Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/HHSGgOaPWqw7tkaupAnmgEgJ7-4.roa
File: HHSGgOaPWqw7tkaupAnmgEgJ7-4.roa (raw, json)
Hash identifier: q3gaiilU50ITSZzicC5IVRmUm3DfhY7vaiV1/LRAn1E=
Subject key identifier: 1C:74:86:80:E6:8F:5A:AC:3B:B6:46:AE:A4:09:E6:80:48:09:EF:EE
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 018CC725FCC073A95789F1BCDEEB07B9F806
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/HHSGgOaPWqw7tkaupAnmgEgJ7-4.roa
Signing time: Mon 01 Jan 2024 22:30:04 +0000
ROA not before: Mon 01 Jan 2024 22:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209653
IP address blocks: 91.220.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 14:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:fc:c0:73:a9:57:89:f1:bc:de:eb:07:b9:f8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Jan 1 22:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c748680e68f5aac3bb646aea409e6804809efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:b5:58:8b:8d:36:52:e6:a4:31:32:53:80:
c6:d0:25:49:50:33:2c:36:14:f8:b3:6d:0e:27:d6:
8f:99:c0:bb:44:80:bf:f4:9f:32:db:32:6d:bf:31:
f6:c5:aa:d6:38:9c:de:a3:36:81:3a:e6:4c:e8:49:
b4:66:1c:1e:1f:e0:17:a8:f6:e5:5c:a3:65:fd:5d:
b2:4d:f5:5e:71:59:43:ca:e6:3f:de:1e:dd:c6:57:
3f:f6:42:a1:33:63:bf:89:b7:0d:5b:b8:6e:16:d8:
d6:13:df:5a:fd:06:41:7b:28:14:55:d0:5a:55:9b:
88:5c:5f:56:51:8d:74:99:80:f9:f9:28:4f:1c:aa:
d3:40:b2:cf:3b:54:61:bd:01:a7:3e:d2:8a:6b:44:
9c:b5:6c:a1:81:e6:9a:c4:e8:1f:5d:38:72:40:02:
e2:6c:e6:6f:4a:8d:0c:ad:b5:16:5b:39:e4:d1:f4:
76:a0:73:00:51:e8:46:4a:eb:6a:fa:4a:82:6a:92:
ec:b2:68:02:cd:75:c2:60:2c:40:8c:79:4e:10:12:
cb:63:ef:e6:d7:5c:7e:de:68:2e:8a:3a:c5:2f:59:
99:53:a2:96:75:34:c4:bb:cd:9e:64:93:a4:72:10:
cb:29:ee:cf:2f:aa:e7:ad:b7:bf:a2:a9:2b:89:e5:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:74:86:80:E6:8F:5A:AC:3B:B6:46:AE:A4:09:E6:80:48:09:EF:EE
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/HHSGgOaPWqw7tkaupAnmgEgJ7-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:75:38:0b:30:c3:8e:4e:22:1d:aa:ce:ab:30:9d:bb:6c:3d:
cf:da:e1:57:a5:a3:04:a5:be:66:f8:c7:ef:06:27:aa:97:79:
56:f4:2d:fe:88:94:3e:05:ad:e2:07:ae:ef:eb:48:bd:92:85:
a3:e4:a0:89:8c:e1:18:72:29:59:d4:0c:6e:18:fa:10:cf:62:
a6:ce:50:ef:08:ea:d7:1a:7f:16:50:d1:dc:8a:76:4b:bb:a8:
49:a3:52:e9:e2:6a:fc:13:28:5b:04:f4:9b:64:10:d6:2c:03:
56:79:ae:d9:7f:b5:c4:e0:58:47:5d:36:1f:56:32:0a:76:12:
86:71:a4:98:77:13:4b:e3:3a:10:90:1d:e8:2b:7c:cc:72:e6:
2d:18:be:c3:b3:b3:31:0c:21:df:ef:db:85:37:1d:16:8f:9f:
34:c5:42:ce:e0:40:a2:18:4b:d5:49:95:61:ce:74:46:55:6e:
c8:1c:7a:ee:88:27:a3:d6:5c:17:38:53:84:4f:51:35:0b:59:
90:8f:48:ee:7f:60:76:16:e5:3c:cb:70:72:da:a1:92:bc:66:
2c:73:b1:f1:02:ee:58:0a:f8:f4:ae:0c:b0:f3:86:00:87:78:
25:e2:9f:e6:92:42:dd:6d:a9:63:c1:14:d5:5c:ab:bb:33:10:
d7:8e:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 17:56:42 2024 by rpki-client on console-fra.rpki-client.org