Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HNRot-R5F0LeBxM-UIM9aDiH29I.roa
File: HNRot-R5F0LeBxM-UIM9aDiH29I.roa (raw, json)
Hash identifier: vSNbnfNtHHKwDJeleXBKSvUS055hRJe0iy/rPTbhGx0=
Subject key identifier: 1C:D4:68:B7:E4:79:17:42:DE:07:13:3E:50:83:3D:68:38:87:DB:D2
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0188AE8F147B9866B076671905EC4B051147
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HNRot-R5F0LeBxM-UIM9aDiH29I.roa
Signing time: Mon 12 Jun 2023 07:43:12 +0000
ROA not before: Mon 12 Jun 2023 07:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198178
IP address blocks: 94.228.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:8f:14:7b:98:66:b0:76:67:19:05:ec:4b:05:11:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jun 12 07:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cd468b7e4791742de07133e50833d683887dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:61:77:5c:e1:d7:90:af:f7:de:0c:11:5b:
ad:b9:18:6c:e7:ba:e6:4f:f5:76:8a:7f:c4:a4:7a:
e7:e3:02:d5:f5:c5:ff:ca:e9:89:46:14:ac:6f:61:
b9:28:f3:94:75:4c:b0:0f:01:a3:ac:df:3e:c6:e9:
f4:77:9a:dd:2c:39:95:d7:e1:e1:9e:20:ec:70:0f:
7c:0d:ee:97:f7:61:a3:45:dd:30:58:d2:f7:80:a2:
0b:70:e2:6a:4e:e4:63:33:92:41:8f:8d:74:8f:b4:
bd:e1:5e:57:68:24:5f:8d:10:61:d7:74:b6:97:b2:
71:b2:8b:bd:47:f1:57:ac:52:a8:db:34:52:1e:cc:
d9:41:3a:3e:ce:af:b0:9f:04:52:93:43:89:a1:a3:
92:11:00:c7:f6:88:e4:43:07:99:c5:3d:cb:c9:fe:
73:fe:c3:65:d4:3e:d1:31:f8:3e:3f:4c:35:55:35:
a5:95:e2:75:47:a7:eb:09:ae:cb:29:3c:60:8c:7d:
cc:97:01:96:99:bc:61:b4:15:5e:c3:85:42:37:5e:
0d:53:84:d6:25:05:a9:f8:d8:fb:a4:4c:20:3a:e9:
de:32:32:a8:85:60:ba:4a:ac:ce:8b:54:ab:e9:95:
da:a4:4b:06:06:04:e2:65:6b:11:ae:79:6c:a2:f3:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D4:68:B7:E4:79:17:42:DE:07:13:3E:50:83:3D:68:38:87:DB:D2
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/HNRot-R5F0LeBxM-UIM9aDiH29I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.161.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c6:70:76:2f:33:94:9b:af:c3:3d:63:76:68:e4:13:33:50:
43:a2:5b:26:ed:56:3a:60:7a:63:51:62:ee:f6:85:21:73:ff:
1e:42:71:31:50:95:00:d2:e3:73:49:22:59:2f:57:91:05:d1:
26:b9:8a:8f:31:5a:06:40:57:17:ac:3b:27:7d:c0:58:bc:61:
32:8e:74:37:90:9e:2c:2b:bb:49:b1:bf:63:38:f2:04:87:58:
4b:16:96:ba:ce:47:cc:5d:54:06:ab:71:b9:96:ef:97:5f:0e:
04:b7:83:1a:d0:29:bd:a9:9e:8f:ef:e6:02:bd:19:ef:cf:84:
de:2c:74:93:9f:96:0f:d8:2b:ef:6d:6b:ae:c0:a1:da:99:2d:
05:4e:6a:5b:ef:7a:78:77:24:e0:b7:cc:05:9a:3d:8a:f4:5d:
96:fe:0c:52:99:44:42:f2:54:e2:47:29:98:cf:a7:1e:84:aa:
b6:66:d9:79:70:46:ec:97:5f:da:b6:8f:c9:0b:9c:41:ba:64:
56:ae:ab:66:24:9a:61:60:22:d9:9e:e9:a5:65:15:2c:81:2e:
22:c2:4d:22:a0:77:2c:03:ec:48:9c:1e:b1:b4:6c:a4:82:2d:
e2:5f:ae:cb:4c:2d:46:ef:d3:55:27:4b:f4:62:61:27:6f:50:
0f:e2:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 17:23:25 2023 by rpki-client on console-fra.rpki-client.org