Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/hIR01_iZWezHIuAS8DXvk9WndB4.roa
File: hIR01_iZWezHIuAS8DXvk9WndB4.roa (raw, json)
Hash identifier: /Sng0re8d3addmRW9J2P13A+Jo7uzRAsVNl+wyevrYI=
Subject key identifier: 84:84:74:D7:F8:99:59:EC:C7:22:E0:12:F0:35:EF:93:D5:A7:74:1E
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 018C5EDB68254D1EACF9A58F343DC9ACD6B8
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/hIR01_iZWezHIuAS8DXvk9WndB4.roa
Signing time: Tue 12 Dec 2023 16:28:06 +0000
ROA not before: Tue 12 Dec 2023 16:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47132
IP address blocks: 185.227.90.0/24 maxlen: 24
185.236.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:db:68:25:4d:1e:ac:f9:a5:8f:34:3d:c9:ac:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Dec 12 16:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=848474d7f89959ecc722e012f035ef93d5a7741e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:70:7f:e2:38:3f:07:f2:ac:89:97:e4:65:
8e:e0:0c:85:cb:34:8b:02:bd:6d:0e:f8:8b:89:d0:
6b:0c:61:dc:b6:b0:4a:36:bd:41:1f:0e:00:c9:a2:
38:30:e2:4a:e3:a2:d6:53:6c:ec:1b:e9:b7:d8:74:
b4:3d:1f:4f:81:37:40:49:f2:e6:b5:d9:e8:4c:89:
39:71:9c:64:d6:0f:e8:e1:4d:67:87:85:b1:17:84:
49:40:2a:e4:e7:c6:c0:ef:16:7e:f4:03:2a:43:1d:
97:6d:70:6d:d5:77:f3:35:38:d2:ca:95:9a:90:fa:
06:35:59:63:f6:76:aa:e1:5f:91:0c:a4:14:ab:25:
eb:50:e7:c5:71:b8:69:11:ed:5f:e5:70:a1:3e:6a:
58:b5:4e:d1:3d:de:4b:ed:c1:6a:01:f2:49:94:eb:
95:4b:1f:ce:79:9b:13:2c:c9:ff:e7:a4:79:f8:4c:
6b:25:e7:f6:41:0a:28:f4:44:be:11:b6:ae:be:40:
d6:f8:f6:a3:42:e8:b6:83:fe:4d:be:36:bc:0d:93:
55:7f:06:ae:82:5f:21:60:15:79:4f:20:25:4d:91:
17:42:c3:2f:2d:28:d3:71:59:ce:d7:ec:fa:03:51:
c3:62:62:4f:55:fb:f6:2b:22:9e:db:3c:d2:30:c9:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:84:74:D7:F8:99:59:EC:C7:22:E0:12:F0:35:EF:93:D5:A7:74:1E
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/hIR01_iZWezHIuAS8DXvk9WndB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.90.0/24
185.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
22:63:24:fc:a8:3f:e4:98:50:a3:3f:8a:a2:62:c8:85:59:0e:
9e:ed:33:f3:21:5c:7b:0c:cf:7c:7e:9e:58:9e:86:86:ab:3e:
39:12:1c:f2:ed:b0:1c:4d:11:45:c0:7c:a9:de:35:33:4c:cb:
cd:84:d9:25:75:8b:fb:40:cf:02:b9:5e:fd:41:bf:1e:55:0d:
39:15:18:7e:1a:cf:20:07:f6:e9:ac:ce:2b:84:ed:b0:c4:70:
e0:d3:53:bb:37:85:1a:54:40:aa:6e:64:8e:3d:be:89:a6:ae:
66:37:ff:a7:b5:c8:2c:a0:8a:f9:ed:d6:17:65:31:22:54:ed:
03:07:8e:eb:9c:99:aa:92:6b:5b:44:77:aa:b5:84:7a:7c:d4:
ad:f5:34:2f:d0:32:1c:55:4c:93:28:32:4f:71:5c:17:5c:6e:
07:ea:dc:4b:b5:8b:2a:7e:93:05:f0:8f:de:76:0f:e9:48:b3:
98:02:57:bb:f1:4b:b6:8c:c2:fd:75:dd:d1:cc:2e:1c:cc:c7:
67:0f:e7:c6:ee:8f:c8:f9:12:03:1e:c0:4e:40:6f:db:bf:3b:
12:62:e3:6c:b9:06:99:35:71:5a:cd:0d:93:a4:ab:90:25:e4:
f1:46:7b:84:87:83:a2:c0:b6:8d:8a:3b:9a:01:1f:3d:b6:7d:
d9:01:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:16 2024 by rpki-client on console-ams.rpki-client.org