Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fhlacHutYy8OokoSx5IqZbtu4LI.roa
File: fhlacHutYy8OokoSx5IqZbtu4LI.roa (raw, json)
Hash identifier: 4p4t7r4nRrREOT1hnYrnykFEqN4takHPQCea6CGXnT4=
Subject key identifier: 7E:19:5A:70:7B:AD:63:2F:0E:A2:4A:12:C7:92:2A:65:BB:6E:E0:B2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5014A6085617A23576645716C6D5CDA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fhlacHutYy8OokoSx5IqZbtu4LI.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 84.32.220.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 11:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4a:60:85:61:7a:23:57:66:45:71:6c:6d:5c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e195a707bad632f0ea24a12c7922a65bb6ee0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:07:87:73:92:31:9c:e9:b6:ef:f8:aa:8e:
38:b2:cd:fe:cf:a8:09:63:05:77:93:58:c9:f4:8d:
80:e7:39:ca:06:c9:62:ba:8d:29:ab:f6:ed:49:03:
7c:48:56:47:78:b6:19:ca:b0:9d:47:f8:f7:76:62:
c3:d3:f3:1f:12:d6:ea:db:32:bd:c6:a0:26:e3:49:
1b:eb:39:bd:33:1c:98:ff:f3:c7:e2:2e:d0:7e:65:
4e:54:f9:7d:22:2e:a5:0c:77:95:ad:8a:05:85:dc:
1a:91:f7:40:5f:a5:c2:26:a1:11:af:56:d4:06:c4:
19:69:21:3a:e7:d8:dd:20:55:6a:97:b1:29:b2:fa:
e2:f3:2c:5e:39:05:e4:f3:74:f1:33:7d:e6:46:10:
85:71:49:1a:fa:f1:5e:f6:0a:3c:91:53:22:81:21:
93:94:47:52:31:bd:0f:61:48:59:54:e3:50:a2:6d:
78:28:4b:2a:05:38:18:e1:17:5d:14:3b:0a:64:8b:
07:85:ae:33:aa:ee:aa:f5:9d:87:8e:f1:49:ca:3f:
d1:dd:ac:3f:bc:d8:06:16:a9:74:34:89:76:99:8e:
ff:a8:55:98:64:83:54:25:fb:cd:32:51:73:84:8a:
c7:04:09:f5:c9:53:3c:29:1e:58:c2:ea:b1:60:0f:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:19:5A:70:7B:AD:63:2F:0E:A2:4A:12:C7:92:2A:65:BB:6E:E0:B2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fhlacHutYy8OokoSx5IqZbtu4LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.220.0/24
84.32.231.0/24
Signature Algorithm: sha256WithRSAEncryption
58:cf:0e:ee:92:71:09:4b:bd:29:04:f8:7f:ce:3d:30:80:72:
ef:07:aa:eb:68:b3:48:1b:8c:e1:e4:3c:7d:31:a6:02:64:39:
68:6f:82:5c:74:43:5a:4e:a9:61:7e:5c:00:b8:c4:7e:69:79:
07:6a:41:b4:6a:6d:1b:4a:61:b3:1b:aa:6b:49:02:fe:8c:79:
69:fd:e6:6d:93:f3:34:52:00:a3:cd:38:38:d2:49:ae:d2:55:
f9:1a:29:3c:bd:85:6d:59:28:1f:d0:87:e5:03:cb:59:38:49:
6d:22:a1:2d:2c:cf:17:7b:85:90:fd:b6:f5:02:40:43:c3:e0:
e4:39:d4:d0:b1:11:8d:59:1a:cd:90:f7:1e:f3:3c:e3:61:0d:
c9:87:e5:9e:0a:aa:09:d3:79:e3:e6:9c:4c:fb:df:d7:7b:19:
50:e5:4f:0e:7c:6c:42:fd:ce:1d:5c:c3:01:3f:07:e8:fb:e2:
a6:03:b3:83:8b:8e:79:68:36:88:fa:69:ce:72:aa:26:30:67:
2f:a7:5c:e3:73:07:fd:a3:9e:30:82:c1:92:bb:c3:85:87:e5:
4d:0d:c8:98:a9:2f:6f:ff:05:ec:86:61:ab:86:12:78:fc:1c:
eb:4c:2d:d2:71:22:80:84:56:26:c6:2d:02:58:37:9c:bc:52:
fb:9e:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org