Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/hl0jnaXt3av_4aAkVHtKqY9xsE0.roa
File: hl0jnaXt3av_4aAkVHtKqY9xsE0.roa (raw, json)
Hash identifier: +oD4T98WrTm2MVyrMy4UHoV/sSUKe2SYNAL2z+r4Xc4=
Subject key identifier: 86:5D:23:9D:A5:ED:DD:AB:FF:E1:A0:24:54:7B:4A:A9:8F:71:B0:4D
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 01879D9F6390BAD663489F55C738102004E3
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/hl0jnaXt3av_4aAkVHtKqY9xsE0.roa
Signing time: Thu 20 Apr 2023 07:44:41 +0000
ROA not before: Thu 20 Apr 2023 07:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48213
IP address blocks: 185.135.236.0/22 maxlen: 22
213.232.226.0/24 maxlen: 24
2a07:980::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:9f:63:90:ba:d6:63:48:9f:55:c7:38:10:20:04:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Apr 20 07:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=865d239da5edddabffe1a024547b4aa98f71b04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:e3:82:f2:94:37:7c:06:34:1a:14:d5:d7:
6d:1b:78:62:59:46:55:70:a5:68:ee:d5:ae:ac:21:
79:aa:e2:28:2d:84:bc:57:96:e2:31:96:67:66:db:
8b:83:ea:f6:17:3b:d4:06:75:42:59:79:7a:4f:33:
25:98:fa:da:bf:0e:7b:f9:50:a5:56:84:fa:ab:68:
23:ba:38:13:3a:5c:ba:e4:fa:85:d5:f3:11:cb:74:
19:83:b0:aa:37:58:4a:b4:31:5e:5f:08:92:b8:e1:
db:01:50:75:46:9a:3c:3e:5e:ca:c7:f5:3b:c6:80:
5b:7c:31:23:56:04:4f:84:55:da:54:b0:64:33:f7:
bb:b6:f4:46:e7:c9:82:81:c0:ec:0f:00:ea:83:a4:
17:fd:85:4d:ef:2e:d9:ad:f3:3f:b6:b3:56:c4:f4:
d4:f3:bf:7b:ec:c9:28:55:a7:55:ad:5c:33:1f:8e:
f8:bb:0e:cc:95:80:b8:44:31:18:31:6d:4a:97:df:
41:cf:b8:03:0b:67:99:0a:fb:1f:9b:0f:2d:c8:4e:
dd:82:24:da:e7:79:ac:87:95:4e:99:58:27:29:e6:
67:22:87:58:18:88:63:8e:04:d2:41:a1:4d:79:d8:
7f:f0:c6:64:1e:96:e8:26:ac:5f:ee:59:6b:9b:18:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:23:9D:A5:ED:DD:AB:FF:E1:A0:24:54:7B:4A:A9:8F:71:B0:4D
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/hl0jnaXt3av_4aAkVHtKqY9xsE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.236.0/22
213.232.226.0/24
IPv6:
2a07:980::/29
Signature Algorithm: sha256WithRSAEncryption
41:c7:43:e1:3f:bf:1e:7c:9c:09:96:9f:ad:0e:a7:66:e0:55:
f9:e9:02:09:b6:32:91:b5:e9:fe:2b:8c:e3:b6:45:fe:1e:32:
01:4f:23:21:56:30:70:c5:4a:50:0f:76:16:f5:06:95:4c:94:
e3:7b:db:ab:7c:12:9b:0d:d1:c9:04:cf:89:70:10:6d:ab:2f:
f1:65:58:76:0b:1c:91:23:1e:42:fb:c3:36:b4:93:4b:cb:b9:
e1:08:c4:06:05:11:f0:07:f8:46:8c:ab:75:6a:47:14:80:88:
26:c4:cd:de:ef:3f:4a:dd:a2:6c:85:16:8b:10:ec:85:78:3a:
85:b5:d4:49:18:37:2f:eb:43:c8:fe:fe:33:49:e6:8f:f0:93:
42:be:93:42:35:e4:7c:ed:c5:3f:2b:b8:b1:16:bb:91:23:ba:
3b:33:1b:c8:4c:88:83:c1:cc:4f:aa:17:28:01:23:94:84:4a:
fb:bf:a5:bb:1b:94:fb:dc:54:bf:06:55:1c:77:f9:2f:06:d6:
8e:2e:b4:e9:8a:46:7d:ca:cf:44:a5:f2:4d:1e:27:b1:86:54:
b5:0c:e9:16:1f:64:63:e1:2e:0f:bb:23:9d:6c:68:26:54:b5:
81:7f:53:62:16:c1:f5:2d:37:11:df:bc:de:73:6d:7a:19:66:
b9:e2:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org