Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/HteYiS7rW_3bkEpN7oyE2ISUSiU.roa
File: HteYiS7rW_3bkEpN7oyE2ISUSiU.roa (raw, json)
Hash identifier: eq78BYg9tvLlQGyoAOXYj3QS9qJXzOfUlN8+KnTK7sI=
Subject key identifier: 1E:D7:98:89:2E:EB:5B:FD:DB:90:4A:4D:EE:8C:84:D8:84:94:4A:25
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018570E7553E7F15A3B66988B8B18C980233
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/HteYiS7rW_3bkEpN7oyE2ISUSiU.roa
Signing time: Mon 02 Jan 2023 05:14:46 +0000
ROA not before: Mon 02 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50065
IP address blocks: 82.135.216.0/24 maxlen: 24
195.12.182.0/24 maxlen: 24
2a00:1eb8:c001::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:55:3e:7f:15:a3:b6:69:88:b8:b1:8c:98:02:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ed798892eeb5bfddb904a4dee8c84d884944a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:63:77:b3:63:a9:76:1e:d5:1d:f4:31:f4:c1:
0d:79:5a:e0:38:1e:8f:18:b3:36:e6:13:1c:83:24:
a9:13:cc:dd:ff:79:8e:76:a2:f9:db:0c:0e:2b:ce:
6a:43:fc:e7:7e:c4:b9:ee:0e:d9:80:cf:02:73:34:
34:28:1f:e2:be:c3:f8:49:7a:eb:b1:f6:34:f6:82:
fc:20:a0:86:ee:29:8e:ad:db:e4:d7:2e:20:8b:70:
b9:dd:f5:de:ce:90:a7:b2:55:e3:55:ba:46:7d:25:
9c:65:5f:fa:bd:8b:be:ca:13:d2:10:d0:c4:61:6b:
6d:7d:93:fb:d8:34:4f:9d:c8:f4:b5:b4:39:fd:14:
81:42:51:8f:fc:90:93:ac:55:00:ed:94:f2:e9:47:
5b:b7:0b:0b:16:05:4c:c4:c9:11:51:aa:c6:bc:1c:
92:75:95:21:08:ca:46:36:92:cd:c9:48:6f:8a:97:
df:26:ab:ab:aa:97:e6:01:9d:8a:5e:d2:c4:ec:25:
04:ef:80:59:80:23:fd:fa:42:0d:4c:6c:9c:3f:a5:
a4:5f:b5:48:b3:c0:7f:f0:08:38:7a:48:e7:53:c0:
d8:08:9f:c1:ca:7b:99:46:b8:c6:4f:f7:64:a6:22:
8b:27:29:71:d3:66:c3:12:4d:c2:2a:a4:b2:31:56:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D7:98:89:2E:EB:5B:FD:DB:90:4A:4D:EE:8C:84:D8:84:94:4A:25
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/HteYiS7rW_3bkEpN7oyE2ISUSiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.135.216.0/24
195.12.182.0/24
IPv6:
2a00:1eb8:c001::/48
Signature Algorithm: sha256WithRSAEncryption
59:3c:9a:55:d7:ba:85:da:be:45:99:da:d6:90:ed:9c:78:72:
79:ba:7d:f4:c1:6a:ca:d0:b5:9a:92:33:52:74:ad:e4:ca:cb:
46:43:c6:7a:e6:e8:b9:e5:b5:b4:14:6a:36:c2:0c:f7:22:c4:
d0:78:65:c9:50:74:3f:06:06:a2:54:12:73:62:bc:0e:b8:f8:
f8:05:da:c4:c0:c2:d8:00:cf:b7:ff:66:1d:9b:69:40:6e:58:
ac:36:64:96:81:81:45:db:25:d7:21:58:fa:56:c7:cf:db:ae:
0d:60:bf:41:a7:d7:95:4e:29:08:7a:4b:29:59:2e:19:0f:6b:
c3:0a:ba:87:0c:60:96:4a:e7:f5:59:8a:de:15:a3:27:92:be:
6c:23:e5:db:0a:62:ba:17:48:4e:7d:01:d1:fe:08:40:f6:49:
a1:49:38:cd:b8:9c:c3:90:5e:03:d2:d0:b8:7b:26:bb:59:84:
78:58:35:c7:07:9d:ad:4d:a8:2a:99:7f:d0:ff:c9:ca:23:20:
6f:86:e3:5d:8f:06:ba:fc:b3:5c:13:40:50:75:64:16:ee:1d:
38:00:0d:7d:36:dd:6f:af:a1:90:19:50:ca:a6:39:ba:1e:f4:
3e:d2:75:a2:a9:18:2c:2f:ad:fe:dc:c5:ec:38:37:22:35:49:
e0:2d:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:43 2024 by rpki-client on console-ams.rpki-client.org