Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/hyw2cL-lKMgotOHasFdYZCRQkgA.roa
File: hyw2cL-lKMgotOHasFdYZCRQkgA.roa (raw, json)
Hash identifier: roEJ8QK156P3kxc2cvqzWEMOXmqROrx2j0OQMy75AJQ=
Subject key identifier: 87:2C:36:70:BF:A5:28:C8:28:B4:E1:DA:B0:57:58:64:24:50:92:00
Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5
Certificate serial: 01856FA6F1C00C7682FC480CFFD45A4FF703
Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/hyw2cL-lKMgotOHasFdYZCRQkgA.roa
Signing time: Sun 01 Jan 2023 23:24:49 +0000
ROA not before: Sun 01 Jan 2023 23:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206293
IP address blocks: 195.62.44.0/23 maxlen: 23
91.198.163.0/24 maxlen: 24
185.20.188.0/22 maxlen: 22
194.6.226.0/24 maxlen: 24
194.9.10.0/23 maxlen: 23
91.195.140.0/23 maxlen: 23
2a00:4fa0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f1:c0:0c:76:82:fc:48:0c:ff:d4:5a:4f:f7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5
Validity
Not Before: Jan 1 23:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=872c3670bfa528c828b4e1dab057586424509200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:cf:7e:e1:97:4d:25:b0:81:10:54:f0:c6:
f8:59:b9:f2:39:4f:9b:1e:48:4a:3b:d4:bc:ce:56:
2f:dd:e3:3a:8d:f4:64:1f:e2:a2:8f:bf:d4:7d:05:
7a:79:5f:b4:56:59:31:bb:d7:4a:00:cf:e0:58:a5:
79:fc:f6:48:21:3f:22:2c:c2:af:2f:d4:dd:cc:b2:
69:d7:d1:66:b1:1e:f4:85:b2:65:92:da:64:84:d7:
4c:2c:b8:8b:4f:76:20:37:af:1d:fd:f4:78:8d:7f:
75:45:7a:6c:3b:d3:21:c0:7d:40:4f:7f:e2:a6:12:
69:a6:0a:48:2a:d4:6b:d7:21:56:76:e2:b5:ea:15:
08:03:fc:98:55:07:74:a6:e2:e9:4d:ce:b6:31:38:
ef:7b:32:d3:1f:7e:7d:31:47:d0:5b:26:f7:8c:5d:
ca:0a:2b:ab:16:16:3b:14:05:83:9d:b6:c2:56:a8:
83:39:54:8f:23:9f:33:4b:7f:b2:d6:5f:31:0f:87:
15:58:50:94:53:79:8f:eb:b2:d0:72:b9:18:47:2c:
50:ec:2a:13:b4:7b:37:2c:b6:b4:75:38:25:c4:66:
0d:05:39:62:be:b8:42:7a:c6:75:20:90:d6:ae:96:
7c:a0:62:23:8a:11:50:bb:97:05:76:29:f2:7b:12:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:36:70:BF:A5:28:C8:28:B4:E1:DA:B0:57:58:64:24:50:92:00
X509v3 Authority Key Identifier:
keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/hyw2cL-lKMgotOHasFdYZCRQkgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.140.0/23
91.198.163.0/24
185.20.188.0/22
194.6.226.0/24
194.9.10.0/23
195.62.44.0/23
IPv6:
2a00:4fa0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:b0:01:df:f0:a9:6e:1c:67:1c:f7:e6:d4:8d:25:2b:5d:d5:
a6:df:63:16:e3:af:df:00:8d:37:e8:fb:1a:09:fd:55:88:e1:
f3:bf:38:d7:5d:c4:75:33:db:35:52:1b:e5:8b:2b:8e:d2:7a:
08:a7:5a:01:d6:de:4e:8a:7a:5d:31:6b:43:1b:bf:9c:fa:f1:
2b:46:26:f4:91:c7:0c:33:ac:7b:57:69:67:e8:e2:ce:59:0c:
28:9f:3b:0b:f6:ad:e9:cf:dd:71:8d:bd:62:28:02:eb:b9:55:
5c:2c:79:b1:90:f6:d5:b7:b2:72:5e:96:84:72:15:e6:5f:f8:
38:0b:f9:61:c1:3e:d9:8b:fd:54:e0:fd:78:ca:33:df:76:a0:
71:45:b6:2d:2c:69:bd:66:4c:13:34:5e:2a:7d:29:83:c1:aa:
8f:7d:47:3a:3e:3b:36:d6:6c:6a:d4:8d:a0:5a:49:32:d1:cf:
cc:26:ea:a7:56:1f:3a:72:06:5e:27:e9:e3:66:a2:8e:63:fd:
19:d7:17:7c:c6:8a:85:b5:93:0e:34:02:a1:14:03:26:7e:ab:
1c:81:c4:98:25:1c:5f:cd:dc:b0:00:07:c2:ec:f9:ba:82:ad:
fb:20:b2:1a:50:3b:5a:30:1c:b8:e8:71:dd:89:41:4c:7c:20:
5d:26:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:32 2024 by rpki-client on console-ams.rpki-client.org