Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/HJqzJPjsq7FqfaUKNgf2Xq-LwqM.roa
File: HJqzJPjsq7FqfaUKNgf2Xq-LwqM.roa (raw, json)
Hash identifier: vqC/GrDBlfWGIuTPbEFQxxU6azU04IxuytVwhqO23C8=
Subject key identifier: 1C:9A:B3:24:F8:EC:AB:B1:6A:7D:A5:0A:36:07:F6:5E:AF:8B:C2:A3
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 018CC8DEFBBB64D41EADFF78BA2B9F98BADE
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/HJqzJPjsq7FqfaUKNgf2Xq-LwqM.roa
Signing time: Tue 02 Jan 2024 06:31:45 +0000
ROA not before: Tue 02 Jan 2024 06:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 185.135.221.0/24 maxlen: 24
185.135.223.0/24 maxlen: 24
185.135.220.0/24 maxlen: 24
185.135.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 19:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:fb:bb:64:d4:1e:ad:ff:78:ba:2b:9f:98:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jan 2 06:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c9ab324f8ecabb16a7da50a3607f65eaf8bc2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:27:29:1a:6b:e1:33:89:4a:8f:30:4d:23:
5d:94:e8:80:8d:1d:4e:4b:29:92:c9:98:67:ff:17:
37:d5:e9:c8:09:c8:be:1f:2c:70:10:62:64:72:bd:
7b:8d:d4:d8:8d:48:b6:ac:2f:81:22:cd:04:eb:cf:
f1:86:fb:ec:04:eb:2b:db:5e:46:f7:4c:ae:14:16:
c1:19:11:e3:18:14:b3:d8:b5:3e:2f:6a:82:10:1d:
65:82:a0:66:21:15:74:5e:0b:3b:d2:09:c4:3d:31:
77:97:53:86:15:ba:a0:a4:ce:f6:e5:8f:6d:d7:fa:
63:f6:dc:5e:c3:9f:82:79:e3:04:41:b3:61:aa:f7:
c6:8d:39:b1:aa:4a:c5:1f:e8:f0:49:8d:01:d5:86:
75:42:7d:fc:cc:c2:37:91:a0:8b:11:d3:75:de:90:
ea:f8:a2:cf:63:01:7f:63:90:4d:56:b9:b5:c3:ee:
38:d4:a7:92:95:4d:9e:79:43:3e:c8:90:74:81:08:
bf:5e:9b:43:5b:e2:5b:37:c9:73:67:f9:e1:98:1c:
8f:b1:d4:7d:ef:0f:88:29:35:34:3d:ca:68:e9:10:
79:de:a8:a3:d6:9a:d6:b4:27:9a:b2:8f:e7:87:fc:
f3:90:ae:55:4f:0d:42:8a:53:94:17:b1:be:51:41:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:B3:24:F8:EC:AB:B1:6A:7D:A5:0A:36:07:F6:5E:AF:8B:C2:A3
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/HJqzJPjsq7FqfaUKNgf2Xq-LwqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ee:9c:da:99:7a:83:17:ba:14:5f:31:05:3b:ac:78:68:9e:
35:1c:ff:14:82:a9:bc:02:49:25:d8:c3:50:90:61:ee:c4:c7:
8a:cb:6f:c4:57:d0:c5:40:d8:96:11:23:ac:89:a1:98:f7:82:
20:19:0f:78:74:8d:20:14:a2:c1:1a:d6:95:e5:0d:c2:8a:d3:
4f:98:8d:e7:47:c3:25:75:b0:de:11:af:fa:06:f3:48:97:c0:
ec:f0:1e:c7:c1:f6:b2:f7:6d:a1:a5:b5:23:23:20:e7:fc:cd:
2b:d8:dc:01:b3:4a:b3:e7:ac:c4:85:6d:4c:80:fd:b6:52:d1:
3b:80:84:c7:04:67:a8:30:2f:a0:be:3c:61:85:1b:21:68:82:
e6:3a:b3:21:f2:19:e0:9b:46:f7:2b:3d:fa:4f:58:9a:9c:ad:
36:0b:bd:44:73:10:40:fb:2c:67:99:f0:42:a5:de:45:91:73:
07:23:09:94:4f:f0:79:8c:07:21:0b:1c:08:76:73:eb:ef:d9:
ac:57:66:ed:e4:8c:04:f7:8a:b7:21:1a:dc:1f:18:ad:16:34:
83:d3:13:61:51:22:08:04:1d:92:7e:c8:3d:be:cd:93:a2:f5:
09:fc:04:b6:17:8d:1a:5a:3c:61:9d:8b:18:10:6c:93:8b:18:
a7:44:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:02:27 2024 by rpki-client on console-ams.rpki-client.org