Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/HDu6kEVLEALuEVX46W1arEomJ8U.roa
File: HDu6kEVLEALuEVX46W1arEomJ8U.roa (raw, json)
Hash identifier: Dvw9mHzovGajXdAYPEeaUtDL3w93QsAEpACcuvttzE8=
Subject key identifier: 1C:3B:BA:90:45:4B:10:02:EE:11:55:F8:E9:6D:5A:AC:4A:26:27:C5
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 01856DC1D0C127071F4D48775D029AAE64D4
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/HDu6kEVLEALuEVX46W1arEomJ8U.roa
Signing time: Sun 01 Jan 2023 14:34:56 +0000
ROA not before: Sun 01 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13135
IP address blocks: 192.76.124.0/24 maxlen: 24
194.55.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:d0:c1:27:07:1f:4d:48:77:5d:02:9a:ae:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Jan 1 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c3bba90454b1002ee1155f8e96d5aac4a2627c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:1b:d0:41:62:e8:01:1e:a1:48:2b:82:7d:
bf:d2:aa:1e:07:a9:11:0a:9a:d8:0c:e6:e0:ef:08:
a9:e3:07:fd:13:b1:f1:f9:d5:5c:50:dd:88:c0:de:
79:4a:19:61:a7:b7:4f:5c:08:08:37:18:20:6e:6c:
80:49:33:6e:2c:34:29:72:6f:15:fa:27:d7:84:b6:
d3:1c:ec:5f:7d:d2:62:86:dd:13:ba:e9:8f:2f:68:
95:35:10:91:3b:28:65:13:7e:d1:65:7a:2c:14:a6:
c7:f2:1e:d6:a3:fd:7e:98:54:19:cb:ac:9e:4e:ec:
22:07:69:3a:7c:62:88:19:7b:b0:98:92:08:d3:e4:
73:10:a7:69:59:a9:62:cd:bf:ee:98:3b:86:18:53:
3f:0c:9a:fc:eb:62:04:a9:65:a3:de:8c:d8:1c:b5:
08:ed:f2:e7:b0:37:5a:9d:8d:27:1d:26:05:7c:75:
93:e4:c2:7a:bd:69:45:a6:73:1a:9d:3b:c3:bf:49:
ff:08:f1:87:d9:74:36:27:76:cb:70:84:81:d4:09:
d7:e7:10:08:59:11:95:19:18:1f:82:a1:3f:2f:bf:
4a:1f:5c:36:0f:88:95:a5:94:28:82:4d:23:bb:cf:
08:47:cd:15:62:12:f9:7f:cf:64:0e:9a:b4:73:66:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3B:BA:90:45:4B:10:02:EE:11:55:F8:E9:6D:5A:AC:4A:26:27:C5
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/HDu6kEVLEALuEVX46W1arEomJ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.124.0/24
194.55.156.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cf:7a:70:52:90:ca:25:e4:36:57:9f:e2:24:3e:c2:af:19:
a1:2a:b4:f0:d6:20:ac:c5:39:fc:bc:5d:40:86:06:a4:5c:59:
50:d2:b7:13:51:0f:21:5a:70:7b:41:06:fb:0c:f5:b4:4d:1e:
d0:24:0e:8b:4b:96:48:a4:a4:74:00:e1:70:f9:a9:a5:e0:25:
06:80:96:69:b3:0b:27:db:2c:62:f8:57:65:f1:e6:1a:97:50:
e3:bf:1a:9b:92:ed:fc:94:18:c7:f2:e6:4e:8b:81:58:7e:6c:
60:ca:64:3b:59:eb:57:3e:67:37:a4:40:7e:67:3c:f1:f2:80:
dc:60:53:04:95:23:a3:f2:30:41:02:bd:7f:c6:04:a5:82:e3:
35:fc:d9:d4:26:90:ef:76:12:a2:05:ec:0c:67:20:c1:19:a5:
71:f2:1c:9a:e4:74:9e:65:e5:03:e6:05:16:e3:7b:81:d5:ec:
4d:fd:b8:db:da:a8:62:d4:43:4a:8f:d2:6b:94:ed:56:d8:ab:
8c:6d:a4:f3:b2:02:67:9c:45:0f:7c:b9:fa:27:5d:c1:ab:0e:
3b:04:fe:fc:89:86:c9:14:92:18:ff:a1:90:f0:ec:a9:ba:d5:
33:fc:7e:43:58:86:bf:db:93:81:1b:65:b6:74:97:dd:a4:41:
55:e5:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:23 2024 by rpki-client on console-fra.rpki-client.org