Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/Ho813YYD75Kh9Z8tDDEgVDqOJuU.roa
File: Ho813YYD75Kh9Z8tDDEgVDqOJuU.roa (raw, json)
Hash identifier: KMTDrOViJEWo0yavTLfVQ5g5qHmVf3R6CZPSh0WuG1I=
Subject key identifier: 1E:8F:35:DD:86:03:EF:92:A1:F5:9F:2D:0C:31:20:54:3A:8E:26:E5
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 018570CBD7A711B1C26EA8E5B490FDC81011
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/Ho813YYD75Kh9Z8tDDEgVDqOJuU.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34173
IP address blocks: 195.64.164.0/23 maxlen: 23
193.105.43.0/24 maxlen: 24
185.7.75.0/24 maxlen: 24
185.7.74.0/24 maxlen: 24
185.7.73.0/24 maxlen: 24
185.7.72.0/24 maxlen: 24
185.7.72.0/22 maxlen: 24
2a03:1780::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d7:a7:11:b1:c2:6e:a8:e5:b4:90:fd:c8:10:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e8f35dd8603ef92a1f59f2d0c3120543a8e26e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:e5:f5:df:6c:00:62:80:11:02:83:11:89:
50:cb:75:e7:ba:67:ac:d6:30:b6:3c:3a:fb:4f:7a:
da:8f:b4:31:a2:5f:2d:88:ff:90:d9:9f:c0:57:ce:
98:3b:56:0b:2a:ff:9d:d1:18:18:a3:df:bb:ca:34:
5f:74:fc:2d:02:52:17:03:76:ba:59:ee:ca:f9:52:
62:22:88:4a:f0:3d:6a:1d:ed:5b:30:5c:75:4d:14:
bc:5e:18:ad:03:ff:61:4a:56:d9:2c:07:0a:2e:ac:
79:49:9a:79:45:4b:62:c0:2b:fc:f3:bf:e6:bb:19:
02:c0:0d:0d:9f:bd:3e:10:0a:5d:e4:b2:35:73:5c:
7e:c3:10:32:5a:4a:fd:13:a0:6b:4f:e8:65:09:a6:
4b:39:5f:26:24:9f:54:1e:ce:f2:33:ca:6a:0a:91:
43:02:19:c9:82:db:d6:71:35:5f:8f:8d:28:1c:07:
66:ac:52:50:51:41:1e:51:ac:56:be:b5:a2:22:1d:
30:e6:0f:a9:b0:ad:95:14:e8:0f:3d:a5:63:b9:1d:
98:5a:0c:2f:c0:00:66:4a:ee:f2:3e:24:08:17:2a:
88:5b:1e:a6:84:ac:f9:ff:42:bf:7d:63:2f:7f:12:
11:cb:0e:c2:28:f1:ee:03:6a:9e:13:9f:c0:8e:80:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:35:DD:86:03:EF:92:A1:F5:9F:2D:0C:31:20:54:3A:8E:26:E5
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/Ho813YYD75Kh9Z8tDDEgVDqOJuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.72.0/22
193.105.43.0/24
195.64.164.0/23
IPv6:
2a03:1780::/32
Signature Algorithm: sha256WithRSAEncryption
34:0d:7e:24:67:55:ce:79:f4:88:b9:62:b6:3a:a6:b4:18:42:
93:3a:90:0b:1a:71:81:6f:73:17:7a:b9:51:09:93:ed:73:8c:
17:ce:7a:df:e6:f0:f4:df:4b:89:cf:00:48:ec:ea:96:ab:23:
01:05:aa:8e:8c:b2:5c:60:7b:a5:31:d4:43:c6:75:2a:f5:c4:
0b:0b:40:e5:16:02:06:5b:f9:2d:16:f3:42:07:fc:ad:b3:3a:
e8:80:f7:5e:a0:07:b1:35:15:65:11:ef:f6:12:f2:7c:80:18:
43:0b:14:e4:db:73:de:5c:aa:f8:37:25:60:cd:c3:a9:3d:48:
8b:40:67:2a:eb:09:8d:4c:a8:ad:47:79:0f:d0:69:a4:94:21:
0a:c1:80:dd:4c:7f:05:b0:b7:59:00:29:31:b5:3f:d8:8c:2d:
0c:d3:05:54:ae:bf:f4:75:2b:65:a9:24:f3:2e:13:ea:dc:48:
ba:61:8d:18:a2:f2:21:ff:85:be:38:4b:81:18:fa:e0:ad:d2:
c8:d8:a5:dc:42:fd:b1:c8:a1:37:a0:20:3d:61:1c:3d:02:58:
b3:2f:4f:88:f6:a4:9b:16:3b:0e:63:e1:1c:66:1f:3c:67:d8:
1e:68:8f:c6:d6:44:ab:8c:80:68:a1:6f:65:d5:24:1d:cc:18:
1d:98:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:52 2024 by rpki-client on console-ams.rpki-client.org