Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/HxpK-AXLW1aulsBmruHl7EsChw0.roa
File: HxpK-AXLW1aulsBmruHl7EsChw0.roa (raw, json)
Hash identifier: dUqyedLJAWi/+R8HUU/nbc55tnoFMqg2CtBWDzaiWbU=
Subject key identifier: 1F:1A:4A:F8:05:CB:5B:56:AE:96:C0:66:AE:E1:E5:EC:4B:02:87:0D
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01856DDD277F89C67DB8159D1BA2BE061C4C
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/HxpK-AXLW1aulsBmruHl7EsChw0.roa
Signing time: Sun 01 Jan 2023 15:04:47 +0000
ROA not before: Sun 01 Jan 2023 15:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9066
IP address blocks: 213.252.128.0/18 maxlen: 18
62.89.160.0/19 maxlen: 19
212.68.64.0/19 maxlen: 19
2a01:ac00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 Mar 2023 06:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:27:7f:89:c6:7d:b8:15:9d:1b:a2:be:06:1c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 15:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f1a4af805cb5b56ae96c066aee1e5ec4b02870d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:9c:f8:cb:59:36:f6:3b:dd:c6:95:15:1b:
f4:82:e5:72:3c:1b:b4:b3:3c:e5:e1:09:1f:d3:34:
01:cc:67:80:e0:f7:9a:d9:06:ca:d0:79:f7:93:a5:
61:9a:9a:a1:23:c7:1a:67:1b:de:4b:cc:62:dc:41:
28:ad:12:02:12:f3:4c:a1:b3:4a:62:a9:bd:b2:92:
ec:a1:1e:06:a6:e8:36:0d:10:5c:6c:dc:89:47:37:
a3:60:6b:af:f9:93:88:bf:c0:d9:f4:ee:0f:5f:70:
d5:c1:f5:de:66:89:ec:ac:03:6e:fa:31:1f:6f:0a:
8e:78:e7:48:84:70:f6:c3:42:7c:f7:ad:91:1a:ab:
e2:9d:67:6c:1f:8b:6b:ec:f7:23:bd:02:48:59:dc:
45:e9:20:ad:cb:7c:1c:95:6f:37:ff:ef:d0:ab:1e:
f0:fd:f7:2f:81:16:47:ac:ad:8f:91:85:99:31:67:
1f:03:88:4f:1f:37:43:2c:59:36:01:50:0b:84:ec:
50:e6:c1:8f:7a:cf:69:3b:89:22:e0:0a:17:37:59:
ec:92:fb:de:c6:55:5a:4f:10:a0:2c:38:5f:7f:9b:
d6:ce:4f:3f:30:94:59:60:7d:7f:97:4c:f5:a3:84:
68:75:1f:9d:b6:16:ef:30:3e:ef:6c:6e:99:46:8e:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1A:4A:F8:05:CB:5B:56:AE:96:C0:66:AE:E1:E5:EC:4B:02:87:0D
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/HxpK-AXLW1aulsBmruHl7EsChw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.160.0/19
212.68.64.0/19
213.252.128.0/18
IPv6:
2a01:ac00::/32
Signature Algorithm: sha256WithRSAEncryption
9b:6b:23:bc:b2:ac:c0:35:06:e8:c9:2e:c3:d6:9d:e2:b7:74:
89:d5:9f:2a:e7:c2:4a:cb:10:fe:6e:aa:03:fc:56:16:33:f2:
b6:bf:16:88:c6:44:8e:3a:db:e4:5c:1a:78:8d:18:30:79:ae:
c5:56:f7:1f:05:c4:50:57:8f:aa:6f:d8:1e:aa:98:0d:a2:6b:
3b:8c:91:9b:3b:a3:e5:3a:1d:ea:ac:46:1d:ef:89:25:a7:86:
87:2e:92:64:e5:d8:56:39:7d:11:cf:2e:44:1d:f6:62:be:87:
5d:fc:fd:37:88:cf:cf:68:f4:95:f4:c6:29:a3:50:ed:8f:c9:
3d:1a:d4:f0:1e:0c:1a:95:bd:8a:35:94:a3:54:c3:09:ba:bf:
6d:c8:ae:7d:be:2e:8e:cd:db:61:0c:03:79:06:17:aa:35:1e:
03:8b:cd:f6:b7:5a:29:e1:f0:77:51:b4:08:da:86:88:8c:cd:
e2:5d:7d:58:b9:d1:53:ae:5c:02:d2:83:79:31:19:ae:f8:75:
09:d8:e2:59:79:92:ef:2b:b8:1d:b0:63:71:92:25:b6:be:3e:
75:dd:7d:b3:4c:bb:2c:7c:7c:6e:65:19:87:e0:7d:8f:c9:21:
b5:82:77:5c:99:a3:c6:57:90:77:e2:16:8a:97:e5:1c:47:04:
c7:38:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org