Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HyVAKQ_A5avPSZNssgBy8gzzSOM.roa
File: HyVAKQ_A5avPSZNssgBy8gzzSOM.roa (raw, json)
Hash identifier: uIy/ooEdeA6Izwv5wVFr3wUf04eAFep3kwzHZQNG3+g=
Subject key identifier: 1F:25:40:29:0F:C0:E5:AB:CF:49:93:6C:B2:00:72:F2:0C:F3:48:E3
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018AE5240DD54702FF1C87A8334746B02958
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HyVAKQ_A5avPSZNssgBy8gzzSOM.roa
Signing time: Sat 30 Sep 2023 08:10:59 +0000
ROA not before: Sat 30 Sep 2023 08:10:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.159.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e5:24:0d:d5:47:02:ff:1c:87:a8:33:47:46:b0:29:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 30 08:10:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f2540290fc0e5abcf49936cb20072f20cf348e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:a3:04:63:43:15:97:3d:f8:03:ac:9f:dc:
a5:38:a0:71:ea:ab:d5:22:ba:6a:10:15:8c:5b:0d:
30:b7:c7:af:fb:d3:f8:a3:fa:a8:eb:14:3a:7e:f8:
e8:db:14:87:f5:ee:e3:cb:20:29:29:e2:d6:b2:59:
8d:5b:82:ea:f6:86:52:87:5b:09:51:c4:96:d3:f4:
7b:23:70:00:a2:f4:d6:4b:1c:65:7f:20:81:6d:e7:
1c:97:67:65:23:bb:41:b2:f5:5b:57:2c:30:7a:b2:
69:90:7e:99:27:11:93:4a:09:02:fc:d2:1f:76:ef:
a4:02:be:6a:11:02:1c:31:e6:c4:88:57:de:92:e0:
0e:a4:6c:13:2e:b7:3d:9c:eb:89:d9:b4:93:25:f3:
a8:bd:26:94:ca:78:72:14:d2:69:a9:99:08:86:35:
6e:6d:a6:23:79:be:aa:4c:e3:48:bb:20:8f:34:37:
91:27:e1:4d:ec:8f:70:3e:33:43:16:63:9a:ef:81:
92:37:56:90:bc:70:56:54:3b:ff:74:71:ec:a7:bc:
5a:92:64:87:37:95:3e:c1:10:20:a0:03:d3:c8:2e:
b6:b3:2f:45:f4:50:49:04:a6:d8:4f:38:81:81:c2:
09:1f:9d:7f:e1:6b:6e:f1:44:61:3a:3c:fb:ce:93:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:40:29:0F:C0:E5:AB:CF:49:93:6C:B2:00:72:F2:0C:F3:48:E3
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/HyVAKQ_A5avPSZNssgBy8gzzSOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
42:24:17:44:1e:c7:bb:d4:05:50:fe:0c:67:2e:ee:7a:02:61:
53:96:be:44:98:00:83:15:d0:41:d8:5d:e0:34:27:1b:83:76:
35:15:aa:54:64:9d:04:6e:45:ef:fa:e3:67:2f:3f:d7:18:7e:
23:f8:69:1b:60:e5:0b:db:69:42:01:be:a2:ee:ea:f6:d0:77:
bb:0f:cc:8b:f7:e4:02:e0:37:e3:1d:69:bd:c2:40:39:cb:1a:
a3:ff:a9:00:b6:a7:70:fe:f1:38:88:b9:13:21:fb:8e:06:09:
e8:56:ce:26:e8:af:63:69:6e:2e:b3:2f:c7:61:dc:47:3e:f7:
e2:f0:42:02:3a:a1:b8:1e:d7:65:8c:f4:f1:92:e9:5c:e4:89:
88:35:da:75:60:01:16:ea:a9:a8:54:5f:89:38:ee:6a:fc:49:
2e:b9:ba:0e:35:6f:b7:48:7f:ad:b8:a8:32:58:95:15:4f:5c:
83:4f:dd:b0:a5:90:5a:fa:25:8b:95:55:b5:14:2d:4e:f4:c9:
6d:bb:98:70:07:cb:75:3d:e8:6a:6c:c3:44:6c:a7:3d:71:17:
90:6e:e6:70:98:98:68:a5:d8:bb:c7:21:0c:4d:dd:e4:47:af:
66:18:9e:8e:11:48:68:4d:9e:1e:c8:5f:53:a1:1d:50:ff:30:
41:3b:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 14:19:12 2023 by rpki-client on console-ams.rpki-client.org