Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/HhyhpeW2U4pFQao4IRTm2R5dKpo.roa
File: HhyhpeW2U4pFQao4IRTm2R5dKpo.roa (raw, json)
Hash identifier: o4xvxF3QJR9in7JO0jhHIxawAmyqFzrOwSxrDenyzLw=
Subject key identifier: 1E:1C:A1:A5:E5:B6:53:8A:45:41:AA:38:21:14:E6:D9:1E:5D:2A:9A
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 018570DE6AFF21B1A29660A2EE8CB453C384
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/HhyhpeW2U4pFQao4IRTm2R5dKpo.roa
Signing time: Mon 02 Jan 2023 05:05:02 +0000
ROA not before: Mon 02 Jan 2023 05:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199229
IP address blocks: 185.2.20.0/22 maxlen: 22
2a02:6740::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:6a:ff:21:b1:a2:96:60:a2:ee:8c:b4:53:c3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Jan 2 05:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e1ca1a5e5b6538a4541aa382114e6d91e5d2a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:94:d3:51:96:04:15:c3:13:26:dc:bb:50:
1b:26:ff:ba:85:2d:c5:a2:c0:e0:36:69:ac:09:49:
f9:53:80:2a:63:16:81:9d:1f:f2:b3:16:9d:ab:27:
a7:b5:d0:76:36:69:1a:1e:45:c0:e3:d3:ad:17:b6:
fa:14:a2:f9:4c:db:d8:6c:aa:38:7d:0d:56:ac:3b:
1c:50:2f:7e:15:55:ae:9d:bc:83:6c:b0:5f:d1:1a:
c3:45:53:72:21:1a:91:5a:77:1e:d4:0c:e5:7a:ef:
3c:bf:ab:42:c2:b4:23:06:74:c5:8d:1b:e4:c9:40:
d9:f7:00:37:1a:72:68:ca:11:6a:9e:c6:d3:bb:bc:
cc:cd:b6:89:2e:38:31:2d:e5:1e:18:d8:cf:c0:78:
2d:d4:95:9f:37:85:c5:c2:c9:d3:40:26:a4:32:ea:
aa:2b:17:32:c7:02:21:b7:42:10:b3:aa:a7:e7:5c:
e7:b9:d4:5f:ce:54:0e:c8:cd:12:49:e0:0a:81:a7:
bc:42:b4:7a:31:e2:45:a5:f6:ad:01:c5:99:ad:b6:
a6:bf:b1:6e:2a:e1:8f:0c:97:b8:c9:f4:de:5b:ef:
e5:39:dd:53:3c:f0:4b:9c:82:ad:fd:d4:e7:db:dd:
12:e1:02:41:4d:ee:3a:04:f2:1b:ef:77:00:4a:0b:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:A1:A5:E5:B6:53:8A:45:41:AA:38:21:14:E6:D9:1E:5D:2A:9A
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/HhyhpeW2U4pFQao4IRTm2R5dKpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.20.0/22
IPv6:
2a02:6740::/32
Signature Algorithm: sha256WithRSAEncryption
6e:cc:ab:d1:ea:7b:0e:29:e1:f1:fa:56:05:5b:d7:98:ba:7b:
d9:2d:77:a6:04:06:6f:d2:21:fa:c8:40:eb:9b:d2:19:5e:08:
b4:f8:2e:2e:6c:86:5b:3e:6d:68:29:94:f8:c6:eb:60:c9:7f:
4d:21:ac:2c:04:43:2c:42:bb:04:a4:e9:c5:9a:08:1c:e1:5f:
23:c6:7c:b0:e1:e8:73:21:26:ed:ef:d6:36:7e:e2:3b:d5:97:
cc:b2:37:b4:9a:80:75:f5:f9:d8:eb:9f:5d:c3:7f:05:8d:e7:
4c:61:79:21:b9:49:ca:55:53:18:49:00:3e:6d:3d:5e:13:f6:
9d:8f:1c:2a:eb:71:0c:61:a2:cc:06:02:f5:93:25:5c:57:75:
54:02:6b:49:ab:f8:70:4b:c3:a9:9a:3e:0a:af:1d:f0:14:90:
c3:40:e2:9d:fb:88:22:e0:f7:d2:02:27:96:78:85:33:9d:61:
6a:cb:85:3b:fe:65:7a:80:48:14:e0:3c:44:46:1f:ef:1f:56:
5a:6d:a4:a0:c6:8a:0f:c6:bc:71:63:82:9f:3c:ac:a3:3d:54:
c3:ee:26:13:5a:e0:63:49:cd:b1:78:a0:ac:fb:63:65:3d:d9:
37:4c:b9:ce:07:56:97:63:9a:83:ad:dc:3a:be:62:bb:e4:ca:
a4:cf:bf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:01 2024 by rpki-client on console-fra.rpki-client.org