Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/HZZt_v5zoFAg47OyBcyrWfbBcnk.roa
File: HZZt_v5zoFAg47OyBcyrWfbBcnk.roa (raw, json)
Hash identifier: oMhaKT6OWCmPBQmyKsZvmv6hrNRMiCEg/kFEdq0VLTI=
Subject key identifier: 1D:96:6D:FE:FE:73:A0:50:20:E3:B3:B2:05:CC:AB:59:F6:C1:72:79
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0188B53EFAA0647B63FC4AD1482C27B0AEF4
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/HZZt_v5zoFAg47OyBcyrWfbBcnk.roa
Signing time: Tue 13 Jun 2023 14:53:03 +0000
ROA not before: Tue 13 Jun 2023 14:53:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.31.0/24 maxlen: 24
86.62.28.0/24 maxlen: 24
86.62.29.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.30.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 12:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:3e:fa:a0:64:7b:63:fc:4a:d1:48:2c:27:b0:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jun 13 14:53:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d966dfefe73a05020e3b3b205ccab59f6c17279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:0c:f6:fc:19:8a:a2:d0:9e:0c:91:90:87:
cb:97:4b:3f:db:1e:f5:e3:84:54:3f:4c:2d:01:28:
f3:7e:d5:60:ef:02:38:59:c5:87:2f:84:bb:f1:e8:
4c:77:3a:58:46:32:f3:2e:f3:70:78:1c:7e:28:79:
8e:a9:1c:ad:dc:e0:ca:9a:4a:8f:86:db:10:b5:dd:
90:4b:73:f3:cb:b2:a2:2c:8f:48:cb:9e:c0:7b:c4:
b5:b8:9d:2d:c9:07:52:f2:84:8d:27:93:ba:e3:c8:
2c:03:b3:c8:42:a6:f2:d1:95:89:ae:4c:e2:75:ae:
d7:56:6b:08:c6:57:9e:0a:3e:d0:bb:20:56:6c:e8:
98:68:94:ef:6f:dd:56:08:9b:dd:08:9c:8d:2a:84:
f9:d1:75:9c:db:a4:ed:2c:74:8b:da:97:d7:81:7c:
cf:6f:79:d7:34:37:7c:43:d9:23:11:90:b1:ef:91:
3b:8c:51:74:2f:15:f2:cb:8b:d5:32:b7:a5:cd:9d:
8a:2b:bb:cd:d7:83:0b:0b:91:ac:b4:09:47:43:7c:
08:c2:d0:41:aa:07:18:ef:9a:93:16:03:a8:42:7e:
86:81:95:39:19:4a:b0:49:ad:db:1e:9e:78:28:0b:
bb:21:86:ff:f1:96:a2:cb:cc:d2:69:8e:86:94:14:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:6D:FE:FE:73:A0:50:20:E3:B3:B2:05:CC:AB:59:F6:C1:72:79
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/HZZt_v5zoFAg47OyBcyrWfbBcnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/23
86.62.28.0/22
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:0c:fa:4c:2c:4e:5b:27:6f:ae:aa:6d:0e:33:88:64:8a:f1:
f1:fb:42:1a:9c:56:43:98:da:88:a1:d2:20:24:4a:9a:c4:a1:
05:e8:7d:03:85:a5:32:69:19:1c:2e:f2:ec:0c:2f:b7:a7:21:
80:bc:23:2e:62:b7:ea:7d:85:e8:65:a5:76:f6:72:ca:f1:50:
d6:2e:9d:6e:75:2f:9b:b7:fe:0a:e6:92:6c:f8:d6:ea:34:a5:
d1:0e:85:73:bb:f5:c3:94:0c:29:b3:95:cb:4b:a9:c2:69:8b:
5f:34:b3:36:69:64:f2:0b:d8:10:2c:5b:e6:e0:99:f3:12:5b:
aa:ef:3f:df:a3:7b:29:c2:21:14:0a:2b:98:e3:ff:cd:fc:5c:
ee:c9:f9:5f:ad:36:54:23:ef:a8:99:81:14:17:a2:c2:2d:1f:
6c:c4:27:8f:c4:6e:ff:34:d5:62:ac:c8:6a:8d:62:18:56:f1:
93:ec:36:49:f1:3c:49:8b:4b:f0:d2:7e:ca:3c:08:d2:08:18:
06:70:00:be:58:c1:41:25:67:af:d7:fa:10:37:b9:3a:6f:9a:
54:3b:0b:f2:4d:9e:98:1a:c2:b5:72:f5:a4:96:4b:32:96:5e:
bb:0c:8e:aa:03:df:c0:76:34:16:f1:d2:bf:ac:28:cf:a7:af:
2e:a2:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org