Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HHO4s5I3TgHAVmr92jG5dBPCgz8.roa
File: HHO4s5I3TgHAVmr92jG5dBPCgz8.roa (raw, json)
Hash identifier: DDM6e//O/jnT987ff81BsEqawl8cm+v96t0ARYLJ/W8=
Subject key identifier: 1C:73:B8:B3:92:37:4E:01:C0:56:6A:FD:DA:31:B9:74:13:C2:83:3F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BBA39E151A373D0300C08359455B22F88
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HHO4s5I3TgHAVmr92jG5dBPCgz8.roa
Signing time: Fri 10 Nov 2023 17:13:57 +0000
ROA not before: Fri 10 Nov 2023 17:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 2.57.241.0/24 maxlen: 24
89.37.193.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 11:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:39:e1:51:a3:73:d0:30:0c:08:35:94:55:b2:2f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 10 17:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c73b8b392374e01c0566afdda31b97413c2833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:59:ad:ab:4c:9f:bc:1c:b1:1d:cc:7a:0e:a9:
b4:41:18:0e:0b:e2:05:51:a5:94:14:d5:7e:b5:e3:
64:c7:e1:e2:7d:c8:49:b9:a4:1d:45:5e:62:d0:75:
31:8f:3f:ca:2e:7c:15:89:d7:9f:22:3f:b5:99:15:
24:fd:20:a1:f7:5c:24:08:5d:03:b5:16:ef:c7:d8:
79:9f:d4:85:e6:4a:10:1b:12:18:bf:3f:01:f3:50:
66:05:3c:77:5d:a5:22:d4:25:1c:9c:3d:29:fd:87:
a6:41:6f:e5:3e:4e:95:25:9e:50:cf:fc:aa:ca:bd:
89:1b:a5:11:e1:7b:ed:9d:a5:78:79:d1:60:df:a1:
83:1a:b9:a8:d2:09:df:08:6b:98:91:51:e1:4d:1a:
13:84:39:b6:e2:c4:6d:b4:0d:7c:61:c0:b4:f4:33:
f8:6e:80:a4:24:08:8d:7d:4f:c9:23:a9:46:eb:d0:
69:cf:7f:f1:bd:43:ff:d5:c7:ca:b4:7c:c0:84:8b:
d8:16:14:ad:d2:40:e6:8e:b9:f6:38:26:65:38:0d:
ca:c2:42:c7:79:cc:ee:26:3f:10:14:18:67:74:53:
a1:c6:df:8f:68:9f:28:49:e8:59:70:e6:c9:8c:e5:
56:b0:97:9b:c5:af:10:19:25:82:ff:e1:0f:53:90:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:B8:B3:92:37:4E:01:C0:56:6A:FD:DA:31:B9:74:13:C2:83:3F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HHO4s5I3TgHAVmr92jG5dBPCgz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
62.192.152.0/24
89.36.140.0/24
89.37.193.0/24
94.176.214.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
93:af:0f:85:eb:92:ba:d4:0b:39:0f:d2:03:14:6c:15:0a:55:
ed:67:02:06:1a:90:1d:eb:3e:f9:00:c5:d8:6f:5a:a7:ea:84:
8a:67:2b:38:df:51:ec:f6:8f:46:bd:eb:fb:f1:2f:da:65:a4:
a8:a9:2e:bf:16:41:ef:a4:3e:04:40:f0:f6:6b:96:1a:a4:2a:
d4:47:70:4a:ae:44:b5:b3:13:c9:e9:a5:cd:04:ef:53:60:aa:
93:a7:59:ff:8b:1f:d9:68:2f:bf:dc:19:fd:56:ee:16:d8:7a:
88:6a:e0:d8:5f:b4:cf:d6:e6:58:5f:d9:dd:b0:26:5b:26:33:
e8:ee:29:74:74:44:a9:4b:0b:58:8b:ca:09:2c:fd:59:b6:b3:
5e:59:4d:86:12:49:fe:92:67:21:79:2f:6e:a4:b0:2d:ec:15:
70:2f:da:e8:4b:a3:0d:bf:72:b9:be:09:4f:3d:40:f7:71:7a:
60:be:aa:d0:c8:40:0e:1a:d9:e4:ac:1b:9d:5a:5f:5d:25:b9:
ec:e4:7d:ce:d1:f3:1a:cb:35:43:c7:84:ff:cf:da:57:e0:82:
ec:ec:6e:07:55:e8:41:87:06:e2:5f:e1:7c:8f:22:8e:ce:c8:
9d:2a:aa:01:be:b6:a9:5d:84:c8:93:83:99:03:6f:b1:5c:4c:
07:ad:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org