Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Hp_1uzEp4DlchxJkUnpm5tqgOWI.roa
File: Hp_1uzEp4DlchxJkUnpm5tqgOWI.roa (raw, json)
Hash identifier: QsxwbZkit8mleKsA98x2q2xpBzLEpbehZSQHlqBlXdI=
Subject key identifier: 1E:9F:F5:BB:31:29:E0:39:5C:87:12:64:52:7A:66:E6:DA:A0:39:62
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C2915C4A9BE6CD29B78076DAD86FEB35E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Hp_1uzEp4DlchxJkUnpm5tqgOWI.roa
Signing time: Sat 02 Dec 2023 05:52:21 +0000
ROA not before: Sat 02 Dec 2023 05:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 89.36.140.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Dec 2023 10:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:29:15:c4:a9:be:6c:d2:9b:78:07:6d:ad:86:fe:b3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 2 05:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e9ff5bb3129e0395c871264527a66e6daa03962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:7f:92:0b:f3:1d:f9:5e:53:da:d3:df:52:
6d:88:1d:50:f0:df:ae:75:2b:6d:1c:a6:d8:90:e0:
70:2d:20:92:b7:43:ff:d0:56:9a:4a:2a:f9:5d:84:
79:7a:64:74:0d:16:9f:6d:c0:e0:d5:10:d2:56:3e:
f7:d8:33:e8:84:69:9e:ac:05:ac:41:32:96:ff:32:
dd:ed:2f:b4:36:59:b2:8c:43:af:d9:b1:73:45:4f:
53:aa:08:f1:63:ca:91:bf:2e:58:c0:8a:20:ee:af:
09:e9:b5:42:c5:fa:88:09:f7:c0:73:66:14:e3:9f:
a3:eb:45:42:0a:c7:29:9b:c1:40:98:71:71:c8:f6:
45:7c:da:8a:01:46:d2:88:83:7a:8c:ad:2e:d2:a3:
d0:99:aa:a4:9d:d9:15:77:cc:46:f4:4d:7a:1c:55:
da:c5:61:e0:ff:d2:f9:f7:e8:ba:fe:d8:52:96:85:
d5:5c:1b:ee:64:c2:80:42:ba:c2:b7:af:ad:77:af:
40:6e:da:76:a9:6f:c4:d5:15:ee:ce:78:80:f2:87:
23:4a:73:48:06:c7:a0:a1:9f:55:9f:cf:0c:a1:a9:
8e:d2:88:5a:ae:d2:bd:ee:65:65:45:60:67:68:94:
76:d4:e5:5b:d7:50:ea:4d:ef:f0:0f:fc:17:14:e8:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9F:F5:BB:31:29:E0:39:5C:87:12:64:52:7A:66:E6:DA:A0:39:62
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Hp_1uzEp4DlchxJkUnpm5tqgOWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.140.0/24
94.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a3:5d:9d:38:6d:25:5e:7f:37:bf:bd:ce:f3:f8:35:10:5d:
f8:eb:1b:ff:bc:b5:24:e7:52:e9:c7:67:59:54:48:dd:e4:25:
c8:7e:b3:11:a3:0a:c2:cd:9e:85:12:2b:4a:1a:79:ea:1f:e1:
bd:78:8c:a8:38:de:a7:ce:59:dc:45:1a:fd:35:69:c8:5e:e4:
7a:6c:11:31:78:69:6a:c2:2e:2e:34:56:9a:03:69:55:a8:57:
18:7b:89:19:2d:fd:19:46:f4:dd:e8:6b:ac:9b:80:86:24:c0:
3b:5b:72:99:8e:6b:ba:b6:07:cf:09:50:1a:3f:2a:82:b4:dd:
1f:40:a9:15:16:00:b0:64:9d:0a:85:f2:e7:e7:a2:0a:66:33:
32:4f:67:5b:8e:6d:0b:a4:97:57:05:84:c4:2a:12:97:34:19:
89:85:d4:ec:7b:7c:92:9f:1f:f1:49:97:ca:10:ee:92:bf:0b:
48:22:59:d7:3c:6b:50:69:bb:f5:e0:2a:03:6d:73:7b:91:b4:
2c:91:3c:4e:fd:8b:19:c7:2d:12:8a:35:ac:73:c7:ba:ff:6e:
f7:ba:30:33:66:e5:10:61:89:01:d5:dc:13:e1:1a:2d:6a:0b:
9f:38:aa:be:ea:30:ac:dc:e3:6f:1e:ee:7c:02:49:16:86:08:
d9:45:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org