Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/HK102x1cFUPcLZqHDPKYzBe_CkU.roa
File: HK102x1cFUPcLZqHDPKYzBe_CkU.roa (raw, json)
Hash identifier: ugrZ76BlgHlM45oxEKKmiLDb9U/JVjcuou8loMpXaP4=
Subject key identifier: 1C:AD:74:DB:1D:5C:15:43:DC:2D:9A:87:0C:F2:98:CC:17:BF:0A:45
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 018C110B9874D8FF1E9EE335285EA68D7CB1
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/HK102x1cFUPcLZqHDPKYzBe_CkU.roa
Signing time: Mon 27 Nov 2023 13:50:21 +0000
ROA not before: Mon 27 Nov 2023 13:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 198.151.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:0b:98:74:d8:ff:1e:9e:e3:35:28:5e:a6:8d:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Nov 27 13:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cad74db1d5c1543dc2d9a870cf298cc17bf0a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:d1:71:c5:65:bf:1f:fb:53:14:82:46:60:
05:6d:53:fd:5b:c6:c8:9c:95:f5:83:73:32:73:77:
67:ec:d6:99:df:d0:e9:b4:2f:2a:31:15:52:1f:41:
c3:a1:b1:78:bb:f9:c2:0b:c6:8c:9b:c5:ba:90:56:
21:07:2f:29:ca:39:1a:78:28:f0:6c:88:65:01:b0:
90:81:8f:1c:0d:d8:c3:3d:54:d2:3b:c4:3a:90:18:
a7:58:1e:65:23:65:d8:4f:ae:88:16:12:5c:e0:6a:
fa:cd:61:4b:af:36:6c:60:b4:9c:57:5e:58:d4:e8:
3b:4b:51:17:aa:d0:96:44:d5:48:b0:69:97:ee:40:
5a:d8:8b:b8:1b:6f:60:01:85:d4:04:e8:5b:c0:21:
f3:44:98:01:5b:cc:7a:10:a7:2b:8f:13:65:eb:f4:
ce:29:2c:55:96:93:5c:e6:c7:c0:55:62:dc:83:4f:
f1:dc:c3:2d:ee:3f:c7:c0:95:e1:7f:e2:37:40:d0:
55:34:69:6e:26:fe:b5:19:2e:0a:fc:e1:ec:5a:f2:
4b:60:40:eb:1b:53:dc:cd:10:ee:2d:f9:8b:b3:7e:
46:94:83:8f:0b:02:cb:cc:dc:67:db:b9:d2:d2:90:
68:a2:f2:2a:d8:29:59:a4:5d:99:2f:d7:f6:6e:ff:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:74:DB:1D:5C:15:43:DC:2D:9A:87:0C:F2:98:CC:17:BF:0A:45
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/HK102x1cFUPcLZqHDPKYzBe_CkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.151.157.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d8:c1:df:26:90:81:2d:83:ce:64:0c:14:f7:42:a4:34:00:
94:f4:78:18:b1:b0:3e:a1:a4:ee:c2:14:6f:c5:c9:16:17:65:
29:5d:73:03:ef:e7:f8:0b:2f:12:e4:68:90:a0:e0:81:1a:88:
29:4e:82:8e:00:86:84:c1:20:c5:ce:17:0e:a4:76:5c:8f:d6:
70:ae:c3:8b:93:f7:de:51:88:23:e2:8f:e4:66:aa:89:0f:86:
24:ce:ba:1d:3d:c3:28:d9:40:42:36:7e:af:2a:96:cc:fe:29:
e9:61:8b:83:e4:9d:a9:30:3c:8f:2d:d5:3b:43:5a:77:27:a9:
d1:24:d0:fb:fd:f7:4c:42:b9:9c:95:71:1e:98:93:08:29:c2:
f5:bd:47:9d:b0:f3:c5:28:e4:40:c5:86:ab:60:21:9f:f3:7d:
2c:0a:a0:b1:38:f2:4c:6b:7b:e8:77:f1:93:32:97:cd:6f:e5:
e4:7c:78:32:a1:78:64:04:56:a3:22:08:1d:91:f2:f5:88:1d:
ca:e6:35:bd:93:1e:06:f0:16:e1:1d:e3:55:c6:c3:1d:84:d4:
96:90:24:01:76:69:78:09:4c:25:6d:b3:96:39:69:7f:7b:ae:
66:57:44:fd:d5:61:44:96:7e:e5:06:92:bb:3d:5f:ad:ad:90:
3a:92:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:20 2024 by rpki-client on console-ams.rpki-client.org