Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/hu-aY4nZtvr7mMulm2pU9cLCuL4.roa
File: hu-aY4nZtvr7mMulm2pU9cLCuL4.roa (raw, json)
Hash identifier: Ku/tZ8EDE2qD1iUJ7oLp0Qt1IgZyowRPOaD9+1t9oVc=
Subject key identifier: 86:EF:9A:63:89:D9:B6:FA:FB:98:CB:A5:9B:6A:54:F5:C2:C2:B8:BE
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB8FFCC0EDD9FC3F918813BDE92D5F
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/hu-aY4nZtvr7mMulm2pU9cLCuL4.roa
Signing time: Sun 01 Jan 2023 19:25:12 +0000
ROA not before: Sun 01 Jan 2023 19:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 185.239.244.0/24 maxlen: 24
185.239.246.0/23 maxlen: 24
185.254.17.0/24 maxlen: 24
185.254.16.0/24 maxlen: 24
185.244.104.0/24 maxlen: 24
185.244.105.0/24 maxlen: 24
185.246.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:8f:fc:c0:ed:d9:fc:3f:91:88:13:bd:e9:2d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86ef9a6389d9b6fafb98cba59b6a54f5c2c2b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:89:02:af:e1:eb:34:a9:0f:ee:1b:63:2b:
d2:07:91:bf:a1:6a:ae:f8:9f:b0:a1:3c:98:f5:0a:
a8:7f:96:72:af:0b:99:1c:68:3d:83:62:01:02:86:
2a:42:26:a5:f1:a8:03:86:f8:42:48:34:18:a7:cc:
02:b1:51:0a:ac:5e:ab:2f:bf:0f:05:38:22:73:55:
12:89:d8:f3:80:fd:a8:3e:f8:ba:74:3c:fe:11:bb:
90:84:fc:d8:d6:f0:c0:23:61:66:81:e4:41:19:bc:
b4:14:96:7c:ba:98:4f:9d:1c:01:d1:e1:48:da:a9:
63:72:b5:cb:fa:d6:7e:05:1e:06:81:19:5f:a4:02:
c3:21:75:34:d2:a2:fb:df:6f:3b:bc:8e:38:83:3f:
8e:ff:46:b4:65:c1:90:70:42:c0:19:a5:aa:c0:63:
29:e6:c3:3b:1d:7b:d3:ed:41:73:82:09:05:fe:bc:
f1:d1:4e:55:8d:a7:74:61:31:e4:5a:9d:4a:6e:9c:
db:73:d5:c8:99:a6:2f:e9:fc:0b:90:24:ad:b2:9c:
7a:18:76:84:a9:98:98:66:b2:89:ba:e8:f7:03:e2:
b3:24:fd:c5:d3:26:09:06:3f:23:fa:b5:9a:32:25:
04:0e:d0:91:d4:56:1c:35:3a:80:da:9f:6b:8e:56:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:9A:63:89:D9:B6:FA:FB:98:CB:A5:9B:6A:54:F5:C2:C2:B8:BE
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/hu-aY4nZtvr7mMulm2pU9cLCuL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.244.0/24
185.239.246.0/23
185.244.104.0/23
185.246.236.0/22
185.254.16.0/23
Signature Algorithm: sha256WithRSAEncryption
26:41:73:cf:c5:54:12:91:49:2f:b0:ca:69:9d:38:f4:0d:5b:
05:68:c6:02:4a:cf:86:9f:b3:5a:4d:9f:ab:cc:46:f4:6b:c6:
9e:18:3f:63:5f:ac:2c:bb:ae:1a:e2:32:0d:0a:e1:91:d2:77:
fe:fd:05:24:b4:64:fe:0d:86:44:96:6d:2c:60:9b:c1:81:40:
b3:3c:8e:da:51:d7:5c:eb:85:a6:cb:62:a2:85:ce:ed:37:68:
ee:bd:4c:a1:39:29:d4:50:4a:2c:cf:f8:72:fb:bd:fa:49:61:
54:ab:05:d2:37:fe:8a:5c:8a:c0:48:83:e7:d7:a4:b9:e8:0e:
44:29:bd:92:00:6b:64:59:69:3b:24:95:51:7f:16:3e:49:9a:
ea:72:bc:8f:1a:d2:20:20:95:19:5c:10:c1:79:cc:86:4f:3f:
05:54:0c:55:9b:84:14:ea:18:95:2a:78:b4:52:70:a2:f5:23:
c8:5c:e7:be:55:68:46:fd:9d:1b:93:68:7d:06:5c:01:29:61:
ac:27:bd:87:97:48:c3:88:50:93:3b:43:96:93:77:bc:41:b0:
8e:2a:ce:a2:e0:b3:16:34:93:7f:85:7f:a5:f7:6d:da:86:92:
bb:51:7d:3a:ae:b9:e2:a7:cc:8c:1d:2d:37:11:21:db:00:7f:
6b:3d:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 19:41:28 2023 by rpki-client on console-ams.rpki-client.org