Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Hn8lBTENupn9PJUGop_M3G8Cqwo.roa
File: Hn8lBTENupn9PJUGop_M3G8Cqwo.roa (raw, json)
Hash identifier: chf27YlOcE96tWJa060bSo9Q+gYEarX9vfyz2BhUcgk=
Subject key identifier: 1E:7F:25:05:31:0D:BA:99:FD:3C:95:06:A2:9F:CC:DC:6F:02:AB:0A
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 018A0465F2B02775517DFCAE7AEB6B80884A
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Hn8lBTENupn9PJUGop_M3G8Cqwo.roa
Signing time: Thu 17 Aug 2023 16:48:24 +0000
ROA not before: Thu 17 Aug 2023 16:48:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59538
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:65:f2:b0:27:75:51:7d:fc:ae:7a:eb:6b:80:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Aug 17 16:48:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e7f2505310dba99fd3c9506a29fccdc6f02ab0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:f9:c8:53:93:6c:87:26:7a:ef:b2:24:08:
8a:fc:23:2d:88:fb:ca:b1:d2:9b:71:87:94:6a:a8:
bc:be:e4:33:e7:bb:4a:59:59:96:4a:77:0b:16:93:
ee:29:bc:8c:df:b0:f8:04:8f:1e:3e:32:3a:0d:91:
7f:ce:6b:24:f2:01:88:9c:f5:1d:d8:78:fd:d9:74:
69:b5:61:e6:04:39:3b:ad:92:05:f4:71:23:57:17:
eb:68:91:2e:9a:ac:85:c0:6e:2c:8a:91:31:b7:c6:
cf:59:24:ee:0c:b1:49:7a:a0:53:02:5c:d0:f0:ac:
66:3b:bb:75:77:04:1e:63:3f:ed:1d:56:9b:0f:10:
df:19:70:46:19:a6:3b:3e:c8:83:57:d5:8c:19:0d:
ae:c1:74:d3:af:9c:c6:9c:fd:2c:79:96:c8:bd:a2:
be:88:36:55:78:08:0d:8d:d9:36:75:80:be:9f:df:
aa:f3:88:ee:70:58:79:d1:16:19:33:f0:1c:23:23:
89:c1:0f:df:88:57:87:c8:af:3e:13:c2:b2:92:a1:
54:14:db:1b:6f:6f:6c:0f:99:ff:c1:8b:ad:a2:3c:
59:17:a3:5c:e1:ca:d8:ec:73:69:0a:6c:a2:46:e5:
11:b8:60:02:28:6b:d0:dd:73:25:17:98:3b:38:5c:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7F:25:05:31:0D:BA:99:FD:3C:95:06:A2:9F:CC:DC:6F:02:AB:0A
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Hn8lBTENupn9PJUGop_M3G8Cqwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c0:64:d9:3f:c5:74:d5:19:e4:ec:81:9f:76:7e:8e:72:db:
9a:89:74:c7:36:2f:7b:8a:97:e5:22:01:05:00:fc:94:68:28:
43:56:e0:ae:0f:08:8c:2f:29:b4:b6:7d:07:07:e7:ee:ba:79:
d4:8d:a8:de:85:ce:0d:e7:72:5d:c3:8d:64:df:ea:43:05:59:
b7:0b:d0:dc:32:26:0b:aa:e0:c9:2d:a8:db:00:f8:a6:81:60:
e9:b8:c6:b7:3a:ab:17:e4:32:40:bb:da:20:68:23:b9:5a:64:
66:20:db:cd:de:49:24:39:39:e5:ec:86:4f:b5:12:1f:db:fc:
26:ba:c0:cb:19:a1:59:bb:cf:0b:66:0b:20:f3:fa:8d:5b:be:
1d:3f:bc:47:9d:77:61:4b:bd:f9:42:19:8d:a3:a7:65:ed:7e:
7c:60:dc:34:f3:29:a9:c3:80:9c:b1:ba:02:19:a4:47:65:67:
89:4d:2f:bd:bc:c8:55:20:aa:78:f9:17:5f:27:d6:82:21:b6:
5d:a7:08:6e:4a:ac:d9:86:59:a5:da:05:f0:bb:cf:71:64:23:
70:18:87:38:bf:57:af:69:5c:ed:c4:2d:e8:38:c4:61:8f:65:
60:3d:6b:ae:af:fb:67:e0:b8:84:ed:18:16:f2:92:f0:99:6e:
68:5b:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org