Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/hbjLDEl6PP9aL-EeO7_SC4XGeUY.roa
File: hbjLDEl6PP9aL-EeO7_SC4XGeUY.roa (raw, json)
Hash identifier: 8m58scNveLct+OvN1zJJYcQO0JoBtYcAu7M/8S7HOYc=
Subject key identifier: 85:B8:CB:0C:49:7A:3C:FF:5A:2F:E1:1E:3B:BF:D2:0B:85:C6:79:46
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 0185718C2991B7EF4CBD2EEC65B046B9361C
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/hbjLDEl6PP9aL-EeO7_SC4XGeUY.roa
Signing time: Mon 02 Jan 2023 08:14:49 +0000
ROA not before: Mon 02 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204393
IP address blocks: 185.187.48.0/24 maxlen: 24
185.187.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:29:91:b7:ef:4c:bd:2e:ec:65:b0:46:b9:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 2 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85b8cb0c497a3cff5a2fe11e3bbfd20b85c67946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:81:d9:a8:05:1d:6f:ad:ed:81:01:39:57:
39:43:a4:d3:69:cb:01:c4:f2:86:bd:8f:85:8e:99:
50:8e:ad:8c:96:6d:f4:ba:82:79:b3:f4:94:17:ea:
b1:32:8a:1b:bf:a2:54:79:82:cd:a5:cb:38:47:73:
b7:93:1f:90:d1:f0:14:0b:29:de:2d:9a:dd:22:59:
c7:49:86:5d:af:0f:fc:10:c0:c4:14:f7:5a:ad:12:
32:0e:c7:a9:57:91:01:e9:96:a3:5c:8a:30:36:21:
cc:42:da:46:8c:8b:02:00:4a:69:a5:ef:34:6e:10:
d9:a6:00:21:06:d1:17:70:ea:bf:df:4d:07:ae:51:
9e:bc:21:3f:4b:25:5e:29:f4:7c:23:e2:57:41:f1:
9e:ad:85:f2:bf:c6:5d:f8:ad:13:59:79:98:ab:f2:
dd:07:5b:65:f8:ac:40:f4:cb:df:6c:d5:16:d9:47:
36:3b:b5:1a:b8:c8:db:92:f2:76:6b:5e:27:c2:c8:
08:92:f5:7b:16:a1:6d:ee:0c:65:a9:a7:0d:f6:0b:
11:d5:3b:b4:1c:7f:63:62:e3:68:53:9e:09:25:98:
6b:42:73:96:bb:24:f7:10:1f:a6:43:16:4d:d0:c6:
26:af:38:1d:32:64:48:f9:43:85:9c:65:df:4e:6a:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:CB:0C:49:7A:3C:FF:5A:2F:E1:1E:3B:BF:D2:0B:85:C6:79:46
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/hbjLDEl6PP9aL-EeO7_SC4XGeUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.48.0/23
Signature Algorithm: sha256WithRSAEncryption
18:d3:bd:64:31:10:c8:8d:7f:af:c6:3c:81:4f:91:9f:91:28:
f7:8a:ea:05:6b:1e:2b:a3:33:26:95:93:df:ad:ba:1f:22:85:
77:5c:c5:34:6b:a2:b6:c5:13:5a:2a:bf:07:e0:a8:30:e3:ef:
54:2d:af:ae:2e:53:6d:e4:36:6b:ce:5f:cd:b4:d5:8e:8d:21:
32:61:db:c0:2c:53:23:8b:59:1e:2b:81:05:06:12:39:e9:ac:
ef:44:a8:87:8e:41:5e:97:08:3f:a1:51:46:ab:09:2c:9b:1b:
d3:f7:07:50:c7:3b:07:db:68:49:4f:2d:ce:3c:60:1c:88:bc:
8e:09:24:a6:49:70:67:ac:5b:a5:06:5f:63:51:d7:7f:eb:dc:
ea:01:0a:8b:2c:ce:2e:df:80:10:80:41:ce:73:04:0e:11:b2:
a7:f4:59:5b:7d:b0:63:7d:f8:c5:4f:61:0d:a3:31:b9:84:63:
d0:8e:4d:98:48:20:f9:43:db:cc:32:49:1c:6e:e1:68:6e:a9:
09:4c:aa:8d:ab:08:f9:24:64:a2:f8:66:a1:54:1a:cd:92:e0:
72:33:fe:ae:63:35:f8:b1:13:ae:7d:77:af:a4:fc:cf:40:02:
bb:90:7e:3f:5f:65:c3:c9:d8:f1:30:61:d7:84:67:98:80:91:
22:7e:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:11 2024 by rpki-client on console-ams.rpki-client.org