Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/H0TiJ5WGcBx0JhztdhHHRCXEeHM.roa
File: H0TiJ5WGcBx0JhztdhHHRCXEeHM.roa (raw, json)
Hash identifier: ifitBAdAgedCdmARyEAXj/c86gVlbKtf7SkSnaSlsdY=
Subject key identifier: 1F:44:E2:27:95:86:70:1C:74:26:1C:ED:76:11:C7:44:25:C4:78:73
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 018C4AA55DF9DCF86596B151D5CEC34C75F8
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/H0TiJ5WGcBx0JhztdhHHRCXEeHM.roa
Signing time: Fri 08 Dec 2023 18:16:40 +0000
ROA not before: Fri 08 Dec 2023 18:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210194
IP address blocks: 194.39.231.0/24 maxlen: 24
194.39.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:a5:5d:f9:dc:f8:65:96:b1:51:d5:ce:c3:4c:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Dec 8 18:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f44e2279586701c74261ced7611c74425c47873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:62:c4:f3:3e:70:18:71:2b:ee:65:03:3d:
59:6c:38:8e:58:f7:8c:23:11:ae:78:08:46:f4:ef:
9e:3d:25:99:06:b2:1c:51:af:48:63:96:65:7d:97:
c0:b7:84:f1:24:5e:9b:33:b4:98:65:0f:4e:ed:1f:
84:0e:21:c7:07:b3:31:2e:de:00:e2:24:47:b8:2c:
1b:e3:bd:72:23:96:37:6c:f1:94:d8:f1:85:d5:d6:
9b:5f:d2:dc:a2:1d:92:fe:c3:31:33:b7:38:4d:2c:
6b:24:0d:94:ef:41:ed:40:70:a3:10:6d:a5:e7:14:
38:15:77:cf:4c:2e:ff:43:d7:9d:5d:39:f3:32:1c:
e0:0a:72:56:e0:ac:fe:f5:aa:26:02:65:3a:98:78:
21:a8:83:c8:ad:fe:4b:71:6c:7e:43:1d:40:3e:50:
35:af:98:53:04:be:21:ae:08:59:16:9b:5c:7b:27:
85:e9:36:18:35:85:59:e0:a7:d4:c3:7c:78:02:30:
3e:1a:a3:65:f0:cd:3d:ec:b6:cc:fd:b7:d2:43:be:
01:11:4c:c9:8a:a1:3e:19:69:df:78:81:25:0c:d9:
fc:79:37:a6:e5:7b:32:4a:b2:2d:61:e3:75:12:74:
37:d8:be:ef:5d:6b:7c:63:00:26:2e:b4:2a:1f:5d:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:E2:27:95:86:70:1C:74:26:1C:ED:76:11:C7:44:25:C4:78:73
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/H0TiJ5WGcBx0JhztdhHHRCXEeHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.230.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:30:b3:33:63:eb:05:93:99:e3:27:ff:2d:e8:de:0b:56:5a:
d9:ab:bc:f6:33:87:e9:7e:7d:a7:ca:ce:61:20:64:ac:bd:87:
cc:72:43:1b:23:1e:6b:6f:c7:50:78:3b:11:79:24:67:dd:29:
54:c7:e8:24:e1:a2:d6:6a:3b:5b:59:0a:74:98:14:10:8c:ff:
99:4a:9a:6e:40:d5:e3:c8:83:7d:82:7c:63:b8:38:81:7e:29:
3f:33:18:08:40:88:9b:3d:ff:25:32:5d:b7:e8:63:ca:3c:c8:
17:7c:35:70:7e:0e:6a:30:a7:b4:90:9e:8a:ed:bc:ca:bc:b3:
2c:6d:29:67:1d:2a:57:33:fa:0a:33:45:a0:7d:94:f8:8c:c2:
15:3d:a4:2f:57:22:2c:8a:b9:be:1d:4f:6e:5a:0a:59:40:8c:
c8:3e:da:56:8b:40:bd:5b:5f:9c:2d:3f:f4:f7:71:7d:af:e8:
7e:35:50:c1:34:27:5e:45:a6:a1:c4:ed:0e:90:b5:10:48:08:
5a:25:06:33:f8:aa:56:a4:37:8b:8d:85:dc:57:20:48:7c:b8:
c7:61:b5:6e:ab:7c:50:42:d9:f3:12:91:dc:f3:62:81:29:c4:
22:03:86:33:c2:3a:b6:98:cb:d0:5c:32:13:42:76:e5:85:c4:
a6:27:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org