Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hhk3UUQHUGawzDsFFusx01K3K4k.roa
File: hhk3UUQHUGawzDsFFusx01K3K4k.roa (raw, json)
Hash identifier: Re2UfPGf2PCd3xJq4ih3l/LHkhMdQmq352+1F0Te9NY=
Subject key identifier: 86:19:37:51:44:07:50:66:B0:CC:3B:05:16:EB:31:D3:52:B7:2B:89
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189CEFCD2CCDCA7BA26107940A444473C71
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hhk3UUQHUGawzDsFFusx01K3K4k.roa
Signing time: Mon 07 Aug 2023 07:53:42 +0000
ROA not before: Mon 07 Aug 2023 07:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 109.176.210.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:fc:d2:cc:dc:a7:ba:26:10:79:40:a4:44:47:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 07:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8619375144075066b0cc3b0516eb31d352b72b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:d2:1f:de:b3:25:8b:b1:3f:ef:2b:d8:e7:
43:d7:38:81:75:b1:c4:02:0d:f9:3a:6e:96:26:c9:
1d:86:fb:8d:df:05:54:ee:35:7e:f2:c4:61:d6:6a:
d2:9a:ca:f5:65:4c:fb:72:84:4a:05:3a:c4:e8:74:
b8:64:9f:78:26:1d:6b:fb:c0:fe:71:f1:55:0e:53:
e5:f4:b2:73:5a:79:95:c8:81:07:6e:31:0f:5f:75:
69:b7:b1:c0:2e:f4:00:3a:05:78:cb:5f:cd:36:c7:
b9:44:f5:88:66:14:bf:1b:4c:83:07:ce:78:cc:2b:
7a:62:b3:ce:9b:da:71:c1:bb:43:0c:3d:2f:75:87:
72:bd:41:bd:0d:36:ce:e9:10:17:4c:85:b4:e4:33:
eb:11:54:b5:5c:76:17:f1:e3:73:70:b9:d6:60:48:
71:1e:77:47:ff:0d:cf:60:36:89:b0:24:8c:bb:1e:
62:ed:e2:d9:94:96:85:f2:f3:39:fb:9f:4b:38:13:
2f:5e:d7:cb:fb:6d:33:82:a8:a9:0a:a6:97:97:b5:
c4:80:94:7e:08:b3:31:b7:4f:f7:62:39:53:69:4e:
b4:3a:57:06:7a:5f:04:e7:8e:34:8e:0e:17:e5:21:
78:09:2c:6e:61:a2:ad:a8:ab:20:2f:f8:e1:2b:29:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:19:37:51:44:07:50:66:B0:CC:3B:05:16:EB:31:D3:52:B7:2B:89
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hhk3UUQHUGawzDsFFusx01K3K4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.210.0/24
109.176.241.0/24
Signature Algorithm: sha256WithRSAEncryption
60:de:0d:47:d4:c1:7a:0c:b3:9a:9a:fe:9a:e3:df:79:b0:14:
1b:a3:b2:fe:2b:5c:07:c3:4d:e0:f9:04:3a:67:6e:17:5d:07:
90:47:61:c5:71:01:8b:48:72:a3:99:77:7f:f0:bc:61:c5:65:
a9:45:a8:54:6d:39:8f:08:77:d2:16:14:3a:f4:17:df:e9:ff:
54:cf:4c:f5:aa:d8:fd:61:75:09:d0:8b:78:e4:88:ea:b6:ea:
30:c7:1f:6e:01:4a:3a:b7:29:85:52:33:f1:10:3a:00:c4:f5:
8c:c2:a7:80:2b:5e:7a:6f:89:b5:56:1d:da:9b:ef:5e:32:99:
60:e7:fb:73:a7:95:b5:c9:fd:c2:ee:ec:63:b9:86:e3:be:e7:
59:88:e6:8c:fc:41:cf:62:2f:3f:1c:a4:96:1e:ee:98:08:82:
d3:4d:f0:54:89:f1:41:0a:05:46:b7:0e:c8:7d:b7:ee:ff:4f:
71:6b:f4:12:e5:dd:24:3d:a3:6c:22:52:9a:d9:ef:7e:09:64:
47:ea:a8:da:86:3c:0b:ef:8d:a3:14:f2:b8:7f:b9:1e:3a:43:
d3:9c:c2:b9:9f:4b:f0:91:44:eb:c8:24:d1:40:8d:cf:b6:23:
3d:a7:b9:2e:51:eb:0b:13:6d:fd:70:bd:57:47:e0:3e:46:08:
9a:56:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org