Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HLFvQp5OTvl5Pfi2GoXZQJFtKhs.roa
File: HLFvQp5OTvl5Pfi2GoXZQJFtKhs.roa (raw, json)
Hash identifier: CI2k2nkcxjsJrZpXur5ibXQ/+KqoQORbuVBtHdpeG54=
Subject key identifier: 1C:B1:6F:42:9E:4E:4E:F9:79:3D:F8:B6:1A:85:D9:40:91:6D:2A:1B
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018D1CE78793C85AE083FC47D2F6215A0B3A
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HLFvQp5OTvl5Pfi2GoXZQJFtKhs.roa
Signing time: Thu 18 Jan 2024 14:09:11 +0000
ROA not before: Thu 18 Jan 2024 14:09:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.130.54.0/23 maxlen: 23
45.138.2.0/23 maxlen: 23
213.185.90.0/23 maxlen: 23
213.185.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 19 Feb 2024 12:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:e7:87:93:c8:5a:e0:83:fc:47:d2:f6:21:5a:0b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 18 14:09:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cb16f429e4e4ef9793df8b61a85d940916d2a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:f9:08:64:ba:bb:f6:3f:37:c5:64:71:be:
a5:fa:4b:93:9e:ce:a4:13:3f:4e:b8:5a:90:cb:a8:
9c:d6:b7:df:34:9b:4e:64:fe:3b:ed:85:26:2c:eb:
3b:76:70:55:50:be:16:1b:dc:ca:4d:3e:2d:65:d4:
0f:6b:0f:78:54:69:24:5f:fd:73:a8:28:ab:c4:d4:
98:1a:ed:bd:26:69:ca:11:a2:8a:13:6d:fa:a3:be:
5d:c0:0a:c4:79:da:60:13:42:1c:f5:a7:6f:b0:ce:
72:23:19:53:32:b3:0f:c1:54:c0:ed:a2:45:35:df:
f6:5f:b5:66:9f:74:c3:d7:7a:bd:de:0a:db:e2:41:
58:01:eb:cb:2d:40:6a:c9:80:69:23:be:21:69:9d:
52:d1:b5:86:e0:21:e2:56:2d:64:29:e4:77:f5:76:
f2:32:bc:ec:e0:6a:f5:58:7b:dc:4a:52:28:ef:50:
85:6a:27:c0:74:3e:e8:06:1b:fa:b2:d1:6e:d3:5b:
65:72:da:d0:5f:aa:f7:9a:be:33:02:ae:37:40:db:
50:52:8f:af:2e:61:7a:91:b1:26:cb:4f:ea:79:93:
ef:0f:1d:68:20:ee:ed:8f:40:39:2a:60:d4:3e:92:
26:0a:75:04:32:5c:07:f8:ce:27:dd:7c:10:fb:a8:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:6F:42:9E:4E:4E:F9:79:3D:F8:B6:1A:85:D9:40:91:6D:2A:1B
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/HLFvQp5OTvl5Pfi2GoXZQJFtKhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
213.185.90.0/23
213.185.94.0/23
Signature Algorithm: sha256WithRSAEncryption
54:a4:65:df:4a:60:30:ba:30:59:76:cd:96:f3:9e:63:37:71:
a9:e5:12:68:9c:71:4f:90:7f:c1:b3:28:5a:c0:70:67:34:64:
0b:13:0e:dc:b3:ed:3a:de:2d:b3:ee:5c:e2:31:26:0a:6f:2e:
48:eb:fa:3b:89:2a:78:de:cf:29:2b:01:6a:7a:f9:57:54:1d:
35:6e:38:6f:5e:8d:a3:96:ce:6d:5e:7e:17:fc:31:60:6f:09:
cd:af:67:67:ff:c7:73:fe:d1:f1:f7:3e:fa:ea:ff:c7:5a:5e:
8a:aa:aa:79:35:16:9d:e3:b5:88:9b:70:89:25:56:1d:5a:9e:
ec:35:7f:0f:73:8d:5d:1f:60:c9:2e:6c:f2:0f:62:24:57:e6:
39:82:be:a7:fd:68:1b:d7:9d:38:09:76:b4:c0:7a:17:22:c4:
da:b9:67:30:e3:6a:f8:3a:4c:2b:71:fc:9c:e8:96:72:d8:8f:
be:49:2b:a2:73:8f:a9:87:0d:63:af:16:7d:dc:6a:22:2a:6a:
dd:69:ba:9e:72:46:9c:b9:f0:17:c0:13:a8:af:3f:70:ed:c9:
41:88:28:61:04:f1:ef:57:0e:38:73:4c:96:60:62:d1:70:93:
ec:c5:ab:31:af:c9:7d:20:a5:0a:e8:b3:a8:74:b0:55:fc:3a:
21:ff:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org