15:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:58 2024 by rpki-client on console-fra.rpki-client.org