Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hew-9HHw51PKED_bBPRzG-AySsA.roa
File: hew-9HHw51PKED_bBPRzG-AySsA.roa (raw, json)
Hash identifier: 9h8TFYzMt6PyxHXEoL6VjCqr7Mac462OvxghH0bvmSc=
Subject key identifier: 85:EC:3E:F4:71:F0:E7:53:CA:10:3F:DB:04:F4:73:1B:E0:32:4A:C0
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A4A3589C1059B55607CCF82306EAE
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hew-9HHw51PKED_bBPRzG-AySsA.roa
Signing time: Sun 01 Jan 2023 03:05:08 +0000
ROA not before: Sun 01 Jan 2023 03:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212539
IP address blocks: 37.230.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:4a:35:89:c1:05:9b:55:60:7c:cf:82:30:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85ec3ef471f0e753ca103fdb04f4731be0324ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:25:7c:7f:e1:83:bf:40:31:80:95:bd:8f:
96:84:ca:27:85:fc:77:54:df:5a:21:89:12:51:7c:
7b:e0:57:3d:95:ca:5c:d7:da:27:7f:2d:15:e7:d7:
2e:e5:60:53:0c:bf:81:5d:4a:3a:70:b6:0c:d3:a8:
18:6d:cc:9e:4b:4e:ee:cf:e8:d6:86:05:e7:12:30:
ab:50:08:1f:bd:b4:ed:f0:55:63:23:17:25:33:46:
f5:d1:15:be:44:b8:5c:03:2e:ff:fc:58:70:13:62:
e9:70:aa:9b:4f:a6:4e:96:eb:88:79:ad:74:5b:68:
4c:4a:b7:63:90:89:2d:73:d2:82:d5:13:74:ed:11:
b0:e9:3b:27:f3:da:a1:df:b6:08:c8:e2:c7:bc:f9:
6e:75:40:3a:68:57:ef:48:f5:7b:97:7e:67:75:ed:
93:09:64:ca:46:f0:37:5e:94:74:5b:2a:1c:17:4d:
48:16:b8:f5:a0:c4:28:98:33:39:ad:82:93:71:a2:
25:59:e0:e9:f7:80:d3:d1:33:48:76:58:7c:ec:8e:
dc:9a:e8:2c:26:8f:8f:fd:e0:ab:4b:da:a2:38:9d:
e0:ed:33:55:cf:88:92:0c:85:ed:4a:01:c4:fb:3a:
f9:60:e1:6a:18:16:9a:d7:7f:ed:93:6d:22:ef:36:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:3E:F4:71:F0:E7:53:CA:10:3F:DB:04:F4:73:1B:E0:32:4A:C0
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hew-9HHw51PKED_bBPRzG-AySsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:af:37:3e:b9:92:a1:b0:b9:4e:ed:79:8f:c6:b9:7e:b4:b5:
62:2a:6d:b3:e5:a6:7a:96:a7:69:12:f6:9c:94:88:b6:1b:38:
b6:7f:91:a1:4b:39:fa:67:15:44:bb:cd:bd:68:79:1e:4f:cc:
c7:db:41:83:ff:bc:b4:92:9c:58:0f:04:a3:b3:42:6e:22:35:
17:fd:08:b5:71:10:5d:8b:3c:9e:2b:41:ce:2f:36:50:6f:f4:
cd:6a:a2:d9:d5:91:4d:cd:ce:94:8d:d0:6f:ac:36:39:09:31:
d5:03:ef:7c:0b:bc:a5:3d:4b:5f:5d:f2:45:3a:43:96:56:30:
77:56:f7:94:39:e9:6a:6f:bc:06:74:07:d4:f5:99:5b:3d:6d:
c4:2a:e4:cc:ad:55:be:5c:31:21:ab:86:30:0b:d6:97:62:37:
45:48:df:a4:8e:b2:57:a7:2f:34:ac:32:0b:19:62:1b:74:c1:
14:ee:72:ed:32:a9:1b:f5:fc:36:fa:a0:48:6d:99:19:3c:8f:
d8:69:3a:89:f4:9b:41:d2:17:9c:c0:f6:1a:b2:ed:bb:23:02:
88:19:4c:b8:0c:ab:c0:e2:b9:52:19:bf:56:d3:a9:57:5d:57:
ed:15:de:0c:42:64:d4:12:72:e7:38:b4:24:79:07:66:55:0f:
e3:65:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org