Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/h8l1KW3xQHpiOtBYVSGaj5upvlg.roa
File: h8l1KW3xQHpiOtBYVSGaj5upvlg.roa (raw, json)
Hash identifier: yfNf/3d2RSOxf8pQ+kJjOoiRz3VUBS2moAHUytnIDNQ=
Subject key identifier: 87:C9:75:29:6D:F1:40:7A:62:3A:D0:58:55:21:9A:8F:9B:A9:BE:58
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 01857079980E0951F548E7FE7F6E7CAAEFAB
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/h8l1KW3xQHpiOtBYVSGaj5upvlg.roa
Signing time: Mon 02 Jan 2023 03:14:54 +0000
ROA not before: Mon 02 Jan 2023 03:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2445
IP address blocks: 192.33.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:98:0e:09:51:f5:48:e7:fe:7f:6e:7c:aa:ef:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Jan 2 03:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c975296df1407a623ad05855219a8f9ba9be58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:92:66:e8:b1:dd:03:40:4a:a3:53:c5:0b:
9e:da:eb:48:58:3a:0b:6a:46:a5:ee:71:b8:62:63:
e1:95:d1:ca:88:2d:b8:eb:98:7f:22:c8:07:b8:ad:
50:ec:4a:bf:30:b4:87:e7:56:58:00:5b:98:07:11:
77:0b:b7:8d:9c:f7:b4:61:f5:1f:b0:28:ba:b6:dc:
14:7e:d4:e4:e3:34:6a:f8:91:29:04:6d:5f:bb:80:
de:3e:45:69:70:95:f7:0f:84:3d:cb:07:12:d4:b7:
6a:b2:f3:b2:9c:bd:fc:a8:75:b9:31:eb:0a:ea:36:
a3:d0:a5:94:02:fd:da:8e:64:04:6a:c8:5a:87:93:
c4:3b:7c:af:d8:85:a2:61:df:f4:1d:4e:ca:8f:77:
62:83:d8:41:cd:3e:ff:fd:57:43:07:28:af:cc:6e:
76:4c:37:9b:bc:35:20:fe:c1:7b:ad:e7:13:54:81:
62:38:43:31:ba:17:a9:ad:1a:31:0f:a5:93:ad:21:
b7:37:24:fe:19:84:42:28:ef:d2:84:ad:a3:18:27:
37:bb:64:5d:0d:d0:61:86:96:f0:02:87:03:db:fe:
07:d7:15:bf:52:eb:cb:03:25:81:0c:d3:42:17:3f:
0e:ea:8e:29:45:5d:1d:5b:30:4f:18:c8:b1:c3:48:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:75:29:6D:F1:40:7A:62:3A:D0:58:55:21:9A:8F:9B:A9:BE:58
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/h8l1KW3xQHpiOtBYVSGaj5upvlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.156.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6e:26:4a:77:b3:7e:fb:25:4e:5c:64:7d:d0:4f:f1:18:e8:
a7:77:df:c8:c2:7c:67:03:d8:57:2c:22:ba:bd:29:83:bb:02:
6d:2e:2d:34:bb:67:31:4f:98:fc:29:a7:20:8d:d8:00:92:ab:
d3:d9:71:b4:8c:99:1a:3d:d4:74:32:84:85:53:18:67:93:aa:
33:7b:af:ac:b5:fb:30:5a:4b:3a:72:9a:cb:c9:f5:db:f0:49:
a2:1b:a8:2b:1f:5a:7e:2d:64:3a:c2:3b:76:70:be:6f:c5:9c:
e5:c6:b5:ef:f9:22:2d:da:b5:8b:11:d7:46:ad:35:9e:32:3b:
98:51:b2:43:9b:c0:0a:37:d7:02:46:0c:e0:42:f4:5e:39:da:
dc:25:b6:f0:94:5d:7e:d8:de:07:82:82:11:90:eb:3a:40:31:
07:cd:a3:5a:f9:41:42:db:bb:f5:cc:09:88:1d:d3:c0:f2:61:
27:c0:93:2e:71:0b:dc:45:23:0f:db:c5:d8:a9:29:7d:1a:2f:
13:ce:2a:76:5c:18:fc:0d:b8:ce:24:2b:aa:7b:d2:f6:54:82:
14:78:12:d7:03:7e:ff:4f:78:3f:43:af:7b:7d:8b:b4:12:7e:
bb:02:ad:22:43:a7:bc:fe:d0:a6:d5:73:d9:fd:98:55:13:c3:
1d:ff:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-fra.rpki-client.org