Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/hJkqkwrw8POyRNBoukOvO_A2hFU.roa
File: hJkqkwrw8POyRNBoukOvO_A2hFU.roa (raw, json)
Hash identifier: EFUWV6o4owunnO0z0JxK9F3ooWUU3f8vRva0yYcfN+w=
Subject key identifier: 84:99:2A:93:0A:F0:F0:F3:B2:44:D0:68:BA:43:AF:3B:F0:36:84:55
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF8141038F8898CC49F1479F11F040
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/hJkqkwrw8POyRNBoukOvO_A2hFU.roa
Signing time: Sun 01 Jan 2023 15:24:50 +0000
ROA not before: Sun 01 Jan 2023 15:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209314
IP address blocks: 148.81.12.0/24 maxlen: 24
148.81.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:81:41:03:8f:88:98:cc:49:f1:47:9f:11:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84992a930af0f0f3b244d068ba43af3bf0368455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:39:f0:5f:65:19:e9:09:ab:71:2c:26:74:
77:6c:e2:4e:a8:63:5d:50:8e:d9:b0:10:5d:5c:92:
a6:6f:d0:38:bc:38:52:9f:23:17:5d:1b:0c:3f:42:
d3:bd:89:df:a5:ff:97:78:c0:26:e4:f8:c2:02:7d:
40:8d:78:cd:5e:36:74:0c:ef:47:bb:66:7b:b7:ca:
76:ea:36:26:99:04:fc:93:46:52:1a:0f:01:4c:1b:
a8:25:86:89:45:15:13:7b:e7:00:82:96:e3:44:af:
2d:2d:90:4e:b4:cc:b0:85:ee:5a:0a:3f:3e:94:a0:
f6:15:3f:25:bc:a9:73:1b:da:3c:ac:ed:ea:38:f1:
1c:bc:4a:cf:64:83:f1:20:7b:61:06:34:b6:50:e8:
4b:e4:31:7a:fc:04:10:de:29:f8:94:c2:80:1b:a0:
4d:29:a9:c1:f7:cb:bb:fb:d6:c5:2d:9b:ce:c5:45:
be:65:a1:93:6d:cb:c5:9d:e4:a7:6f:e0:c6:08:12:
3f:fa:2b:32:ed:de:e5:17:d5:d9:1e:bb:db:4f:41:
88:ea:46:96:00:26:d5:8e:74:d3:b6:1a:02:d2:f3:
29:d3:a2:1f:4c:1c:33:9d:55:8d:3a:92:26:79:d7:
b8:99:22:1d:42:27:84:b1:ad:f3:54:7e:47:96:a6:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:99:2A:93:0A:F0:F0:F3:B2:44:D0:68:BA:43:AF:3B:F0:36:84:55
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/hJkqkwrw8POyRNBoukOvO_A2hFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.11.0-148.81.12.255
Signature Algorithm: sha256WithRSAEncryption
3a:a2:a3:11:06:1a:b6:43:9c:89:d7:e6:04:43:65:3b:31:b8:
07:b1:7f:84:f4:1d:99:02:82:13:a7:51:43:4c:e3:a2:3a:76:
5b:56:c4:7f:16:52:2d:85:7c:1d:e6:cf:95:5c:d0:69:77:15:
a9:f4:10:07:91:ed:c7:64:da:3f:1b:2d:1c:9b:6f:1a:f2:87:
77:22:42:3c:be:4b:33:6f:d6:9a:0d:ab:af:90:02:ed:36:8f:
b5:9b:25:de:37:a1:4d:15:a3:77:1d:a6:18:f9:b9:e0:e2:61:
28:42:6d:6f:cd:c2:b5:c5:65:60:b0:b9:7d:88:bd:a8:9b:69:
35:e8:1b:cc:40:eb:f7:7e:85:ec:d0:3a:fa:1c:2e:19:fe:1e:
f3:d3:8d:b9:a8:1f:4e:4f:54:fb:34:ce:c9:9a:4d:70:4d:5e:
6d:39:f6:6a:46:ce:6c:95:e2:9e:3c:4c:fc:18:a8:f9:cb:78:
95:3b:76:14:0d:a0:5a:12:1e:14:37:1e:b1:1e:17:cd:82:e9:
8a:1f:0a:24:5a:92:dd:5d:d7:fe:28:f8:90:a5:1d:49:e8:5e:
d9:c5:74:61:37:5a:4f:2d:0d:1b:92:3c:57:8f:54:3e:87:23:
47:70:8f:32:e5:95:9e:29:57:d1:aa:c1:da:e5:00:96:a3:48:
f5:38:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org