Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/HPcI8x1eLIeH1z_K6w8AVrm26Tw.roa
File: HPcI8x1eLIeH1z_K6w8AVrm26Tw.roa (raw, json)
Hash identifier: MdF5HoSKvwijH5n3vN/8WixFNjoZhSZrsBYWkbB4n9Y=
Subject key identifier: 1C:F7:08:F3:1D:5E:2C:87:87:D7:3F:CA:EB:0F:00:56:B9:B6:E9:3C
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570951195B961F56B4B7D2C82DC2244EE
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/HPcI8x1eLIeH1z_K6w8AVrm26Tw.roa
Signing time: Mon 02 Jan 2023 03:44:55 +0000
ROA not before: Mon 02 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212461
IP address blocks: 194.113.235.0/24 maxlen: 24
87.251.85.0/24 maxlen: 24
87.251.84.0/24 maxlen: 24
87.251.86.0/24 maxlen: 24
80.66.65.0/24 maxlen: 24
80.66.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 11:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:11:95:b9:61:f5:6b:4b:7d:2c:82:dc:22:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cf708f31d5e2c8787d73fcaeb0f0056b9b6e93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:0a:3e:5b:fc:60:08:3b:49:78:69:f5:3b:
64:57:7d:02:f3:31:20:59:75:f6:9d:62:04:e3:f8:
39:60:3a:cf:a8:56:0a:9f:84:e2:11:af:72:6c:ab:
93:14:1f:10:47:75:32:7d:76:82:5c:cd:e5:5e:1a:
5a:41:32:f0:d6:69:1c:2f:85:e1:65:b6:40:40:e9:
76:27:44:e8:73:c9:e9:27:e0:11:22:9e:78:4f:c8:
04:72:14:7f:8f:fd:d3:57:c8:a4:60:67:e7:c0:4b:
17:f6:fd:cd:af:1b:7a:1d:dc:9b:0c:fc:cc:a5:1f:
0d:1e:63:cc:4e:ae:ee:97:2f:5a:ae:54:09:4d:9f:
24:bf:44:7b:ec:30:87:c0:e8:05:57:84:1b:c1:82:
91:48:46:71:12:a9:3f:1c:70:27:7c:d7:c4:89:e6:
bd:4b:2c:e8:a1:d4:45:80:2d:2a:85:c0:a1:c1:8e:
5f:c8:97:a7:16:9a:f6:2e:86:26:8b:d1:c8:e5:61:
9a:ba:51:39:b6:b2:45:d9:ca:ea:7c:eb:28:4b:a5:
86:d7:fb:ce:9f:e9:f0:88:0f:67:b7:a0:4f:45:c9:
48:4b:99:95:63:7f:93:58:f5:8c:d3:ee:33:74:96:
9c:d6:63:44:f9:98:78:cd:ad:f3:97:af:1c:66:d6:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:08:F3:1D:5E:2C:87:87:D7:3F:CA:EB:0F:00:56:B9:B6:E9:3C
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/HPcI8x1eLIeH1z_K6w8AVrm26Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.65.0/24
80.66.78.0/24
87.251.84.0-87.251.86.255
194.113.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:78:27:4c:6a:cd:82:74:ef:04:2a:4d:73:d3:dd:7b:da:77:
f5:7a:49:ba:c1:18:78:a0:7f:1a:54:fc:1e:0c:ce:f1:62:0c:
75:e8:b3:20:f0:e8:05:86:77:c6:92:23:19:83:8b:84:59:1a:
44:d1:f1:c6:f2:2e:85:d1:f5:3c:8d:3b:af:a7:4f:a1:4c:13:
92:db:d9:b2:f7:ed:0d:09:d7:ac:f0:3f:56:c2:0d:2c:a6:f7:
9a:be:a0:4e:f3:6a:1c:91:17:69:53:06:6f:4d:6f:35:ed:a1:
b7:9e:99:17:5f:96:e8:ac:ed:0a:f9:84:ff:ca:b5:c9:a6:42:
8f:8e:a0:9d:d8:dc:29:f0:89:83:61:9e:b4:d5:62:e3:2a:2d:
2f:11:ee:93:02:ea:ee:19:fb:66:c9:f6:0e:39:56:76:97:f2:
54:c3:59:36:b9:b4:52:36:05:2d:47:ce:2e:83:6a:83:ca:00:
0b:93:11:6e:0d:b7:48:f0:5c:70:b0:be:3f:93:f5:3c:2d:65:
64:8e:74:68:95:8d:7e:f1:7e:cd:11:e7:c8:ef:4f:bd:02:9a:
97:7b:b9:ae:a8:8b:66:3b:4f:eb:8e:9f:05:9f:5d:4e:b4:68:
e1:71:b0:73:b3:b2:ea:38:eb:09:7a:ff:32:b7:96:bf:a2:06:
b2:90:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org