Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HikmG9VOMAg7irfA_Ant-Fy22l0.roa
File: HikmG9VOMAg7irfA_Ant-Fy22l0.roa (raw, json)
Hash identifier: iaNr2btFanOmaWHAhxNPadzZE0Wvmwh0bbJQ7cia2As=
Subject key identifier: 1E:29:26:1B:D5:4E:30:08:3B:8A:B7:C0:FC:09:ED:F8:5C:B6:DA:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A5055F3A589994B5628834E1A411283EE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HikmG9VOMAg7irfA_Ant-Fy22l0.roa
Signing time: Fri 01 Sep 2023 10:42:04 +0000
ROA not before: Fri 01 Sep 2023 10:42:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 93.113.171.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 17:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:55:f3:a5:89:99:4b:56:28:83:4e:1a:41:12:83:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 1 10:42:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e29261bd54e30083b8ab7c0fc09edf85cb6da5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:86:ad:e2:bd:24:bf:c7:4c:d3:80:10:be:
21:c7:f0:2c:7a:36:51:b3:00:43:2e:1f:34:93:0b:
2c:a6:5a:b5:c9:0b:14:b7:16:9c:ed:1e:90:8f:53:
1b:34:bf:d7:22:41:43:04:e0:2c:d9:5a:40:92:9d:
cb:a2:b4:c3:7f:39:2b:e9:4e:43:ac:6e:82:80:f7:
12:d9:d9:70:37:69:13:98:b1:7d:93:27:5c:f2:1e:
24:e0:85:a1:db:2d:37:6f:7e:64:5a:ae:fd:cc:c3:
fe:fa:94:b4:a0:31:b0:df:ca:cc:32:be:83:b1:a5:
ae:67:a8:74:94:62:fd:bd:87:2e:20:d7:bd:25:2a:
f2:54:d8:0f:d5:bd:48:85:1c:5d:c5:ab:1e:57:ac:
ed:f9:5d:a9:cd:15:84:ed:cc:ed:3e:e1:11:b2:42:
cd:b2:df:d5:49:44:7d:2d:e4:86:37:f4:96:bd:46:
e1:c4:9a:a8:22:65:51:f2:03:8e:c0:d4:9a:79:41:
58:fd:90:99:db:7e:b2:c9:06:93:7a:5c:63:f7:fb:
c9:4f:ec:47:d3:5e:78:87:c6:03:27:86:58:35:00:
86:9f:76:06:93:f4:a1:11:0f:a5:2e:f9:28:97:b1:
58:07:4f:ee:43:24:f2:a6:96:e9:62:71:2b:fc:2e:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:26:1B:D5:4E:30:08:3B:8A:B7:C0:FC:09:ED:F8:5C:B6:DA:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HikmG9VOMAg7irfA_Ant-Fy22l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.162.0/24
93.113.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f4:71:b5:ec:47:2f:d5:44:00:68:cf:f3:a0:3b:fe:ea:f2:
06:bf:fb:59:91:51:79:fa:8b:84:ac:2a:a4:41:39:76:f8:bd:
03:d4:ec:70:9d:d9:2d:2d:31:1c:68:37:4a:2d:88:db:b5:7b:
ba:db:07:7f:14:27:3f:8f:b4:51:a2:8d:a9:15:69:7e:52:b4:
f2:01:53:5f:90:ec:b3:86:2a:19:d4:a9:6b:b4:6f:3d:85:be:
3a:19:37:6d:5d:60:eb:4a:d1:7e:b4:47:0e:4b:83:21:2a:c6:
be:91:bf:d4:49:27:12:1d:e4:48:03:26:07:7b:0b:fc:5a:52:
d2:d7:b1:c3:2f:ab:fa:16:14:54:5a:24:a2:e2:72:06:50:ee:
97:e3:b8:a5:bf:4c:f1:b6:a8:64:e8:58:b4:52:74:78:2b:b3:
cc:c0:3e:6a:bf:95:7b:55:b8:20:86:67:86:1e:42:9f:6e:49:
f7:21:41:6d:1f:f4:2e:ed:9c:13:1a:08:f4:cc:d4:f1:d3:ef:
8e:c1:6c:57:01:e5:e9:89:bd:4a:49:ae:33:c3:01:ee:7f:5c:
43:f7:ee:d5:78:df:66:94:83:e0:7a:a5:d7:1c:62:04:e7:95:
42:9b:fc:1b:b8:d7:5f:43:01:d8:55:b9:3e:4b:6c:f0:07:ac:
4a:d8:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org