Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/HYELamnuMapwzyYYuY3MZw6kA6U.roa
File: HYELamnuMapwzyYYuY3MZw6kA6U.roa (raw, json)
Hash identifier: mCG5lUC8TidmqHmz55sOQKSgcszMkStjxqBh89UQSjk=
Subject key identifier: 1D:81:0B:6A:69:EE:31:AA:70:CF:26:18:B9:8D:CC:67:0E:A4:03:A5
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0186A28AC74CC6FE3335EDDA060B5A5FB71D
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/HYELamnuMapwzyYYuY3MZw6kA6U.roa
Signing time: Thu 02 Mar 2023 13:37:29 +0000
ROA not before: Thu 02 Mar 2023 13:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39102
IP address blocks: 212.232.64.0/20 maxlen: 20
77.239.224.0/19 maxlen: 19
92.62.48.0/20 maxlen: 22
94.229.96.0/20 maxlen: 20
46.19.184.0/21 maxlen: 21
213.21.0.0/19 maxlen: 19
188.65.64.0/21 maxlen: 21
213.21.48.0/20 maxlen: 20
95.161.100.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:8a:c7:4c:c6:fe:33:35:ed:da:06:0b:5a:5f:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Mar 2 13:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d810b6a69ee31aa70cf2618b98dcc670ea403a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:0c:a4:10:5f:bb:19:9b:c3:b9:eb:10:3d:
41:bd:77:62:3a:1c:2a:93:78:ca:2f:bf:e4:c1:28:
6e:b4:37:42:eb:f2:4b:24:9d:06:60:c7:53:f3:35:
df:1d:4b:df:a5:88:03:01:49:ae:cc:8a:56:ea:6d:
37:f2:30:cc:14:82:2d:12:aa:85:2a:40:6f:ca:3a:
b1:2c:2d:9e:08:ff:9b:99:ce:67:dd:3b:33:c4:59:
e5:bb:90:0f:6e:19:4c:a5:78:85:60:a1:ad:14:b8:
10:ae:ec:0f:43:67:b5:9c:81:a2:ed:7e:fc:26:4e:
9a:e3:fb:84:64:a2:f7:90:83:92:c8:d2:2c:92:7f:
48:81:d7:83:6e:95:3f:68:0e:1a:1d:9b:5e:27:36:
b3:0f:08:e1:b5:86:2b:21:44:f8:e3:12:6f:4b:a3:
f3:34:32:a7:27:e7:18:2f:83:bc:4e:eb:93:54:25:
7b:91:b5:05:d5:38:0e:b6:e1:d6:41:0d:4d:e8:ea:
89:ec:63:d8:84:89:64:33:b5:70:e1:ba:d3:fe:df:
f8:b9:ed:65:c5:ab:55:22:f7:b0:9b:d8:ee:7d:10:
a7:4f:c3:2b:05:44:5c:f1:f5:da:49:48:67:f4:51:
6d:19:e5:bd:b9:5d:4d:40:48:e3:da:43:d7:5d:33:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:81:0B:6A:69:EE:31:AA:70:CF:26:18:B9:8D:CC:67:0E:A4:03:A5
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/HYELamnuMapwzyYYuY3MZw6kA6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.184.0/21
77.239.224.0/19
92.62.48.0/20
94.229.96.0/20
95.161.100.0/23
188.65.64.0/21
212.232.64.0/20
213.21.0.0/19
213.21.48.0/20
Signature Algorithm: sha256WithRSAEncryption
13:bd:40:9a:c7:72:53:75:f3:0f:b3:7d:e8:8f:8e:a5:82:97:
b5:0b:c6:a0:ce:0d:1d:d0:0d:e0:b2:e7:de:6a:49:b0:bf:8d:
86:68:38:31:65:a9:31:ae:35:dd:c6:fe:5c:1b:ab:4b:57:89:
70:e1:4a:cb:f8:7b:56:c2:30:8a:d9:28:25:6f:86:5d:3f:4a:
55:01:53:b5:7f:e7:a4:f3:2f:97:87:f7:81:80:81:ac:7f:ea:
09:2f:d5:bd:b9:c2:68:9f:7e:16:6f:22:2e:17:2f:7b:5e:7c:
c4:ce:d3:39:10:16:6a:62:86:2e:18:de:13:47:60:c1:95:f5:
40:ef:6f:e0:ab:23:69:21:8e:34:e6:ac:90:10:69:6b:4e:90:
ac:5f:de:e5:9a:1a:24:dd:c5:a7:dc:cd:5f:e6:18:52:ab:06:
e4:ec:73:6b:02:00:ca:0d:15:84:32:2a:d1:1e:dd:31:b8:fc:
d7:0b:1f:70:6b:c8:16:e7:ac:22:dc:3a:36:51:7d:ce:a0:bd:
db:7a:47:e9:05:a9:e5:04:e1:bd:53:1c:8f:f1:c3:3a:c7:c7:
54:34:f7:4a:34:58:45:ae:11:6f:a8:8e:af:57:63:65:22:f1:
6e:09:e6:64:ca:9a:21:df:26:43:41:a0:8a:92:3d:32:ba:dc:
59:07:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:16 2024 by rpki-client on console-fra.rpki-client.org