Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/HubWzDfOemm5OkicMjHWHEYWPjg.roa
File: HubWzDfOemm5OkicMjHWHEYWPjg.roa (raw, json)
Hash identifier: tLqksUTenGiJgxXEgSKPdYh07e7d9h/hh2VMcuUK2go=
Subject key identifier: 1E:E6:D6:CC:37:CE:7A:69:B9:3A:48:9C:32:31:D6:1C:46:16:3E:38
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 01856EB922D784C86AAC299DB919EFAACE3A
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/HubWzDfOemm5OkicMjHWHEYWPjg.roa
Signing time: Sun 01 Jan 2023 19:05:04 +0000
ROA not before: Sun 01 Jan 2023 19:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204241
IP address blocks: 185.3.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:22:d7:84:c8:6a:ac:29:9d:b9:19:ef:aa:ce:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Jan 1 19:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ee6d6cc37ce7a69b93a489c3231d61c46163e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:f7:2f:1b:5e:18:61:27:49:87:b4:cc:27:
61:46:2e:84:0c:93:62:e0:ec:d6:95:36:ef:60:13:
70:3b:e8:79:75:a0:b7:97:24:57:22:a8:18:dd:a2:
af:26:ba:c9:85:82:f0:53:b3:20:0b:e6:0a:be:49:
40:ca:ed:95:29:96:13:81:ea:2b:85:3b:f7:88:81:
ff:84:8f:b3:4a:bd:b7:ac:57:a5:24:01:01:84:79:
fd:68:d4:18:e5:3a:ae:f5:5e:90:aa:c3:e5:18:33:
cc:8e:77:bc:0c:37:be:39:fc:53:d6:0e:e1:45:3a:
bf:35:ad:5d:44:e2:a2:e5:22:e5:56:c2:d0:20:4a:
4a:89:2a:90:a3:aa:1f:f7:39:f9:7b:d7:0a:7b:f4:
bb:66:9d:45:13:2b:c3:1f:33:e7:a9:50:23:fa:62:
56:2d:5d:a0:a3:f6:9f:55:b2:fa:f5:5c:7f:8b:0c:
46:30:ce:f8:b5:2a:3a:98:d9:3c:02:09:e5:f4:83:
9a:6c:07:96:98:e6:e6:d6:0d:7d:36:ec:0d:8a:ad:
aa:50:f5:c5:9e:10:38:cf:b9:6d:71:25:80:f2:f1:
67:3e:42:07:1a:2e:51:4c:1c:89:6a:74:6c:12:34:
d5:64:a4:5a:ba:32:24:d4:4f:68:49:32:e9:32:78:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E6:D6:CC:37:CE:7A:69:B9:3A:48:9C:32:31:D6:1C:46:16:3E:38
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/HubWzDfOemm5OkicMjHWHEYWPjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:90:86:60:89:80:8a:f9:6c:5d:56:87:9c:ef:b7:26:f5:73:
26:d5:7f:b0:cb:5b:77:d0:6e:4d:53:5b:d3:a4:53:a9:f4:bb:
58:ce:07:57:1a:a5:24:de:f5:3a:7b:2f:62:18:0a:16:4b:c1:
26:a8:74:f7:87:01:dd:10:75:cf:2d:17:67:c7:06:aa:9d:d2:
b1:b5:cd:64:c4:2b:55:b9:52:ef:f3:92:6e:f0:8e:1c:9f:30:
87:8d:5d:9e:e0:cd:7b:28:ef:9e:ee:a0:4f:0f:bf:32:f4:fb:
b5:41:e4:ee:0b:eb:2c:5f:c1:88:40:27:24:03:98:4c:2a:91:
8a:93:b9:d2:d4:79:81:ba:9f:98:10:31:79:80:fd:d8:c3:50:
5b:61:96:98:5b:8f:5f:09:33:3e:7d:45:c6:3a:c2:46:e1:fa:
fb:91:29:e9:d1:6c:cf:29:b1:19:5c:a5:dc:4c:7a:c9:06:88:
05:dc:e9:fa:d5:36:ee:48:45:de:67:00:4f:8a:89:41:5f:ce:
f8:68:66:f2:44:64:9f:66:8f:c6:99:d6:96:b0:ba:dd:4c:4c:
8e:26:87:4e:bf:f7:c5:65:49:0c:ad:21:ea:62:7e:71:fc:e7:
7b:ba:43:b9:6f:6a:06:a5:56:c1:ee:fd:b9:d1:a1:ba:88:cd:
2d:60:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:32 2024 by rpki-client on console-fra.rpki-client.org