Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/HHZeQp1ePleyX28zsUQEScD93qI.roa
File: HHZeQp1ePleyX28zsUQEScD93qI.roa (raw, json)
Hash identifier: 28x+5484+sh80CDkLKr1lSr6O9C3s6nrZxJlayYO58s=
Subject key identifier: 1C:76:5E:42:9D:5E:3E:57:B2:5F:6F:33:B1:44:04:49:C0:FD:DE:A2
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 01856D8AAC168AD00C8FA649B7D1CB8D4E7D
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/HHZeQp1ePleyX28zsUQEScD93qI.roa
Signing time: Sun 01 Jan 2023 13:34:42 +0000
ROA not before: Sun 01 Jan 2023 13:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56730
IP address blocks: 188.114.112.0/24 maxlen: 24
185.53.92.0/22 maxlen: 22
188.114.112.0/21 maxlen: 21
95.131.80.0/21 maxlen: 24
185.164.44.0/22 maxlen: 22
134.0.16.0/21 maxlen: 21
91.227.26.0/24 maxlen: 24
2a03:b980:200::/40 maxlen: 40
2a03:b980::/32 maxlen: 32
2a02:ef8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Dec 2023 12:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:ac:16:8a:d0:0c:8f:a6:49:b7:d1:cb:8d:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jan 1 13:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c765e429d5e3e57b25f6f33b1440449c0fddea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:0b:21:aa:6b:4f:80:c9:09:96:b7:d3:12:
b3:0f:ad:70:5e:69:be:6e:bd:65:72:7e:d8:44:bf:
07:8a:15:2a:37:81:97:ce:14:91:c7:0a:71:d2:6d:
24:b7:82:c5:66:5c:d4:db:3b:af:59:59:a6:11:fd:
32:73:ff:24:cf:6f:47:49:7d:fc:e6:b6:ca:7d:d7:
21:65:ab:2e:37:02:b8:e7:f4:2d:b8:75:1d:1b:95:
33:0a:df:29:cf:e9:a6:9f:14:00:e8:74:43:3b:6f:
3f:ab:c9:fa:56:54:6a:92:a9:33:21:54:70:ea:00:
e0:19:a5:49:29:ea:77:85:b9:18:07:59:b6:96:b8:
23:4d:3c:a8:84:a1:f3:4e:94:f5:48:16:ad:61:67:
a0:56:cb:46:c9:1f:7b:6b:63:48:14:04:e4:48:83:
f4:2e:cb:d7:b3:55:f7:cb:2a:e3:99:97:7b:c3:d7:
ef:ea:25:15:26:39:6a:c2:7d:5f:5d:c2:c2:46:9a:
21:f1:44:88:59:60:2a:f4:d8:4b:5c:c2:ac:78:c3:
36:d3:d8:68:8e:1f:a4:c0:33:35:7b:ff:71:db:ad:
2f:52:4f:3e:63:77:c6:74:8f:e8:55:f9:da:af:59:
dd:5e:f3:31:1b:46:29:a2:fa:0d:70:52:f7:2c:81:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:5E:42:9D:5E:3E:57:B2:5F:6F:33:B1:44:04:49:C0:FD:DE:A2
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/HHZeQp1ePleyX28zsUQEScD93qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.26.0/24
95.131.80.0/21
134.0.16.0/21
185.53.92.0/22
185.164.44.0/22
188.114.112.0/21
IPv6:
2a02:ef8::/32
2a03:b980::/32
Signature Algorithm: sha256WithRSAEncryption
12:e1:c9:dc:10:52:73:06:5b:45:c0:6f:8c:39:c5:c7:6e:48:
71:9c:60:36:cb:46:74:8d:8f:a6:ec:b7:21:aa:d5:17:6f:17:
1d:30:f7:a2:0e:40:d2:b3:86:8f:be:1d:c6:81:96:51:70:82:
13:c5:76:ee:89:87:4b:5e:4d:7c:c1:13:c6:22:be:e2:09:a1:
e5:42:7b:e9:35:8d:fe:09:aa:c7:88:65:a4:c4:af:42:ad:12:
6e:aa:1f:49:00:cb:54:ee:1e:16:64:f8:68:0e:e0:fe:ab:4c:
1a:42:de:53:40:45:0b:9e:dc:95:c3:4c:60:89:26:b4:5f:cd:
68:28:16:32:4d:8d:e5:d1:ee:fe:ff:aa:6a:8d:ca:66:ff:5d:
50:07:24:8d:8b:78:20:11:ab:a2:77:78:c5:8b:53:72:8f:e7:
d6:85:b9:35:be:78:16:0c:e0:a1:0e:f8:cd:ba:a7:3a:2e:c8:
0b:e6:1c:29:b0:44:7e:ca:27:f8:c3:b3:87:b6:85:16:91:a8:
21:0b:c5:4f:fd:da:90:3a:2c:43:c3:bd:fe:8e:57:b7:a0:76:
75:4d:0f:5c:94:7d:9f:5b:13:91:81:71:67:7b:9e:ba:00:7d:
bd:39:7f:88:d6:b9:d5:f1:58:1b:45:ce:c3:fb:a8:88:38:69:
ce:50:bf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org