Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hQCoDtjy9dCbWnDlFZRhqrYI5Dc.roa
File: hQCoDtjy9dCbWnDlFZRhqrYI5Dc.roa (raw, json)
Hash identifier: yDzd4FBwhCRbndDatvJ/P5H+t8QDNcM+MkddaGHF17g=
Subject key identifier: 85:00:A8:0E:D8:F2:F5:D0:9B:5A:70:E5:15:94:61:AA:B6:08:E4:37
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6785F22C5CB8EB9B36818FB7C557
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hQCoDtjy9dCbWnDlFZRhqrYI5Dc.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 188.253.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 02:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:67:85:f2:2c:5c:b8:eb:9b:36:81:8f:b7:c5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8500a80ed8f2f5d09b5a70e5159461aab608e437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:a0:d1:8f:bb:1b:a4:14:1d:98:1a:70:40:
bc:a7:32:3b:bb:1b:25:0f:16:57:8c:6e:4d:a1:4e:
ba:69:96:f5:89:5e:bf:9a:69:fb:07:f2:af:70:09:
1d:62:e7:46:4c:e4:d1:40:0b:3b:2c:51:00:1f:37:
ce:c5:1a:d4:e8:8c:1a:46:38:ec:81:76:25:4f:15:
96:bc:ad:b1:48:e1:f3:19:08:c6:1c:7d:a8:69:ef:
50:65:8e:4a:b4:a0:9e:42:45:80:f0:84:eb:bb:51:
9f:ad:91:59:09:cc:ce:4b:13:b9:45:42:67:58:ef:
46:1d:1b:91:d9:d9:cf:2c:98:32:8e:f1:21:90:46:
3e:d2:0e:e0:b5:46:4a:4f:9b:f2:5a:b2:7b:48:92:
7d:d7:9a:6e:34:cb:ed:d0:fb:34:40:1a:45:b3:45:
2a:c6:52:9c:58:06:14:d7:9f:62:21:f0:6c:eb:78:
ed:76:46:2a:7d:5b:c9:90:9e:cd:2c:78:69:70:d9:
64:b5:8d:6b:b5:16:bb:ee:b9:1e:0f:63:0c:ca:64:
4c:8d:5c:54:7c:56:ab:d1:1a:3c:90:e4:88:47:7c:
52:b9:f6:ae:ec:ff:1a:e4:c6:28:4f:ad:8b:55:01:
a8:59:2a:b2:e4:55:11:77:bd:a8:b6:9d:5d:9b:5c:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:A8:0E:D8:F2:F5:D0:9B:5A:70:E5:15:94:61:AA:B6:08:E4:37
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hQCoDtjy9dCbWnDlFZRhqrYI5Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
26:d0:a2:2f:d3:8b:6f:f1:7a:e5:a1:05:bd:73:13:03:b3:15:
3d:c7:ed:68:08:d8:f7:08:4e:c4:9b:91:42:c6:c7:b9:c1:92:
e5:cc:60:c6:be:f8:c3:f9:e0:7d:03:6c:87:e6:4e:e7:5d:cc:
ed:8a:e5:12:51:5a:d8:7a:9c:f9:5b:5c:6e:cd:62:ce:22:ae:
74:78:2e:63:3d:0b:0f:f7:a0:30:d2:28:14:ec:0d:69:99:4d:
d2:5c:f0:6f:00:d1:14:38:7e:51:89:23:54:34:91:19:47:be:
65:c1:11:77:89:e1:d5:90:f0:dd:ae:71:4e:48:7a:80:5e:d3:
24:07:76:47:b1:a1:3e:78:ba:76:99:81:17:e5:c9:69:99:56:
15:43:2f:57:2b:21:32:e2:2a:4a:e8:68:b2:75:70:25:64:ec:
7d:6b:c5:d9:7e:89:20:ef:88:9e:26:9f:e4:06:92:e2:89:79:
a6:92:c2:25:3b:fb:1a:17:11:00:7c:6c:4b:05:d1:4c:29:fa:
03:31:89:40:c4:ad:6a:c9:2c:b5:c6:ff:02:4e:ae:b1:48:0a:
dc:82:62:38:95:0e:b9:ec:72:04:18:ed:e1:a3:f4:79:b2:24:
32:e0:9e:e0:00:ff:5f:44:36:29:28:1f:a6:7e:48:f0:73:26:
0a:b1:7e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 04:15:11 2024 by rpki-client on console-ams.rpki-client.org