Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/HyYdu_EnQAOwY48QQ4Hr9ku597o.roa
File: HyYdu_EnQAOwY48QQ4Hr9ku597o.roa (raw, json)
Hash identifier: rtqh/BWG70ogaXa8PONa5PQQUq7sIVr8MWypQnx+dzs=
Subject key identifier: 1F:26:1D:BB:F1:27:40:03:B0:63:8F:10:43:81:EB:F6:4B:B9:F7:BA
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 018A9330988EEB9CE29E66041B582375AB2A
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/HyYdu_EnQAOwY48QQ4Hr9ku597o.roa
Signing time: Thu 14 Sep 2023 10:15:50 +0000
ROA not before: Thu 14 Sep 2023 10:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 212.34.0.0/19 maxlen: 24
185.98.224.0/22 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8::/29 maxlen: 64
2a00:18d8::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:30:98:8e:eb:9c:e2:9e:66:04:1b:58:23:75:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Sep 14 10:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f261dbbf1274003b0638f104381ebf64bb9f7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:ef:04:a7:8d:16:c8:86:21:b3:4f:01:08:
ed:fe:6e:df:47:30:9e:28:14:b1:da:40:67:d2:0a:
2f:c4:c3:39:64:68:fd:b0:4c:88:85:86:e9:61:25:
6b:a4:5b:22:38:03:85:46:cf:e3:53:bf:8e:7c:7a:
c9:85:2c:ad:a8:52:52:03:1d:7f:30:11:24:83:34:
14:91:c5:e1:90:52:1e:74:cd:f0:44:e1:21:b1:33:
93:0b:91:00:34:29:87:f8:21:6f:cc:47:0b:7d:a1:
2b:d9:f8:dd:96:0f:2d:0b:26:64:73:f4:e5:c5:11:
80:40:21:3a:06:79:91:40:56:a1:e8:44:71:63:bf:
67:e7:06:25:48:41:fb:61:a1:22:62:f9:45:1f:c5:
06:a8:33:35:54:ac:44:1d:b9:cf:1b:7e:1f:37:b9:
43:c1:59:1b:c3:47:c3:83:99:cd:28:0f:78:70:88:
f8:33:ee:10:1e:f2:0d:ef:99:3f:d7:9a:70:90:3d:
1c:cd:91:39:24:ec:73:17:a6:3d:5b:a9:0b:a0:ba:
fd:95:b9:70:01:1f:fe:c7:a7:80:af:ac:ec:bd:2c:
20:a2:29:41:16:bf:08:27:af:55:4e:23:6b:c4:fd:
05:b5:63:93:63:7d:e0:ef:0e:0a:87:1a:01:3c:05:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:26:1D:BB:F1:27:40:03:B0:63:8F:10:43:81:EB:F6:4B:B9:F7:BA
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/HyYdu_EnQAOwY48QQ4Hr9ku597o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/29
Signature Algorithm: sha256WithRSAEncryption
3b:a7:32:9b:bf:83:d0:26:85:9e:96:57:fe:bc:d6:a5:b6:cf:
93:f8:0e:38:1f:66:52:85:1d:34:cf:b5:36:69:0c:9a:b9:52:
25:7d:c6:4b:e9:50:d7:14:ae:27:96:05:21:fb:5b:90:33:c3:
89:d9:0e:f6:5a:b9:b9:a2:b2:27:67:0e:14:49:64:d6:e9:35:
dc:48:6c:df:a7:b0:2f:15:8e:c3:e3:a2:04:e9:4c:1f:5d:8e:
b6:d8:b1:5a:6b:5d:dd:95:fe:c9:07:9d:cc:53:43:b1:ed:9d:
3c:3b:1f:87:f5:75:8e:71:91:9b:d7:20:a3:1b:02:51:0b:7c:
24:2b:1c:7d:2c:fd:ee:fe:9a:59:f6:e1:ad:d6:1a:2e:8e:93:
db:90:9e:c0:f6:32:36:d1:93:28:dd:46:a5:64:1c:e2:e3:9d:
2e:de:50:99:54:c2:d6:ff:1d:90:60:34:58:58:83:f9:02:93:
ad:51:91:75:d9:f0:9f:6d:5f:27:08:9d:3c:7e:68:78:90:45:
b9:b4:76:ca:97:aa:4f:d3:d3:25:ee:08:81:5a:3d:0e:7b:6d:
f2:4f:d7:26:e6:87:b1:d2:64:36:1f:c0:99:dc:42:3b:17:1b:
5b:77:64:31:c8:a4:aa:6a:9d:5c:9d:e1:f2:e1:b3:a4:09:df:
5f:13:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:16 2024 by rpki-client on console-fra.rpki-client.org