Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HOBZ3Uz7J46Fi2Cg5kx8oKgdzeI.roa
File: HOBZ3Uz7J46Fi2Cg5kx8oKgdzeI.roa (raw, json)
Hash identifier: yrmWkVbFLH8/AhxSwB/yAz/cPTkinbjQ1E5IllczbIU=
Subject key identifier: 1C:E0:59:DD:4C:FB:27:8E:85:8B:60:A0:E6:4C:7C:A0:A8:1D:CD:E2
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0187B42BCC94B8F00093C8CE5320712BFBF6
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HOBZ3Uz7J46Fi2Cg5kx8oKgdzeI.roa
Signing time: Mon 24 Apr 2023 16:49:41 +0000
ROA not before: Mon 24 Apr 2023 16:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.212.0/23 maxlen: 24
195.178.141.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 10:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:2b:cc:94:b8:f0:00:93:c8:ce:53:20:71:2b:fb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 24 16:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ce059dd4cfb278e858b60a0e64c7ca0a81dcde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:6f:82:3f:8d:c0:9e:ef:e6:34:38:96:6d:
ff:9b:6c:0e:fb:b0:7b:e1:18:22:60:22:a6:60:6f:
a1:5b:fd:09:30:ab:b5:0b:42:a5:ae:48:75:1e:50:
b1:35:ef:a3:84:7e:a4:d6:28:78:bb:78:a6:2e:11:
64:17:3c:b1:e3:2f:2d:c5:28:4e:2a:72:62:71:32:
28:a6:76:ea:11:57:33:b9:35:0c:e2:7f:7b:1b:43:
9d:00:0d:81:ef:f8:57:5e:b9:06:1d:06:e1:da:6a:
f8:4f:e1:72:55:72:65:18:92:11:fa:2f:1d:af:f8:
57:f2:15:52:4f:26:8e:c5:1e:13:ef:b0:0c:b1:ca:
f2:b5:6c:e2:18:1d:98:6f:af:ed:8e:61:85:28:7f:
82:af:32:ac:7b:bd:e2:a1:d7:37:9b:bc:99:ad:e3:
bb:7d:70:00:6e:b7:71:be:b8:ad:b4:12:75:ef:bc:
b4:f0:75:6a:a4:d6:02:17:03:15:29:9d:c8:87:d2:
cf:0d:c7:2e:3a:dd:31:12:fc:6e:f5:b6:d7:91:0b:
a0:e9:32:73:0f:3f:60:2e:2c:29:55:0b:18:67:c7:
31:8a:28:7d:8f:ac:7e:d5:14:e1:ff:cd:39:0a:be:
1d:f9:07:b1:9e:b1:8d:9a:e9:83:5b:98:7c:e3:ca:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E0:59:DD:4C:FB:27:8E:85:8B:60:A0:E6:4C:7C:A0:A8:1D:CD:E2
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HOBZ3Uz7J46Fi2Cg5kx8oKgdzeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.212.0/23
185.143.56.0/22
195.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:32:5c:cf:13:54:8d:dd:c2:7f:de:b9:b6:9d:9f:af:bc:3c:
dd:ee:a6:62:77:10:d6:1d:3f:bd:5a:7f:7e:17:1a:25:bf:ec:
bc:52:15:56:2e:5d:9e:3b:d7:16:0c:f6:86:87:cd:32:e0:5c:
ea:69:10:12:71:ee:8d:de:50:e5:bb:31:95:79:e1:69:f4:2e:
3d:fc:06:b9:04:bc:6c:8b:4d:e7:ad:cb:18:08:38:df:cf:97:
75:7d:5d:62:8d:86:df:8f:c5:de:ba:d8:f9:b3:b5:6f:f1:d9:
9b:c0:77:3a:1c:21:97:a7:4d:84:95:3f:7c:da:d8:bf:c4:2d:
d9:7f:f2:fe:8c:90:3b:bc:7d:3c:11:02:cb:18:da:a2:cf:e7:
8a:16:05:5c:fc:7b:f0:d7:97:56:cf:93:a5:5e:c4:f0:ad:de:
f7:5b:6c:66:8d:5b:77:4c:64:f8:1b:4c:e9:dd:b3:d3:5e:91:
90:27:b5:c7:06:53:4b:d8:ee:95:9d:67:82:23:d4:55:1a:78:
1d:cc:d9:1a:17:13:33:3a:81:7e:0d:35:3d:e9:7c:c6:e5:11:
24:17:25:9a:b9:c8:f9:66:e8:bc:7d:e4:6c:7e:b0:bd:2c:50:
23:05:8f:9f:5c:ab:1f:58:a1:31:fa:72:62:35:64:fa:c2:23:
06:69:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org