Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HnyF_tOIm7DWJ0ABgVJ7Uua_FhQ.roa
File: HnyF_tOIm7DWJ0ABgVJ7Uua_FhQ.roa (raw, json)
Hash identifier: nEpD7hD31AWr2v/lPt1gdzR/0BAqs03ctiJO270vyeA=
Subject key identifier: 1E:7C:85:FE:D3:88:9B:B0:D6:27:40:01:81:52:7B:52:E6:BF:16:14
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DADBE8956873554E77DB56577FE65F6A5
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HnyF_tOIm7DWJ0ABgVJ7Uua_FhQ.roa
Signing time: Thu 15 Feb 2024 17:09:21 +0000
ROA not before: Thu 15 Feb 2024 17:09:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 2.59.48.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.80.120.0/22 maxlen: 22
94.158.188.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.18.26.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:be:89:56:87:35:54:e7:7d:b5:65:77:fe:65:f6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 15 17:09:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e7c85fed3889bb0d627400181527b52e6bf1614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:52:a0:d7:09:bf:22:78:9b:8a:f2:b6:5c:
02:fc:bc:3e:b4:41:c5:36:0c:bf:52:85:37:28:03:
37:24:78:3e:4a:90:7f:91:1a:67:bd:98:a8:44:f6:
6f:c4:20:ed:89:f2:96:11:67:1e:da:81:7e:cf:fd:
b0:cc:a8:2a:fe:6a:d8:98:c3:43:92:d1:df:cf:bb:
4c:9f:82:18:f0:45:29:8b:ef:1f:16:83:e7:66:c0:
02:66:61:8f:f4:a9:36:59:72:df:f1:ee:6f:fe:c4:
32:22:de:77:45:41:6f:ae:0e:50:b0:96:76:6b:84:
69:89:86:0d:40:45:03:f7:ba:7a:1a:ba:0a:0b:82:
de:09:3b:c6:64:bf:f4:b2:1c:77:30:e9:52:ca:42:
c6:fc:fe:20:9e:10:ae:11:51:24:12:3b:41:80:21:
a7:a4:71:36:f8:c1:6b:72:56:ba:06:8f:75:a7:0c:
d3:bb:6f:2e:24:b4:21:ff:0c:3c:78:87:db:e5:3f:
db:99:b1:8a:0a:5a:30:e7:ac:54:12:b1:91:3a:b5:
1b:c8:70:27:7f:4e:77:d6:2a:a5:53:56:7e:82:2b:
b5:e0:65:2a:48:7d:04:61:a1:88:b1:a7:2a:f4:9f:
2f:25:cc:16:f4:6b:8c:9e:dc:93:5a:3e:44:87:0b:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:85:FE:D3:88:9B:B0:D6:27:40:01:81:52:7B:52:E6:BF:16:14
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HnyF_tOIm7DWJ0ABgVJ7Uua_FhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
37.221.80.0/24
45.11.22.0/24
45.14.220.0/23
45.80.120.0/22
94.158.188.0/24
176.124.34.0/24
194.32.240.0/24
195.18.26.0/24
195.69.148.0/24
195.69.150.0/24
Signature Algorithm: sha256WithRSAEncryption
76:64:09:76:ae:0c:c9:b2:4a:10:23:23:2e:30:49:42:be:18:
a2:ac:0f:6e:b7:d4:06:69:e1:2f:48:e8:33:bd:a8:9a:ec:dd:
b6:44:8d:06:bc:7c:e5:e6:b1:35:6e:34:ad:08:a5:0a:c1:fc:
0b:24:03:8f:ea:42:fe:14:ce:ba:14:ef:28:8f:d4:07:00:d2:
b7:89:01:05:c6:c7:31:6b:fd:d0:6c:ff:e9:5d:79:15:1a:82:
76:21:ae:ca:2a:93:8c:01:e9:16:a1:0e:fc:c7:29:e2:22:f2:
32:ec:c0:75:ca:6f:b3:cc:a5:77:5b:12:ea:4a:58:e1:59:5a:
0b:85:03:64:27:c1:df:f6:3f:cc:b5:d3:bf:15:6d:bd:c3:83:
13:d7:26:13:99:53:33:a3:f1:bf:33:31:89:7a:1c:68:af:16:
e1:cd:35:47:48:03:af:88:34:b4:2e:49:dc:95:df:51:99:3a:
32:e4:f1:0f:0c:15:fa:e8:aa:bb:af:5d:3f:57:be:f5:a8:37:
67:66:07:fa:39:16:23:5c:89:d7:44:f7:b2:fb:b0:9b:e0:b0:
96:64:d9:19:1f:47:04:d3:e0:19:a1:0d:5a:e5:fb:94:5a:bd:
f2:0e:b1:ff:17:cc:f6:67:2e:a7:a4:c8:63:96:37:41:15:b2:
b8:21:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org