Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/HHKVY4xrC11VNoFKhsr30A-sWk8.roa
File: HHKVY4xrC11VNoFKhsr30A-sWk8.roa (raw, json)
Hash identifier: iFoCXr4tQyhXoYXYk5pH3LYugXv8+ig2t7CeRXbA/u4=
Subject key identifier: 1C:72:95:63:8C:6B:0B:5D:55:36:81:4A:86:CA:F7:D0:0F:AC:5A:4F
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 018CFC572D2F916AF93FE1FF01F9EFB2B8E3
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/HHKVY4xrC11VNoFKhsr30A-sWk8.roa
Signing time: Fri 12 Jan 2024 06:23:40 +0000
ROA not before: Fri 12 Jan 2024 06:23:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44854
IP address blocks: 185.219.6.0/24 maxlen: 24
93.114.180.0/23 maxlen: 24
2a10:e300:26::/48 maxlen: 48
2a10:e300:27::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Feb 2024 09:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:57:2d:2f:91:6a:f9:3f:e1:ff:01:f9:ef:b2:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 12 06:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c7295638c6b0b5d5536814a86caf7d00fac5a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:eb:bf:4b:3e:ee:1e:ab:c4:b5:53:ad:6b:
d5:35:38:2f:9d:e7:68:86:ab:75:0d:29:6e:e6:30:
c7:b2:c6:29:9d:cd:30:fd:24:51:5f:b1:50:99:da:
7d:1f:25:fb:80:34:67:aa:ef:36:62:d6:6e:15:57:
c0:73:ae:44:8d:c2:af:cd:60:b1:fb:94:0d:b6:9f:
b7:9a:88:54:b1:5a:4b:8d:2d:37:ec:0c:ed:a1:aa:
24:dd:91:45:73:b8:88:bb:df:d8:d1:33:04:39:0d:
79:bd:cc:9a:71:c6:6d:c3:68:04:fb:a2:d8:89:e3:
6f:2b:a1:97:1d:7c:50:82:91:5f:57:fb:b7:7b:a5:
a8:42:04:8b:2a:cf:c0:c1:ff:0c:f1:32:82:86:a7:
80:d3:93:ee:98:6f:18:a7:f3:27:79:a4:ee:44:d1:
29:a9:0d:d0:4d:48:7b:15:44:cc:42:95:11:d9:cd:
a1:c2:52:18:54:a4:9f:bc:40:4f:4d:6d:83:1b:1a:
bf:47:27:62:93:e9:87:6d:16:43:e2:ce:30:00:c3:
75:3d:05:e7:50:26:0c:9f:2c:9c:a5:65:cd:b2:71:
16:95:f6:d5:91:db:1b:dc:ad:0e:43:f4:9f:35:84:
53:53:a1:dd:25:34:d6:d8:99:92:c4:fd:ad:83:e7:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:95:63:8C:6B:0B:5D:55:36:81:4A:86:CA:F7:D0:0F:AC:5A:4F
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/HHKVY4xrC11VNoFKhsr30A-sWk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.180.0/23
185.219.6.0/24
IPv6:
2a10:e300:26::/47
Signature Algorithm: sha256WithRSAEncryption
96:a3:8c:4b:a9:35:92:5e:c5:fe:63:f3:79:f9:95:34:96:cd:
db:e9:45:cd:d8:ee:11:fe:8c:bf:ae:03:ea:99:9a:82:4d:14:
a4:d1:b8:86:1d:b5:0f:44:7a:29:20:da:cd:c6:eb:d0:99:f8:
3d:b5:83:20:8d:79:71:f4:f4:b2:6d:b4:73:8a:68:1d:52:31:
e3:2b:6e:43:28:15:d9:4c:a7:4c:34:22:90:fd:20:20:b6:66:
a7:d3:a9:38:cb:8a:98:ac:24:3b:f0:01:bb:41:f0:65:e4:c6:
8f:2b:b6:b0:65:60:59:ac:48:85:fd:06:71:0f:b5:9c:18:a8:
b7:9d:d0:b5:ef:0a:c5:30:d9:f5:37:b3:a3:17:1d:32:5e:24:
3d:2a:81:7f:85:82:7b:1d:a9:9c:ed:18:ea:9f:ef:ff:11:49:
92:54:fc:be:11:59:3b:06:7e:ce:98:80:4a:70:a2:bc:2c:08:
2c:f4:c6:bd:f5:78:7c:4d:c6:dd:a6:52:5d:36:18:a0:17:fa:
50:61:3d:79:2d:44:f8:b4:54:e6:51:74:82:e8:15:e2:21:60:
73:7f:cd:b7:87:f9:8d:6f:8d:e9:6c:60:04:8f:e8:e0:f3:33:
f5:49:85:01:dd:49:d8:74:bb:2e:08:40:5f:7b:e7:2d:d9:ea:
21:5e:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org