Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HI9wYwC7pSoe5SMkjysTG5S4VUc.roa
File: HI9wYwC7pSoe5SMkjysTG5S4VUc.roa (raw, json)
Hash identifier: jtCCTszu4+NRnWE0M4V0di+hBxnmrsb6S/2GNMRvvQc=
Subject key identifier: 1C:8F:70:63:00:BB:A5:2A:1E:E5:23:24:8F:2B:13:1B:94:B8:55:47
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0F4FE41DB542C6130A6C674672B31
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HI9wYwC7pSoe5SMkjysTG5S4VUc.roa
Signing time: Mon 02 Jan 2023 10:04:54 +0000
ROA not before: Mon 02 Jan 2023 10:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43402
IP address blocks: 84.232.59.0/24 maxlen: 24
78.136.110.0/24 maxlen: 24
94.76.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 07:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f4:fe:41:db:54:2c:61:30:a6:c6:74:67:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c8f706300bba52a1ee523248f2b131b94b85547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:8c:bc:2d:a0:09:5a:61:ed:ec:8e:54:86:
e4:66:28:93:c3:ce:83:4d:07:27:63:54:6c:74:0d:
56:0c:ed:9f:47:29:1a:1b:c4:6e:e6:0a:87:a2:4f:
a5:c0:1e:5a:0a:14:fd:a6:2d:e4:f1:ef:7c:5d:fc:
72:4f:23:ec:1a:eb:0e:af:c8:80:6a:4f:54:54:84:
27:7b:6f:7b:04:a8:eb:5c:3a:82:f8:4a:61:e3:a3:
ad:a3:f1:71:e2:79:02:e3:78:91:34:3d:0b:af:c5:
49:5d:c2:67:ba:ec:a0:67:7f:f7:1e:d4:aa:8d:37:
9a:83:ff:82:8a:72:78:b2:c7:f8:f6:09:03:55:92:
03:12:e2:4c:eb:7c:0a:9f:63:18:1b:d1:eb:d3:cf:
4b:32:fb:a9:fb:0f:26:75:62:cf:cf:e5:08:63:0a:
5c:c7:01:7f:dd:04:d3:c5:9d:94:92:97:23:74:5d:
a3:a6:6a:3f:44:86:78:2a:fd:2c:79:2c:f4:f2:40:
6a:76:0f:87:20:9f:77:9e:d6:b2:70:64:84:d6:c6:
a7:77:6e:4c:e5:57:b1:fe:1c:5a:06:6a:39:ea:a5:
b1:09:82:e2:47:c5:05:6f:8b:60:96:0d:95:e5:7e:
ca:29:2f:25:99:49:6a:61:f2:97:9a:c8:38:25:80:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:70:63:00:BB:A5:2A:1E:E5:23:24:8F:2B:13:1B:94:B8:55:47
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HI9wYwC7pSoe5SMkjysTG5S4VUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.110.0/24
84.232.59.0/24
94.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c9:06:a3:88:6b:85:70:e8:2d:ef:27:1d:ca:a4:87:82:1d:
1d:6f:aa:6d:2b:c6:2a:29:93:89:26:2f:8a:ec:8c:5d:66:e0:
66:f3:19:6e:f2:7a:55:e1:97:4d:f1:56:a2:89:05:62:87:91:
18:8b:ac:7d:56:1b:80:9b:f0:5c:bb:6a:de:57:61:8e:ae:d5:
49:05:3e:9a:07:0d:9a:21:7a:79:8c:0b:fa:1e:bf:bb:f0:93:
6f:fa:3f:3d:50:f6:23:7e:fd:bc:8d:f8:4e:4f:a3:46:94:72:
07:e3:08:d2:dd:1d:21:6b:74:b1:3c:dc:a2:33:6f:c2:05:57:
25:72:4e:b0:24:f4:8a:c5:52:56:d8:f9:85:9e:0b:43:53:8c:
00:46:3d:be:df:e4:80:64:ca:3d:98:05:a4:99:81:d6:bb:1d:
29:dc:1d:c3:ce:6d:9f:93:66:cd:0c:96:4e:b5:da:ed:50:1b:
28:be:9e:0f:5e:95:85:fd:14:87:dc:88:17:c9:f2:af:22:3b:
6c:01:e5:45:fa:d5:b1:1d:1f:bb:af:78:ce:ea:51:cf:5e:8c:
78:fc:10:c3:db:3b:b8:33:15:81:c1:a6:7b:83:4c:68:70:3d:
d8:c2:f6:f2:0f:d7:2c:5c:ec:b8:2f:a9:d4:61:59:44:f6:e4:
c2:15:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:01 2024 by rpki-client on console-ams.rpki-client.org