Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HpOQuDKjATYolJlYtQKGXRIIMsA.roa
File: HpOQuDKjATYolJlYtQKGXRIIMsA.roa (raw, json)
Hash identifier: wULY5cTfuOOW8nbZ5QKa3TD6Odm8EImU+LF8Ns26Bug=
Subject key identifier: 1E:93:90:B8:32:A3:01:36:28:94:99:58:B5:02:86:5D:12:08:32:C0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7B21C90C7A17275C7FAA65AC1FA0F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HpOQuDKjATYolJlYtQKGXRIIMsA.roa
Signing time: Mon 02 Jan 2023 08:44:53 +0000
ROA not before: Mon 02 Jan 2023 08:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204868
IP address blocks: 2.59.204.0/22 maxlen: 24
5.253.228.0/22 maxlen: 22
185.145.80.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b2:1c:90:c7:a1:72:75:c7:fa:a6:5a:c1:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e9390b832a3013628949958b502865d120832c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:34:4d:dc:1a:c5:b2:3d:48:5b:84:c4:cb:
7c:59:61:f5:50:60:a8:ca:30:86:d5:2e:d4:68:28:
da:56:38:ee:70:b9:48:0f:8f:2d:32:b6:14:6e:88:
8e:ed:de:ea:02:73:89:67:78:17:cd:98:de:33:0f:
8c:ce:c0:ed:e2:97:bb:75:b3:9f:62:34:a7:cd:3a:
05:bc:06:b4:62:bf:bc:57:fb:7c:47:a4:0a:28:ad:
a9:4b:66:89:4e:13:f9:5f:81:a6:e4:ad:93:f0:7a:
6f:ef:ca:23:ad:66:45:d5:fd:48:7c:8b:15:3c:35:
f3:d9:80:47:c6:34:ed:90:62:0c:66:99:b7:f8:2b:
22:b9:0a:71:2f:97:87:a9:f0:06:8c:fd:0e:49:19:
05:b5:a0:0f:0b:ba:7e:80:7f:91:c3:a3:a0:59:7b:
98:84:10:ba:6d:0d:c4:eb:bc:ab:2a:76:ca:b8:14:
18:d3:d0:c9:d1:c0:98:c6:28:ac:56:30:95:71:5b:
23:73:73:7a:53:fb:ef:68:ba:e2:49:50:c4:09:46:
09:6a:7a:23:c4:2a:d3:85:2f:88:62:34:ff:d6:88:
7d:d4:cb:3f:af:2e:d0:a3:25:9e:f4:b5:0a:1b:49:
46:38:88:cc:d8:9f:70:5d:84:ce:95:58:8a:12:6a:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:93:90:B8:32:A3:01:36:28:94:99:58:B5:02:86:5D:12:08:32:C0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HpOQuDKjATYolJlYtQKGXRIIMsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.204.0/22
5.253.228.0/22
185.145.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:07:38:25:4c:ab:70:54:5f:0b:61:bb:80:25:0f:66:74:51:
59:db:16:9f:cb:7e:25:86:38:73:e1:a7:8c:93:eb:e6:98:ba:
c3:65:8f:ec:90:95:f1:0a:7f:ab:24:54:3e:4a:11:f2:a0:87:
cb:ff:d2:e5:17:ef:71:25:07:7f:4c:57:d6:e6:a5:ea:68:24:
2b:6d:9a:ef:ab:00:be:8f:3f:e0:f0:5a:39:42:d2:a8:b3:c4:
0e:43:f4:a3:80:de:b4:b2:e7:a6:83:d4:a1:19:52:56:6b:16:
96:86:c6:92:c0:ba:1f:74:7a:ee:39:b0:7f:9b:d7:ec:fb:55:
37:b1:81:5e:b0:b3:34:28:fb:80:25:3a:e4:d4:0a:23:e0:8f:
6c:5a:bd:e1:5b:38:4c:a4:c7:fa:a7:fa:93:19:f7:df:ae:9c:
ea:6e:f8:b3:dc:f5:a4:57:67:d2:a6:b9:cb:98:98:08:60:61:
a6:d5:75:68:d5:41:75:12:54:cc:cd:65:a1:1c:16:8e:b3:01:
64:74:bc:43:ab:e0:b1:f0:66:f4:fc:36:2e:bf:cb:55:f5:97:
00:c1:eb:4f:5a:8a:ab:90:cb:a6:3e:11:a8:fe:dc:9b:54:19:
38:a6:81:57:ad:86:d2:ce:e4:7c:18:da:57:6b:a7:ba:79:1b:
4a:62:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org