Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/8HNzRKDhWJOnH2olKEcRZHvsbU4.roa
File: 8HNzRKDhWJOnH2olKEcRZHvsbU4.roa (raw, json)
Hash identifier: QygeP3YSU/o2mR1ZEzYILgiBgIXVwbZKa62g313AJtI=
Subject key identifier: F0:73:73:44:A0:E1:58:93:A7:1F:6A:25:28:47:11:64:7B:EC:6D:4E
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 0186BB0D5DC5B6A6CEAE568D16FAF0AD35C7
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/8HNzRKDhWJOnH2olKEcRZHvsbU4.roa
Signing time: Tue 07 Mar 2023 07:51:00 +0000
ROA not before: Tue 07 Mar 2023 07:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48093
IP address blocks: 91.207.112.0/23 maxlen: 23
37.26.152.0/21 maxlen: 21
2a03:28e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:0d:5d:c5:b6:a6:ce:ae:56:8d:16:fa:f0:ad:35:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Mar 7 07:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0737344a0e15893a71f6a25284711647bec6d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:54:02:e4:97:28:78:3e:39:fa:18:7c:57:
11:66:d8:de:ec:38:88:b0:ee:a3:8f:28:bf:6d:df:
dc:d8:da:50:34:a6:82:fa:d6:46:16:98:7b:ed:7f:
e8:c8:4e:c3:a6:58:6b:ba:4f:7a:b3:81:9f:0e:7f:
fc:7e:51:59:33:06:83:1d:b9:28:62:de:95:01:79:
01:e1:4d:ed:f1:f6:7f:10:3b:1e:0c:dd:e8:cd:51:
23:8a:5a:70:4d:05:ef:bd:b3:11:44:98:be:26:60:
07:51:a9:60:59:f2:1e:f5:7a:83:50:cf:69:79:a6:
b9:18:da:23:01:49:68:50:d6:48:00:19:13:93:56:
6f:e8:41:44:c2:74:46:91:38:be:26:8c:44:77:d0:
59:7c:ee:79:f1:07:93:f2:27:d1:9f:bd:b3:40:38:
5c:8d:bb:b3:6b:4a:c1:c7:1b:c5:89:7e:1f:cb:3f:
e6:9b:8d:57:d6:7c:10:6f:b0:5b:5b:42:4d:cd:ef:
70:08:23:36:30:87:d8:10:1c:4a:b9:97:27:a2:18:
26:ba:47:35:7f:71:69:6e:05:42:21:21:0d:bd:22:
fe:f7:b0:e2:f1:c3:f2:45:8b:c5:19:fd:3f:9f:84:
97:99:9f:e8:35:c0:ab:2f:64:99:73:0a:eb:93:77:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:73:73:44:A0:E1:58:93:A7:1F:6A:25:28:47:11:64:7B:EC:6D:4E
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/8HNzRKDhWJOnH2olKEcRZHvsbU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.152.0/21
91.207.112.0/23
IPv6:
2a03:28e0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:92:e7:64:d5:6e:e0:2f:82:33:81:62:94:d4:d3:e9:60:44:
3a:d7:6b:7e:8a:c5:ba:89:67:0e:16:31:f2:fa:24:19:54:8b:
59:5b:00:c4:cf:d7:2c:18:f1:b3:48:fa:57:49:2f:65:5b:08:
e9:61:ca:f9:04:7a:a6:eb:77:f3:46:d8:6d:66:78:f1:79:04:
c1:40:4c:c6:7a:2e:6c:73:9c:d4:a6:2b:95:ef:66:e9:08:2e:
ae:5d:71:1f:f9:59:91:22:0f:46:40:e4:01:db:d4:4c:fa:27:
70:fc:8f:67:7a:21:e4:f6:f1:4f:64:c0:b3:9d:5a:06:e8:92:
db:f2:18:39:da:36:10:af:46:77:04:11:80:7b:b6:b2:3b:07:
2e:26:1d:16:3d:2a:d3:5e:14:df:c8:d2:e8:bb:d5:2c:fc:11:
22:61:aa:18:bb:58:5b:25:f0:db:c7:b1:9b:a6:6f:e2:8d:b8:
cd:fb:30:24:57:3d:e4:8a:a5:94:36:dd:8c:d1:0f:ee:ee:b4:
f7:69:05:b8:fb:81:16:51:f7:db:bc:33:07:1f:da:ab:82:86:
c4:d2:78:2f:19:62:16:a9:50:56:6c:ae:5e:f0:5f:d6:22:9e:
21:5c:4b:e3:0d:0f:f4:c1:9e:49:68:31:50:3a:c5:4d:7d:b7:
3d:ae:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:44 2024 by rpki-client on console-ams.rpki-client.org