Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/HosmNocQuxiqQTN-ELjeionBzlU.roa
File: HosmNocQuxiqQTN-ELjeionBzlU.roa (raw, json)
Hash identifier: B4m6XC4FN4xytCyUdaywLnqV3y/z8H2XxTMC/BK0PBg=
Subject key identifier: 1E:8B:26:36:87:10:BB:18:AA:41:33:7E:10:B8:DE:8A:89:C1:CE:55
Certificate issuer: /CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Certificate serial: 01856E2F8CE0E3431F5C6C7AD1615251C068
Authority key identifier: 02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/HosmNocQuxiqQTN-ELjeionBzlU.roa
Signing time: Sun 01 Jan 2023 16:34:48 +0000
ROA not before: Sun 01 Jan 2023 16:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 185.76.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:8c:e0:e3:43:1f:5c:6c:7a:d1:61:52:51:c0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Validity
Not Before: Jan 1 16:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e8b26368710bb18aa41337e10b8de8a89c1ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:18:76:3b:01:69:a7:31:f2:7a:7b:7f:f9:
c4:ae:57:ce:89:04:e6:f4:8e:40:9a:5b:11:ea:71:
2b:2b:2b:f4:0f:a9:7d:16:ee:db:d9:b1:2c:d0:53:
52:3d:8e:ab:97:57:bb:88:ea:5e:f7:ff:0f:35:cb:
e8:58:77:25:09:06:74:69:5c:e6:e4:0a:75:42:55:
b4:89:dc:3a:cf:77:ab:21:04:2c:11:bf:9f:98:24:
0e:07:f6:75:bb:c4:ff:eb:7b:9c:77:2f:9f:39:3f:
87:d8:8b:35:4c:75:ae:3a:52:90:5d:00:85:eb:be:
bb:db:2a:fa:a1:f7:9b:2b:e6:3a:a2:df:7d:09:14:
8c:38:d5:e5:84:f2:f6:2b:6f:66:7a:cf:8e:6f:31:
8c:46:b1:80:ae:cb:6b:58:07:52:21:0a:dd:0a:57:
75:f9:18:61:15:2e:a3:ee:e9:7b:43:6d:c6:5e:e2:
7a:f5:2f:9b:56:15:3b:c2:18:6a:a4:c6:b7:29:ba:
9f:43:a1:04:b6:6e:9a:ac:50:18:eb:66:ee:70:34:
69:0a:7b:ff:ad:53:0d:4b:d6:8f:3c:49:d3:bb:0b:
14:30:07:0a:45:30:18:c3:18:44:06:42:26:37:7c:
b4:20:a4:1e:ca:7b:e7:ea:36:35:87:ad:2e:62:e7:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:26:36:87:10:BB:18:AA:41:33:7E:10:B8:DE:8A:89:C1:CE:55
X509v3 Authority Key Identifier:
keyid:02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/HosmNocQuxiqQTN-ELjeionBzlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ab:ec:51:ee:6f:fb:d2:89:bc:58:29:c0:83:47:38:c0:a7:
b1:57:dc:7c:cd:03:7d:c9:9d:d8:3e:87:1c:ab:26:97:ea:48:
5d:a2:f4:0f:18:c5:40:c3:3c:d4:17:0a:3a:4e:da:48:b7:ab:
c5:56:4f:9f:67:2f:e3:fc:c4:76:07:c3:14:05:f5:fc:88:d9:
a0:9a:64:aa:ad:d3:83:a1:84:2a:3b:d6:6a:76:b1:8c:8a:ec:
3c:eb:ee:b3:37:75:33:0a:05:47:cb:58:9d:18:23:67:be:d9:
e4:3d:1d:86:d7:f2:1f:21:2e:2d:01:8c:84:eb:06:13:c5:e9:
97:e8:2c:2d:c9:b3:48:f0:c3:14:6c:e5:c2:94:b2:64:c0:3c:
0d:0d:3f:04:a1:be:10:dd:ea:61:4d:fa:24:c1:b5:48:44:a9:
5d:d3:ac:3a:6e:17:5d:a5:cb:11:2b:6c:53:51:9d:d5:a6:f7:
d2:c8:f3:26:77:59:92:9b:2d:6e:84:7f:14:03:2d:91:84:fb:
db:18:dd:00:96:3c:3c:4f:d0:80:0d:6c:e5:29:f0:94:e6:62:
ce:ae:40:86:43:9c:40:6b:8d:31:a4:c5:2c:6b:22:0c:93:c9:
01:69:27:94:b9:c8:e1:d5:a5:69:39:a7:50:a1:d2:6a:0c:07:
05:ba:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:07 2023 by rpki-client on console-fra.rpki-client.org