Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/HPm6_QCsFlER63kxJ2czQqMoDi0.roa
File: HPm6_QCsFlER63kxJ2czQqMoDi0.roa (raw, json)
Hash identifier: uPKQIGBwnoxc/l3gGWBz4tXyi8tVnKb9LKOLPyVS2bg=
Subject key identifier: 1C:F9:BA:FD:00:AC:16:51:11:EB:79:31:27:67:33:42:A3:28:0E:2D
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 0185EE100EE3517CB51076580D58ABBFA54B
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/HPm6_QCsFlER63kxJ2czQqMoDi0.roa
Signing time: Thu 26 Jan 2023 12:31:47 +0000
ROA not before: Thu 26 Jan 2023 12:31:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 178.159.100.0/24 maxlen: 24
178.159.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:10:0e:e3:51:7c:b5:10:76:58:0d:58:ab:bf:a5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 26 12:31:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cf9bafd00ac165111eb793127673342a3280e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:bc:07:4a:f7:ec:14:0e:00:57:fd:28:50:
1e:cb:97:f5:2c:e0:08:3b:cd:34:eb:de:14:d0:5e:
40:68:6f:dd:e0:62:d9:2e:5c:3b:f4:5c:19:99:69:
b5:14:b6:de:db:57:82:81:29:01:04:61:a7:15:e7:
9f:68:62:8c:8d:5f:bb:b9:3a:fa:b7:7b:8a:1f:73:
23:d6:fa:41:45:06:e9:60:c4:69:d5:dd:1f:fc:ec:
b9:c1:76:1e:ec:d1:9f:2c:fd:ec:1a:ed:b8:33:9f:
db:23:a7:a2:40:2f:0a:bf:31:ff:35:25:00:40:8f:
8e:7e:ab:94:80:fb:fe:7a:56:93:3e:57:db:de:6c:
01:f8:ed:df:68:38:a0:ba:07:61:d6:22:cd:66:40:
58:53:ab:ab:e4:83:a0:4c:6c:f7:42:9d:f4:09:c1:
05:58:0d:6e:e8:14:73:5c:55:de:49:f2:f4:93:f1:
35:1f:94:90:22:66:24:d1:17:0e:a9:5c:73:95:d8:
07:5f:01:25:5b:76:92:17:8c:d9:d7:76:0a:29:07:
77:19:16:12:f8:be:0f:40:75:e1:c6:d9:18:88:7a:
9e:d4:f6:cc:09:40:72:f6:2e:2c:12:c6:19:a8:ba:
88:13:97:30:b1:7c:67:3f:0f:07:76:7d:fc:8c:18:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:BA:FD:00:AC:16:51:11:EB:79:31:27:67:33:42:A3:28:0E:2D
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/HPm6_QCsFlER63kxJ2czQqMoDi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.100.0/24
178.159.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b8:ab:73:0d:79:24:8e:84:fa:77:50:53:e6:89:62:17:67:
53:17:f4:4f:3f:1a:5c:d6:89:89:dc:aa:4d:5d:8d:d0:d9:20:
ab:5c:91:1e:49:7c:15:8b:65:3c:f2:65:d9:74:75:d5:11:b3:
3a:4d:90:33:51:0a:43:9f:72:98:82:7e:93:b3:51:ad:81:52:
b3:43:00:e5:8e:8e:ef:7b:07:1d:9c:0c:1e:ac:8e:e0:f6:97:
3f:79:b8:d0:f1:a5:a4:fd:d0:6d:cd:35:14:56:32:49:41:a3:
4b:fd:2f:f0:15:08:49:3f:09:02:0f:de:d2:7b:5f:6b:44:df:
d3:9a:ef:c8:a9:70:71:45:8b:2b:86:fd:33:43:9a:c1:00:a0:
c3:7e:e3:e7:57:8f:a6:82:70:5a:03:b5:77:fd:44:c5:33:ec:
03:24:c6:b5:42:44:22:a8:71:7a:87:26:93:04:10:24:6f:cc:
b9:2a:f7:dd:eb:45:3c:55:dc:13:52:cc:d7:7e:8a:5c:72:87:
9a:61:02:13:0b:22:d3:72:24:bf:83:0c:62:18:5c:f0:64:c5:
88:b5:77:67:be:a3:4a:0a:a0:42:fc:f1:a3:82:8c:40:e6:0e:
3e:94:2d:c3:d9:06:92:ce:b3:ac:53:91:29:1c:d8:bd:23:af:
c3:b6:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:30 2024 by rpki-client on console-fra.rpki-client.org