Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/hnuw-Kr9miyU9kXKf8Coscjj-L4.roa
File: hnuw-Kr9miyU9kXKf8Coscjj-L4.roa (raw, json)
Hash identifier: 85qSMA5PhaByZFsRPZfQKIWyryJBHgCaf5w/SqEzHVk=
Subject key identifier: 86:7B:B0:F8:AA:FD:9A:2C:94:F6:45:CA:7F:C0:A8:B1:C8:E3:F8:BE
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 018B6CC955C303674ADEC3BBD1C73D9F04E4
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/hnuw-Kr9miyU9kXKf8Coscjj-L4.roa
Signing time: Thu 26 Oct 2023 16:20:15 +0000
ROA not before: Thu 26 Oct 2023 16:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202306
IP address blocks: 78.153.140.0/24 maxlen: 24
109.237.96.0/22 maxlen: 22
109.237.97.0/24 maxlen: 24
109.237.98.0/24 maxlen: 24
109.237.98.0/23 maxlen: 23
109.237.96.0/24 maxlen: 24
109.237.96.0/23 maxlen: 23
109.237.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:c9:55:c3:03:67:4a:de:c3:bb:d1:c7:3d:9f:04:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Oct 26 16:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=867bb0f8aafd9a2c94f645ca7fc0a8b1c8e3f8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:cf:11:81:37:f7:9e:48:19:68:12:84:b4:
15:5c:62:3a:e5:8d:4f:c3:77:ee:d9:fc:de:ba:d6:
a7:57:20:a8:56:cd:a6:13:d0:8c:f8:99:7e:c5:c6:
de:56:79:f7:98:1b:65:e0:eb:12:e9:f8:9f:a1:9a:
8c:94:5a:7e:96:50:49:a3:93:a2:26:e9:5c:52:8f:
f8:7a:ad:41:c2:08:77:47:c7:d5:bc:06:42:52:bc:
5f:f4:14:7c:b0:f4:22:9f:92:9b:db:3d:5b:e9:cf:
5f:1b:ba:86:80:64:31:12:bf:4b:06:7d:51:e0:d6:
4c:c2:7c:3e:b0:96:22:59:88:35:8a:11:81:d8:77:
9a:9b:f8:08:f7:21:8c:da:d1:cf:0e:6f:d2:3e:26:
9f:6f:0c:85:0c:6b:24:a2:2f:ea:31:ba:fa:e7:59:
73:23:50:de:37:ff:09:39:bb:2d:d4:5c:77:a0:5c:
42:d9:51:4d:f5:0e:e2:39:39:a3:61:a6:13:cd:19:
b8:dc:d8:17:ea:23:b9:6b:a3:a3:a2:80:04:b6:d4:
3a:4e:a0:46:c2:f7:78:66:a7:d0:aa:7f:84:32:14:
ee:0a:3b:ac:5b:35:f1:bf:8e:80:63:95:ae:2c:36:
c8:b2:3f:81:7c:33:4c:34:bc:a5:65:42:16:23:fd:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:B0:F8:AA:FD:9A:2C:94:F6:45:CA:7F:C0:A8:B1:C8:E3:F8:BE
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/hnuw-Kr9miyU9kXKf8Coscjj-L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.140.0/24
109.237.96.0/22
Signature Algorithm: sha256WithRSAEncryption
10:86:b4:11:de:ad:01:d0:3d:b8:3f:4b:96:04:eb:7b:af:bb:
44:be:a1:1e:17:ce:a0:2b:5c:2c:89:05:21:a4:2f:66:b3:25:
a6:2a:be:69:a3:f8:42:b2:54:7b:d5:0f:c3:3f:7a:da:3f:a3:
de:27:6b:ee:61:46:4a:7b:29:8a:b5:74:33:93:97:71:e1:82:
89:74:d8:b6:7d:d4:51:2f:a3:94:58:82:97:71:b2:1c:68:9a:
89:2a:3b:17:b2:5a:37:52:24:b5:27:e6:d0:87:d3:54:fc:7c:
48:49:68:32:5f:f0:b3:6c:60:01:df:a3:12:7e:d9:1c:85:29:
76:7e:51:0e:2e:28:85:98:32:d4:a8:49:9a:92:bd:1a:8d:29:
34:7b:f5:24:6e:3b:5b:5a:67:21:db:7f:14:b3:c7:a8:07:a3:
74:ca:a3:21:db:6f:de:e4:f1:a2:f2:4a:47:be:20:de:04:b1:
80:40:62:3c:24:19:7f:7c:8e:5e:ce:f7:68:51:19:0a:97:9c:
db:39:c6:d6:4a:e5:ac:4a:a6:c3:81:81:5c:32:e6:c1:52:85:
d9:a6:c2:2c:4b:3c:5b:e3:1e:0d:80:6f:05:e0:f0:e2:e1:1d:
91:b5:2a:58:9d:03:d4:02:7a:61:6d:35:f6:cb:6b:61:42:37:
90:1b:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:11 2024 by rpki-client on console-fra.rpki-client.org