Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/H5yyaWGSM4gw1r2HbAX21BfGJ1o.roa
File: H5yyaWGSM4gw1r2HbAX21BfGJ1o.roa (raw, json)
Hash identifier: O/6gCAp3BxLK9++Z3UTBCe0THItm9tnM9OmdbdLuifA=
Subject key identifier: 1F:9C:B2:69:61:92:33:88:30:D6:BD:87:6C:05:F6:D4:17:C6:27:5A
Certificate issuer: /CN=872076f188ea4a6ce5f7767f73176dd4a793941b
Certificate serial: 0187D9473D47CD2D9D19331B73BA291F7652
Authority key identifier: 87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/H5yyaWGSM4gw1r2HbAX21BfGJ1o.roa
Signing time: Mon 01 May 2023 21:45:37 +0000
ROA not before: Mon 01 May 2023 21:45:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 85.193.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:47:3d:47:cd:2d:9d:19:33:1b:73:ba:29:1f:76:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872076f188ea4a6ce5f7767f73176dd4a793941b
Validity
Not Before: May 1 21:45:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f9cb2696192338830d6bd876c05f6d417c6275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:40:0a:64:98:bf:c0:46:9d:ae:c8:0b:29:
2e:98:46:eb:b5:18:28:d6:f2:b1:43:70:5c:81:bb:
a3:63:2e:95:33:70:d3:9d:c3:a1:72:aa:98:9f:71:
54:9d:52:91:2d:6c:c7:40:1d:be:48:d3:9d:a7:4c:
09:30:47:bb:0c:a2:9e:94:d9:87:cb:e9:b3:40:05:
e4:83:7d:f1:52:b6:dd:19:58:9f:7e:9f:b5:23:5c:
06:22:e9:97:eb:37:5d:5d:5e:a1:fa:c0:ea:77:c0:
78:d3:e9:3f:0b:4c:c5:40:8d:6a:7d:dc:57:f1:d6:
75:50:12:9a:5b:e8:74:76:90:96:99:fd:69:01:31:
1d:71:31:4a:06:34:cc:bf:1c:9b:24:46:94:b9:50:
28:ae:77:65:51:d3:c8:d3:e0:18:50:c8:8a:e0:b7:
3d:29:db:ee:45:d0:4a:97:7d:eb:87:c6:4e:be:c3:
ab:31:af:f3:61:99:7d:ce:9f:ad:c1:34:95:95:1a:
e0:ce:23:d0:20:c2:12:46:69:1a:af:8b:d6:b7:f4:
8a:2e:e1:a4:5d:1e:36:84:61:3e:cd:ae:73:7f:90:
7f:23:97:62:f7:25:39:15:12:94:e6:7a:d2:47:aa:
8a:81:ac:fc:17:be:14:bd:b8:45:d9:3d:cb:ca:d3:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:B2:69:61:92:33:88:30:D6:BD:87:6C:05:F6:D4:17:C6:27:5A
X509v3 Authority Key Identifier:
keyid:87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/H5yyaWGSM4gw1r2HbAX21BfGJ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
91:92:ec:bf:ab:b2:ff:1d:ac:12:42:5e:e8:9c:77:ec:e6:a4:
08:2d:64:a4:e3:94:87:f8:06:ac:32:04:c8:9b:cd:29:83:00:
1b:78:70:5e:57:9b:5a:5b:23:e6:41:d9:88:bd:d4:bc:e1:11:
3c:97:bf:0e:aa:d5:cf:3d:da:fd:21:20:71:64:2f:60:e8:64:
da:b9:77:c0:4a:fa:00:02:bf:8f:8e:ae:c8:c9:6a:72:c5:ad:
57:b4:7a:86:6a:7f:b7:63:5b:c2:c2:2a:9d:a1:59:e0:d1:a3:
d8:89:f4:4d:86:83:b0:ff:38:be:77:5b:ec:ed:09:b8:1a:de:
11:0c:10:6a:02:66:8a:e0:72:9c:0e:c0:45:ac:63:88:4c:57:
f2:05:03:d8:ee:83:9f:5f:55:9b:d7:58:66:24:fa:68:65:cb:
39:1a:14:dc:07:69:83:6a:72:a6:ba:48:4f:7e:fc:cc:b0:e5:
a0:0a:5c:09:03:7d:42:ae:a3:90:2c:16:63:6a:b7:f9:80:12:
8c:99:ef:e6:54:d0:16:38:91:97:3e:ea:f0:8b:bf:f6:c1:ae:
8d:a1:26:72:6e:28:34:62:b8:63:f6:43:b1:33:60:c0:72:27:
02:ac:cd:90:94:c3:12:5e:42:82:8c:d0:bd:db:0c:84:56:30:
06:b3:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org