Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/HognamAvLKRfgLkw87gHs1wXAes.roa
File: HognamAvLKRfgLkw87gHs1wXAes.roa (raw, json)
Hash identifier: VArqdGkj0TCWMI9WMADMXu85feYtfkRjLn55+X4vLqQ=
Subject key identifier: 1E:88:27:6A:60:2F:2C:A4:5F:80:B9:30:F3:B8:07:B3:5C:17:01:EB
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 018EA95DB3C14DD78E638871FBAFF97330D4
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/HognamAvLKRfgLkw87gHs1wXAes.roa
Signing time: Thu 04 Apr 2024 13:47:54 +0000
ROA not before: Thu 04 Apr 2024 13:47:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15694
IP address blocks: 91.150.187.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 May 2024 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:5d:b3:c1:4d:d7:8e:63:88:71:fb:af:f9:73:30:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Apr 4 13:47:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e88276a602f2ca45f80b930f3b807b35c1701eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:47:1e:24:e3:b5:2a:db:db:4a:2a:fc:7c:
d6:58:36:49:50:aa:b4:5f:89:cd:c9:83:36:f0:0e:
dd:be:b2:87:54:00:de:52:e1:32:6a:60:cb:d2:f2:
da:88:d7:fd:be:da:31:32:0c:b0:16:51:0e:a5:f6:
1a:f6:93:c4:76:f8:87:97:e9:db:81:7a:19:86:1a:
aa:83:78:e0:db:c7:2b:2b:01:36:0a:45:c9:ac:18:
aa:1f:cd:d0:9f:0a:ab:af:ed:ee:5b:f2:db:7d:5f:
ea:40:b6:c7:15:e3:ef:10:85:19:11:e9:ca:c9:9a:
57:97:6a:2c:a0:27:76:03:df:ce:b7:e6:c3:2d:4b:
6c:40:a2:7f:da:1d:1a:ee:4f:21:02:13:f4:bb:a1:
78:01:f0:a1:35:6a:c2:60:98:e7:46:e0:d0:e4:2f:
a8:b7:6d:62:b4:55:b7:09:80:8e:ac:49:d9:b4:07:
0e:5b:57:a8:f4:92:94:b1:d1:d5:f3:b4:df:72:af:
53:c7:dc:e3:29:9c:2e:04:5f:d2:d6:db:cc:31:fa:
2a:e3:a3:35:46:e6:9e:66:c9:7f:75:af:91:a5:97:
dc:ae:e0:97:8a:e9:25:9c:a4:0e:95:0b:87:4b:77:
7f:57:b2:7a:fd:1b:b4:5f:48:4e:08:fe:7e:70:22:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:27:6A:60:2F:2C:A4:5F:80:B9:30:F3:B8:07:B3:5C:17:01:EB
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/HognamAvLKRfgLkw87gHs1wXAes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.150.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c3:3f:9d:4d:5e:5d:7b:ae:e0:28:de:26:1a:2f:81:76:bb:
ef:73:61:73:2a:57:e0:ea:98:93:18:12:b9:7b:4b:0c:ff:0c:
5c:d5:1f:73:fd:ea:4b:c1:71:63:42:50:8b:2d:89:48:0a:be:
98:e4:01:25:dd:5a:e8:df:71:d4:9b:d9:4a:62:4e:00:a2:34:
e9:1f:0e:a5:7d:2a:da:d5:fd:37:a7:68:c7:c5:e7:19:6c:35:
f3:29:ca:73:ee:56:43:73:49:96:95:e9:6c:31:8d:37:c4:4e:
ac:6c:13:b6:c0:b1:c0:6e:fc:38:8f:a6:9f:33:18:ac:6d:b8:
9d:85:69:92:2f:6f:bd:64:3b:4d:8f:41:83:d0:6a:2c:28:50:
c6:51:ee:d7:e9:6d:5b:f9:ba:54:0c:86:d2:8f:a1:24:f7:b4:
fd:53:59:7a:23:51:50:44:0e:9c:a0:08:d0:a0:79:53:d2:93:
8b:51:79:ba:50:a3:36:f8:39:14:c1:5c:6b:15:72:0a:14:ee:
ef:b1:ce:31:87:ee:60:2a:2b:7f:5b:0f:5a:ea:e2:dd:ea:72:
30:cb:ab:c8:b2:e2:af:00:bd:3f:6b:69:f7:f0:4a:27:59:0c:
38:81:3b:fc:f6:86:63:df:a3:ca:00:1a:1a:07:f6:4d:56:a9:
86:43:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 16:03:27 2024 by rpki-client on console-ams.rpki-client.org