Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/D-HbhrPDtxcFqBdOGcEcETMigNA.roa
File: D-HbhrPDtxcFqBdOGcEcETMigNA.roa (raw, json)
Hash identifier: 7Ca2GXj+jJPFUM5lpL3zh1t6SO1upo0yQd3ZcHaFmIk=
Subject key identifier: 0F:E1:DB:86:B3:C3:B7:17:05:A8:17:4E:19:C1:1C:11:33:22:80:D0
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018CC50125969F5D80D19CE3F2B5B24A55CD
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/D-HbhrPDtxcFqBdOGcEcETMigNA.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 212.68.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 18:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:25:96:9f:5d:80:d1:9c:e3:f2:b5:b2:4a:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fe1db86b3c3b71705a8174e19c11c11332280d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ed:0c:8e:3d:06:b5:d7:01:65:03:6c:01:b7:
78:ea:83:9c:9b:e3:ab:f2:d3:df:93:8e:1b:7f:ec:
05:4f:11:43:4a:1d:f1:2a:7b:08:a4:8d:4e:22:eb:
ce:53:37:8c:97:79:c8:41:70:95:7a:d6:21:eb:73:
5e:54:49:03:12:d1:31:89:ee:56:40:36:67:ee:91:
e3:81:21:ac:53:6f:7a:4e:49:2b:bf:7a:9c:5c:b1:
b6:6b:f5:3c:2e:ba:b9:c5:b1:ba:65:e4:e5:7f:4d:
06:fe:40:28:c2:02:41:36:93:6d:84:60:1d:0f:79:
28:94:7f:37:ef:4e:1e:dc:ac:52:c0:d1:72:d8:16:
72:d2:8f:d3:a4:cb:03:37:53:02:61:ba:dc:72:73:
e2:4f:25:cd:7a:d1:a0:21:7c:6a:b6:d8:01:d1:0d:
aa:f8:7a:ee:75:7d:c9:11:22:9b:40:c4:67:82:86:
45:3c:3b:94:06:7d:7e:bf:e8:5b:2d:f0:ea:fd:27:
70:5f:d7:ae:64:a9:5d:6e:da:66:0f:db:34:b5:55:
af:9f:13:20:9a:a4:c0:d7:f2:97:e3:16:7a:f4:37:
d8:6c:d3:36:9f:40:9c:de:e9:68:96:42:c6:8e:ae:
46:ea:6a:a0:9d:d5:93:d7:44:26:a7:0c:79:dc:50:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:DB:86:B3:C3:B7:17:05:A8:17:4E:19:C1:1C:11:33:22:80:D0
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/D-HbhrPDtxcFqBdOGcEcETMigNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
15:05:8a:5b:74:be:2e:7a:b0:f3:46:1c:be:7e:bd:e0:fc:fa:
de:1c:c7:73:05:cd:bc:7a:0a:bc:92:35:db:cd:73:18:29:8e:
6f:aa:59:a0:73:ab:bf:87:a1:c3:d6:da:79:a9:61:eb:a8:84:
cf:70:48:4b:36:d7:8b:fc:22:71:69:ba:52:c8:15:bf:d7:3d:
ea:fe:29:1e:c8:e9:fe:9c:60:a4:4e:00:35:0a:fb:72:01:7f:
53:2d:fb:1d:83:cb:01:84:e9:02:ad:13:29:b9:43:9a:e0:f9:
54:9e:30:c5:ea:44:6a:40:d6:a2:88:8c:dd:46:ca:b0:8e:39:
0b:eb:50:62:74:b6:43:d9:9e:8b:66:ed:d2:0e:ea:cd:08:af:
86:55:41:54:ff:df:30:50:38:ca:9e:61:41:fd:22:ff:c7:84:
61:b1:d4:38:b2:7f:2e:6c:38:9c:f6:b1:19:b1:e3:7a:b7:31:
ed:e9:00:88:f5:9d:d8:9f:38:97:8c:8d:64:08:ab:a8:11:2b:
e0:70:d2:49:59:a1:4b:e5:1f:b4:f6:0d:39:78:ea:a4:dc:c0:
80:ca:96:ab:d1:cd:9e:eb:1f:b5:ba:d4:52:b8:96:a9:c8:9e:
74:d7:1e:4b:88:a5:ae:b6:e6:b7:c0:04:3d:48:33:51:24:32:
14:ba:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 23:38:12 2024 by rpki-client on console-fra.rpki-client.org