Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa
File: HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa (raw, json)
Hash identifier: HAY6b+RScChQDdRP/a/aCNFQZDMHjkOHhg+32jPa1Hk=
Subject key identifier: 1C:70:53:22:33:65:90:1C:BD:1E:06:E2:98:EB:3B:63:7C:C3:D0:A0
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 018BDDBE59F27BB2F43D0C90FDAE68864CFE
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa
Signing time: Fri 17 Nov 2023 14:45:21 +0000
ROA not before: Fri 17 Nov 2023 14:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.76.115.0/24 maxlen: 24
194.76.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:be:59:f2:7b:b2:f4:3d:0c:90:fd:ae:68:86:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Nov 17 14:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c7053223365901cbd1e06e298eb3b637cc3d0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:e5:57:98:a7:f1:dd:06:c6:78:1f:9d:7a:
6f:5f:99:7a:30:cb:28:71:03:bb:fe:6b:ad:26:90:
cd:0f:ee:5d:2c:3e:64:60:8d:a2:7f:27:93:05:e3:
19:9e:eb:21:1d:b5:d1:4f:6c:8d:e6:c8:4b:ae:d0:
f7:78:0d:e9:5f:48:1f:32:df:9f:be:d0:15:78:c1:
24:ee:3c:89:e5:3f:d0:f2:75:c6:7f:0b:9b:cc:fd:
92:a1:d8:db:c7:f3:d2:4d:69:4a:24:08:ab:5f:f5:
15:99:e1:aa:74:53:98:bb:9a:1d:8b:78:51:67:c3:
ce:e6:b3:22:c2:98:27:0c:d8:ea:14:6b:55:71:69:
c1:d7:bd:ba:56:19:5a:29:88:ad:11:03:aa:32:69:
b2:cc:d8:1f:68:a0:99:f1:7a:57:1c:93:f1:b5:ab:
a1:e4:06:30:ac:46:53:e7:39:4b:eb:b9:ee:fc:42:
d1:4b:13:36:10:47:44:b4:96:98:98:79:58:8a:cb:
fd:01:73:27:13:13:0d:d7:20:74:c0:3f:3e:b8:cd:
d2:2b:53:97:43:ac:15:3a:e9:48:99:07:e4:38:ff:
53:b8:43:ad:5e:0a:84:81:2f:7b:83:c9:61:a8:d2:
f6:76:3f:18:be:d5:76:8d:b1:cc:17:73:84:e2:80:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:53:22:33:65:90:1C:BD:1E:06:E2:98:EB:3B:63:7C:C3:D0:A0
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.114.0/23
Signature Algorithm: sha256WithRSAEncryption
58:0e:16:48:d0:fc:77:3d:b5:28:b6:a8:4b:c4:ee:29:c1:95:
38:df:75:dd:7b:e1:fa:a9:75:d2:c3:39:26:f6:82:79:73:e1:
f4:7c:69:1a:15:57:b1:e1:48:b8:1c:a2:03:97:d5:52:0e:e3:
77:3b:11:f0:e4:06:15:8d:e2:b2:99:84:48:d8:ee:25:84:46:
d4:19:10:39:ef:bd:9f:c3:7e:d7:ce:a8:e3:22:03:15:b7:08:
e6:d1:2e:12:b0:7d:a0:e2:88:56:5f:18:61:0b:7a:05:3a:10:
08:4b:51:e9:ca:0b:e5:ec:83:c3:16:60:a6:2f:3f:8e:f7:12:
53:28:29:29:39:af:b6:a8:ce:94:ac:96:f4:c7:71:a8:32:85:
10:ab:53:24:d9:eb:93:4e:d3:0e:10:52:86:e6:47:f7:99:63:
ea:d1:eb:b3:c7:81:44:00:df:e1:51:da:65:e7:bf:b2:79:f8:
a0:d6:8a:f4:48:44:f6:84:dc:20:36:79:31:86:b9:af:ab:30:
8a:4b:e9:6b:83:b6:3c:45:e3:3d:42:c9:e6:51:1e:03:cd:85:
ba:45:fc:f1:ee:8d:99:85:3a:d1:84:d9:02:68:aa:d3:db:06:
29:f1:2e:00:bb:8e:79:b1:06:29:d6:77:92:6f:90:d9:17:0a:
e9:89:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org