Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/HjG-LJpFldulW8O7ziGz20uEBrU.roa
File: HjG-LJpFldulW8O7ziGz20uEBrU.roa (raw, json)
Hash identifier: AE//w9gtxoFyf0lAW0yvDyCfvCIMkyQUCjt0x82qFCM=
Subject key identifier: 1E:31:BE:2C:9A:45:95:DB:A5:5B:C3:BB:CE:21:B3:DB:4B:84:06:B5
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 018926B51C16D838336A99AEF73FDA0C77A3
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/HjG-LJpFldulW8O7ziGz20uEBrU.roa
Signing time: Wed 05 Jul 2023 15:39:10 +0000
ROA not before: Wed 05 Jul 2023 15:39:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56803
IP address blocks: 185.195.71.0/24 maxlen: 24
91.201.56.252/32 maxlen: 32
91.201.56.247/32 maxlen: 32
2a05:ad00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:b5:1c:16:d8:38:33:6a:99:ae:f7:3f:da:0c:77:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jul 5 15:39:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e31be2c9a4595dba55bc3bbce21b3db4b8406b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:6d:af:2e:78:0f:32:e2:94:7b:70:b8:a7:
d2:96:10:cf:8b:30:a0:26:b5:e7:21:98:27:b6:74:
29:ff:fd:8a:ba:fb:c2:6d:36:ff:70:f2:aa:30:2e:
12:19:40:02:4c:6a:8e:13:d9:f3:ba:2a:66:e9:34:
93:6e:63:8c:c9:68:02:7c:46:12:e8:00:2a:8a:fc:
90:18:f4:d6:cf:cc:47:f1:dd:15:87:1b:9a:ac:4d:
e6:fd:b9:5c:ad:d4:05:a5:88:0f:eb:cf:fb:a9:1e:
1f:6d:cb:46:17:33:ca:15:df:01:6b:98:f0:1c:30:
18:13:48:2f:e4:30:4a:cf:fc:80:80:39:9d:cc:9d:
9c:72:47:3c:51:07:1a:fb:bd:a2:58:d8:fc:43:4f:
d9:2b:89:15:dc:a8:e1:9b:a5:2c:d4:17:5e:0c:ff:
2e:82:99:4b:5e:df:4e:00:ba:47:0a:d2:42:d3:35:
a6:6d:fd:6b:8c:e0:30:93:46:78:8a:54:fd:98:29:
77:d2:c3:86:a1:d5:cf:0f:35:df:d3:8a:0f:9c:4d:
b2:a3:04:d9:04:83:e8:f2:57:b3:23:0a:d0:31:4a:
69:64:54:9f:68:b4:47:9f:e8:f1:71:0f:0f:3e:36:
c9:cd:e5:06:55:50:8b:32:31:2a:4c:ca:d2:10:b0:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:BE:2C:9A:45:95:DB:A5:5B:C3:BB:CE:21:B3:DB:4B:84:06:B5
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/HjG-LJpFldulW8O7ziGz20uEBrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.56.247/32
91.201.56.252/32
185.195.71.0/24
IPv6:
2a05:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
9b:46:6d:ff:56:83:af:ee:a5:d4:9e:1e:02:c3:43:ff:8a:d7:
ca:59:55:43:32:ec:89:25:ad:75:f2:6b:be:a5:25:1d:fa:4c:
0f:87:1a:c9:77:71:c9:01:93:e6:f6:7c:9c:ac:1d:8e:cf:64:
b9:30:d4:df:5e:1c:30:4d:88:cc:9e:32:44:a4:78:a4:77:ea:
4d:63:62:4e:96:23:45:62:c3:0a:d0:b1:ca:1b:3c:77:7a:c7:
8e:a3:26:8c:b6:9f:2b:a1:30:ce:2b:96:9d:8b:62:15:b9:8f:
dc:b3:c2:ae:74:72:15:f8:9d:17:50:06:5e:f6:75:10:c5:4e:
de:19:39:b3:15:37:de:87:2c:81:81:1d:a3:39:e6:28:f4:59:
c4:b8:4a:35:f0:f4:1c:0b:15:94:6a:a3:c6:ee:b6:42:1c:7c:
05:d5:58:29:ea:28:5d:d8:b6:bf:72:c2:75:2d:b3:da:c1:39:
ba:ed:45:dc:a8:90:72:65:c3:da:a5:5b:b4:4e:83:7c:21:cf:
03:e2:f0:c3:7f:60:6a:76:c2:42:bb:94:97:81:42:96:34:67:
eb:d8:28:81:ec:84:a5:71:45:ce:3d:9e:19:7f:5e:65:1c:7c:
05:85:dc:57:92:46:80:d7:5e:23:87:2e:f0:71:0e:13:be:d7:
f8:4c:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:03 2024 by rpki-client on console-ams.rpki-client.org