Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HMtJacKBkEEjXO9uNRnhGq2xPFI.roa
File: HMtJacKBkEEjXO9uNRnhGq2xPFI.roa (raw, json)
Hash identifier: RXqeGiybNy7LmCwuNVQAARqQKkih1MdFu1XV8I4LY5Y=
Subject key identifier: 1C:CB:49:69:C2:81:90:41:23:5C:EF:6E:35:19:E1:1A:AD:B1:3C:52
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01872719D295C6A1CED5508A5BE832D1A6E7
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HMtJacKBkEEjXO9uNRnhGq2xPFI.roa
Signing time: Tue 28 Mar 2023 07:23:36 +0000
ROA not before: Tue 28 Mar 2023 07:23:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42881
IP address blocks: 185.115.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:19:d2:95:c6:a1:ce:d5:50:8a:5b:e8:32:d1:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 28 07:23:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ccb4969c2819041235cef6e3519e11aadb13c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:e1:a9:8d:3d:12:43:f5:17:a2:75:c1:70:
81:ee:d6:c7:df:79:40:2f:12:68:41:61:6a:c1:f5:
04:80:66:3b:7f:e3:12:79:cb:5f:7d:0d:04:20:0d:
1c:e3:ee:02:e9:b5:ab:84:5e:a2:6b:c4:e1:84:13:
99:6b:c2:bd:2c:92:f4:65:ec:b7:4e:1e:44:a4:21:
00:e8:71:66:d4:85:c2:c9:46:7c:b5:3a:89:b5:7e:
1f:19:65:30:61:b0:10:17:fc:a6:0f:78:3f:ec:da:
21:2c:d2:a4:63:aa:fd:8f:6d:3d:b4:26:52:43:13:
e2:21:d6:b9:ab:75:fb:41:c1:d2:6f:d0:5e:c4:f0:
99:55:af:8d:47:7f:d1:7a:b3:d9:15:19:5e:4e:01:
9e:aa:49:58:29:3a:50:ff:63:6d:1f:86:6f:ab:d5:
40:bb:c6:c4:76:26:0b:71:05:4f:cf:ef:ea:ac:6c:
6d:79:57:6a:68:e1:67:e0:3c:4e:e5:ef:85:63:fa:
a2:89:22:5c:d8:ec:19:24:2d:4b:08:ad:eb:f8:fc:
10:d4:db:ea:7c:47:a2:1e:5c:1a:51:6b:99:81:0f:
3d:0e:8e:e4:d9:c9:12:b6:0c:e9:06:71:d4:c2:76:
3f:42:39:c3:94:9c:37:f0:e7:72:56:2d:72:88:49:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:49:69:C2:81:90:41:23:5C:EF:6E:35:19:E1:1A:AD:B1:3C:52
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HMtJacKBkEEjXO9uNRnhGq2xPFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.92.0/22
Signature Algorithm: sha256WithRSAEncryption
97:3f:a8:a2:6d:86:b7:01:0e:dd:5e:cc:6f:b3:38:ab:16:55:
c1:67:c8:ad:ec:c0:40:eb:bc:56:e1:6a:0c:6f:dc:22:bb:ca:
19:60:59:26:51:23:ab:b6:a4:72:66:2f:66:e9:ed:87:86:2a:
27:68:bd:d8:f7:ee:47:a1:2b:d1:49:93:a9:32:e1:fa:c4:7d:
30:ca:86:0e:84:2e:c4:6e:dd:67:c4:38:22:bf:44:a4:99:d8:
f8:5d:fe:58:5d:6f:59:6b:4d:88:b0:1d:0d:fb:0c:5d:fb:fb:
87:16:9c:2f:9c:6e:ac:38:97:ed:06:84:2c:25:c1:25:21:cd:
0c:fa:dc:d6:f3:19:e4:52:a1:98:91:6f:53:68:76:dd:90:86:
84:eb:f3:35:6f:af:fc:3a:6b:05:06:17:38:6e:30:b7:f6:7a:
0a:2c:8d:49:c6:d4:cb:37:19:75:69:2d:b0:91:8f:64:cd:67:
02:86:f2:76:e4:32:6f:b9:53:07:f1:44:17:e5:06:4f:6d:09:
9f:c6:c0:4c:b6:2f:af:96:1c:7a:ce:5d:bc:2d:eb:66:4f:78:
2e:75:70:76:b0:83:f3:44:d8:11:58:fa:fe:03:5b:c3:82:6a:
ed:96:45:d1:4a:58:0f:a1:9b:d7:4a:65:03:3b:ad:f8:a1:b4:
31:75:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org