Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/Hk0h-9Ec_nks6L4vjghA55lhNa4.roa
File: Hk0h-9Ec_nks6L4vjghA55lhNa4.roa (raw, json)
Hash identifier: ZvaGDpKES14CrnUGlzB0jX+qbcD36q/GD+VLWMYIAKI=
Subject key identifier: 1E:4D:21:FB:D1:1C:FE:79:2C:E8:BE:2F:8E:08:40:E7:99:61:35:AE
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 018570FBCA9D144545144021A0E459736FA0
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/Hk0h-9Ec_nks6L4vjghA55lhNa4.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210791
IP address blocks: 92.119.96.0/22 maxlen: 24
185.32.136.0/22 maxlen: 24
185.78.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ca:9d:14:45:45:14:40:21:a0:e4:59:73:6f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e4d21fbd11cfe792ce8be2f8e0840e7996135ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:de:6d:c8:f0:b3:b8:6e:ae:ce:cc:a5:8b:
c6:51:2d:b2:78:d8:79:f4:2d:bd:46:a3:db:31:97:
63:68:a7:b8:14:ef:dd:9a:4f:2c:ac:8a:e2:77:10:
7b:03:3e:94:29:1b:4d:58:e2:be:79:d4:86:df:96:
c4:6a:d8:c3:3a:b1:4a:d8:02:b4:80:af:64:b4:43:
3b:ec:ee:02:de:62:45:fe:32:45:18:5c:02:c6:e1:
b3:41:9e:42:90:1c:82:84:b7:8a:14:30:50:8d:c5:
2c:b0:2e:f4:34:bf:87:77:e1:c5:dc:51:1d:c0:c0:
ee:02:45:d3:1b:56:bf:e0:df:23:d1:77:40:f4:e5:
fb:1c:b0:76:11:48:11:95:12:3a:b2:94:c3:6b:b8:
6c:3d:ad:b2:08:ad:35:5c:81:4e:81:1e:98:30:f7:
7c:37:3a:c8:1a:de:1a:39:05:17:4c:97:a8:ed:e0:
93:88:3a:83:13:ec:28:3f:52:24:f9:a7:97:8e:e8:
e1:ef:1d:9e:91:26:00:ff:56:3f:2f:89:f0:df:8c:
55:56:7e:d9:8d:a1:3e:dd:df:de:0d:bf:39:11:46:
f9:4e:cf:a6:28:f5:17:2a:70:aa:b5:ca:80:d3:0e:
d9:0d:15:ad:14:d0:5c:e4:48:ca:80:a4:99:1f:1f:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:21:FB:D1:1C:FE:79:2C:E8:BE:2F:8E:08:40:E7:99:61:35:AE
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/Hk0h-9Ec_nks6L4vjghA55lhNa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.96.0/22
185.32.136.0/22
185.78.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:b0:ce:00:4f:ea:21:2c:65:8e:ac:bb:69:4b:0f:eb:ee:6f:
2e:58:03:79:5e:a9:da:f1:ed:9d:bf:9a:f7:95:67:84:de:04:
44:03:40:84:b1:89:7e:36:76:ab:f4:af:88:5f:5e:45:3d:e0:
27:d3:6a:68:f8:d9:e9:2a:0b:11:e3:bc:81:da:b8:de:6f:2a:
2a:d2:bd:be:ae:9a:f3:62:6d:fd:c5:fe:42:f7:c0:d0:5e:b4:
f2:ef:ed:fa:62:3d:4b:08:7f:29:b4:d3:90:bc:08:5d:a0:4c:
d9:a3:64:ca:07:9e:ab:9a:06:bf:e4:64:a7:d4:59:42:7e:59:
df:d5:cd:7b:9c:91:df:60:97:87:82:1e:a2:0a:97:c2:b9:36:
f6:c8:fb:c2:e4:53:c1:cd:4f:89:38:f1:d6:57:2e:25:97:f5:
26:0b:6c:bd:9e:66:02:34:4a:f7:41:13:13:e5:b7:a0:3b:95:
eb:04:1c:1b:04:b6:23:a2:33:a2:74:9e:c2:d6:22:cb:c5:ea:
7f:79:73:bb:24:bd:42:b0:21:03:98:b4:d5:8e:07:d2:df:0a:
ac:dd:62:e2:e6:39:0a:3c:99:5a:cd:bf:fe:3f:21:4c:47:85:
27:bb:29:6f:9f:44:b8:01:9d:14:4d:83:da:ed:d6:04:f3:1e:
01:56:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:14 2024 by rpki-client on console-fra.rpki-client.org