Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/HwREyy9pfMXgyCjFRR5viVHIofU.roa
File: HwREyy9pfMXgyCjFRR5viVHIofU.roa (raw, json)
Hash identifier: 6TUbsYozkxYnWydOtNGoWyUGS+VUdNf3wMV6q/Qf5PI=
Subject key identifier: 1F:04:44:CB:2F:69:7C:C5:E0:C8:28:C5:45:1E:6F:89:51:C8:A1:F5
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 018CC500DB74BABA34BE079463EB89D06B60
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/HwREyy9pfMXgyCjFRR5viVHIofU.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8236
IP address blocks: 192.40.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 02:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:db:74:ba:ba:34:be:07:94:63:eb:89:d0:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f0444cb2f697cc5e0c828c5451e6f8951c8a1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:b4:09:6a:89:e5:a2:38:a1:aa:68:8c:26:
11:71:7f:03:40:b1:d4:df:eb:77:e5:cf:f6:b6:16:
73:a0:92:3c:8d:35:66:89:69:2b:0c:89:15:36:c7:
07:67:e7:b0:c6:8b:cd:54:16:d5:5b:46:fd:b9:01:
ed:3a:41:03:8c:d6:a1:29:ef:38:54:e7:47:72:ad:
4e:fd:e5:e9:00:93:af:2f:f5:b1:2b:b8:ae:a0:fb:
30:b8:ca:c2:d3:f9:3d:5f:a4:de:1e:33:da:7c:fa:
df:60:1d:25:3f:22:3b:67:43:43:b7:1e:40:d6:f8:
12:6e:48:c5:a0:d1:f1:52:f3:84:2e:20:43:2f:61:
9c:bb:e7:5e:f7:1c:72:6a:1e:29:df:56:ab:21:4e:
df:a9:fc:5a:da:b0:ea:31:be:5f:a4:f7:2e:7b:0a:
8a:51:ca:32:d1:c8:9b:52:44:1a:bf:b6:05:dc:0d:
ea:fd:89:00:e0:ca:ba:f0:22:b9:00:06:51:8d:7a:
2f:ec:ed:0f:87:44:9f:08:66:23:19:a8:0f:46:5c:
8c:4f:43:a8:b7:2f:c5:54:e1:f0:23:ad:c5:98:12:
31:f5:b9:e1:14:d0:11:87:f1:53:3d:c8:ef:1b:b5:
b5:c5:9e:69:ce:33:78:e0:6f:bb:b7:24:4e:5a:cb:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:04:44:CB:2F:69:7C:C5:E0:C8:28:C5:45:1E:6F:89:51:C8:A1:F5
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/HwREyy9pfMXgyCjFRR5viVHIofU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.74.0/24
Signature Algorithm: sha256WithRSAEncryption
95:df:29:58:de:51:07:a9:c3:23:38:6a:ed:54:a2:a9:73:41:
05:10:e4:54:df:cf:34:b3:2e:23:e7:8c:30:ad:44:cd:04:cf:
b2:2c:76:60:67:7c:c9:6e:65:cb:27:ce:21:27:db:e9:70:ee:
1f:0a:2e:bf:ee:bc:36:22:23:b5:62:93:af:05:de:e9:cd:a4:
aa:c7:9c:ef:ca:ef:ec:a7:8d:3f:38:74:61:df:6e:19:f4:b1:
55:f8:f9:24:bc:76:d8:68:b4:eb:37:8e:fe:77:fa:02:9b:67:
68:91:9d:d7:90:89:d6:a8:4b:a2:28:32:90:9c:cb:8a:5f:4e:
0c:ad:36:bb:52:5b:90:43:96:10:f5:f7:04:86:5e:51:73:43:
3a:4f:b4:4f:1d:9d:80:ff:5f:a6:b4:bc:8d:2c:33:82:c1:80:
65:6f:7a:52:a3:0f:32:0f:33:1d:7d:cb:de:ae:eb:b3:82:88:
17:08:88:76:56:a8:e9:10:27:e7:cd:8d:0f:c6:77:b9:5b:d7:
bb:42:dc:8c:dc:9e:4f:c6:31:34:8b:7c:72:3b:5b:7a:ed:33:
1b:eb:3f:c5:58:2b:e1:f6:30:bb:70:d5:40:50:0d:c6:39:f6:
70:b1:57:ee:22:2d:a1:58:6c:62:56:45:25:af:b6:4c:e6:28:
46:52:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org