Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/HO-ea4UVbYRJJBC5gYYaQI2iVW8.roa
File: HO-ea4UVbYRJJBC5gYYaQI2iVW8.roa (raw, json)
Hash identifier: 7i3USasQfZWJSuSpY6S6rV+MLqdtevXTmTnMFtVOqDI=
Subject key identifier: 1C:EF:9E:6B:85:15:6D:84:49:24:10:B9:81:86:1A:40:8D:A2:55:6F
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 01856DEF689E7B6616AF9A31326240D4CFE1
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/HO-ea4UVbYRJJBC5gYYaQI2iVW8.roa
Signing time: Sun 01 Jan 2023 15:24:44 +0000
ROA not before: Sun 01 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 80.210.95.0/24 maxlen: 24
85.194.254.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:68:9e:7b:66:16:af:9a:31:32:62:40:d4:cf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 1 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cef9e6b85156d84492410b981861a408da2556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:2b:37:b8:44:e4:e0:8a:71:7c:96:a0:2a:
24:b1:ad:9a:59:31:7d:51:9e:f2:a9:4f:6e:21:79:
23:75:1a:be:da:a9:d7:30:39:38:4f:ca:89:0f:b9:
e3:fa:fd:90:75:96:2c:b0:8d:3b:f6:c9:02:60:a1:
c0:af:02:37:af:0a:73:16:09:14:90:45:a5:10:c9:
81:b2:ab:ea:61:9a:66:3b:b4:62:d6:b5:4c:60:a3:
4c:32:39:12:46:7f:5a:1c:d3:77:27:83:8c:bf:cf:
52:3d:c0:93:8e:fe:a5:f0:72:da:ea:cb:80:42:9b:
1e:9d:c2:2b:a0:7c:de:e5:3e:68:a2:d3:ed:89:a5:
56:21:8e:1a:8a:9e:df:2e:44:75:94:0a:bd:72:57:
c8:15:9b:4d:8d:87:15:3c:26:8e:e2:b8:d1:b6:e8:
22:b5:7e:0f:7c:30:0f:8b:01:53:5a:ff:ff:7d:07:
95:bb:b5:c2:5e:74:ca:d8:e2:85:58:cc:de:a2:d6:
31:30:33:ca:21:2f:ce:df:a8:56:c2:52:6c:c9:8f:
a3:ee:24:45:44:cd:c7:c0:9f:cd:a6:6e:0a:e7:53:
14:8e:07:88:c4:f4:0f:b9:e2:8f:1e:19:c7:cb:cf:
61:ef:14:cc:f4:5a:f2:95:d5:94:66:28:8d:02:65:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:9E:6B:85:15:6D:84:49:24:10:B9:81:86:1A:40:8D:A2:55:6F
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/HO-ea4UVbYRJJBC5gYYaQI2iVW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.95.0/24
85.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
90:10:a7:db:85:7b:e5:38:b6:fd:f4:18:5f:6b:88:47:a7:e9:
da:d9:b4:3c:d0:7f:96:b4:98:84:66:24:b0:8e:56:c1:4a:95:
c6:c6:a6:e3:80:b2:af:8a:3f:1d:5e:c9:64:d9:bc:9f:e1:0d:
97:76:b8:54:34:a1:68:b6:e8:68:cb:ca:4f:aa:af:59:f4:ca:
ae:a8:75:5c:78:b1:5a:da:39:f4:60:c7:d7:77:18:12:a4:bb:
01:35:c8:fe:ec:a5:04:5c:bd:5a:b8:06:3b:67:50:86:f0:20:
7b:df:f4:42:37:33:45:7b:db:df:55:0a:a4:fe:ff:c2:25:57:
0a:da:07:58:6d:c3:a0:0c:90:30:37:ee:f6:2a:41:63:47:1c:
3c:1f:a2:9a:4d:92:8b:32:94:a4:01:5a:38:68:d0:e9:7e:ce:
b6:05:8a:60:9d:65:37:9e:49:7c:f9:28:e8:20:95:7e:86:db:
d0:7d:4e:b6:3d:f8:9e:82:b1:43:fb:95:7f:97:f3:50:be:6f:
92:b0:b0:8e:66:d6:8c:b0:18:d4:5d:df:76:45:59:7f:31:21:
a7:cf:b6:82:68:32:c0:19:24:ac:8d:9c:8d:4b:58:01:f0:ac:
84:ef:74:1f:54:6d:c4:09:ec:04:8c:63:68:cf:44:d9:71:fe:
a1:c0:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:57 2024 by rpki-client on console-fra.rpki-client.org