Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/HN8CxwP5jNfyyFEA9bVwibjsvx8.roa
File: HN8CxwP5jNfyyFEA9bVwibjsvx8.roa (raw, json)
Hash identifier: TO69kQCKHrcbyQCijHBtRzhWz+Ita46Tjjx2cH6JMlo=
Subject key identifier: 1C:DF:02:C7:03:F9:8C:D7:F2:C8:51:00:F5:B5:70:89:B8:EC:BF:1F
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 01856D661E390BB3540ED588168C1BD4DAED
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/HN8CxwP5jNfyyFEA9bVwibjsvx8.roa
Signing time: Sun 01 Jan 2023 12:54:46 +0000
ROA not before: Sun 01 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20910
IP address blocks: 178.213.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:1e:39:0b:b3:54:0e:d5:88:16:8c:1b:d4:da:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Jan 1 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cdf02c703f98cd7f2c85100f5b57089b8ecbf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:6d:dd:25:f3:cc:73:00:9c:f6:4e:cb:af:
b5:76:2b:3b:4d:11:d4:e2:94:d4:65:8d:dd:88:76:
d0:8d:98:27:6d:04:62:b1:b7:0c:92:42:64:90:e8:
c7:1a:c0:66:ad:41:b5:d3:15:22:9e:a3:bd:41:6e:
92:aa:c8:3a:35:83:cb:ae:1c:6a:8c:72:2a:f5:c3:
0d:3c:79:fb:c7:8b:8d:6e:47:2c:ed:04:29:62:3f:
54:a9:4f:91:26:0c:44:ad:0a:3c:04:2a:f6:a9:aa:
e3:76:11:39:5e:0e:eb:bb:44:ba:99:df:d9:b4:7e:
a7:23:b8:73:64:4d:c5:f2:68:22:52:1c:93:a3:7b:
00:42:5c:29:bf:76:18:11:9e:57:9b:41:01:10:f5:
fd:ec:70:5a:bc:f5:a8:64:75:46:8b:d7:c7:f3:c9:
c2:11:a4:ba:1b:7d:50:ff:a2:4e:f0:f5:fc:d5:a0:
b0:94:8b:92:71:14:6f:60:ad:a5:ab:3a:44:01:9f:
cd:3c:c8:3d:ac:a8:00:7d:1a:60:84:3d:da:6d:3a:
50:cb:c3:d6:dc:24:da:94:6d:ae:ab:53:b3:8d:b1:
49:02:b5:c0:81:61:f5:b6:16:fa:51:67:ce:ce:93:
8c:69:0a:ee:7a:52:76:40:2e:7b:19:d4:2d:27:f5:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:02:C7:03:F9:8C:D7:F2:C8:51:00:F5:B5:70:89:B8:EC:BF:1F
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/HN8CxwP5jNfyyFEA9bVwibjsvx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:30:32:2c:53:1b:91:e2:92:9b:6f:40:a8:f4:12:66:8f:b3:
9a:c5:c3:09:24:a7:3b:78:1f:05:76:73:8b:96:34:7b:95:4e:
54:b6:64:3a:b2:6c:94:b2:ec:fa:85:5c:93:77:b1:89:32:4f:
75:95:5e:1e:87:ae:c9:4d:5c:02:9a:b3:8e:9c:a5:c3:fc:47:
33:4c:a6:74:51:f2:eb:4f:18:13:58:b6:55:d2:05:9f:cf:34:
1a:3b:cd:14:c9:a4:9f:ba:87:9a:c5:66:84:c5:e5:fd:2f:5f:
31:ee:33:30:fb:63:bf:dc:5b:93:3b:dc:cc:1e:d9:ca:11:8d:
ee:e4:2b:11:e2:5f:c0:15:83:03:1f:87:34:a8:f5:36:4f:f8:
53:7c:92:7c:9e:19:a9:de:5d:e3:35:33:52:81:01:51:cf:d4:
5f:39:2c:af:b2:e5:7b:8a:4e:a5:cf:28:bd:bb:bc:e6:7a:64:
72:d1:c3:15:e0:26:14:9d:c9:b4:a1:bc:78:d7:76:5e:c9:5d:
bc:9e:f2:0f:60:46:2a:cd:f1:93:59:e1:a8:5d:9e:22:1c:02:
12:dd:bc:f7:3e:e4:04:a5:d8:50:32:7e:24:a2:79:fd:75:d8:
0d:93:39:07:35:93:ab:20:74:75:c9:d3:d3:1c:55:f5:b8:b1:
92:f8:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:54 2024 by rpki-client on console-ams.rpki-client.org