Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/hfpWSAiJQIN_F7C0W5J5l1H8YWQ.roa
File: hfpWSAiJQIN_F7C0W5J5l1H8YWQ.roa (raw, json)
Hash identifier: CRRPGFiFgRuhEW+TidgvaJOji3ytOJKFhuLT4Y5NWJg=
Subject key identifier: 85:FA:56:48:08:89:40:83:7F:17:B0:B4:5B:92:79:97:51:FC:61:64
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 0190C0D6A1D0AE800BE9285D047DBFF56D04
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/hfpWSAiJQIN_F7C0W5J5l1H8YWQ.roa
Signing time: Wed 17 Jul 2024 13:16:49 +0000
ROA not before: Wed 17 Jul 2024 13:16:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.187.123.0/24 maxlen: 24
2a0b:9e80:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 17 Jul 2024 15:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:d6:a1:d0:ae:80:0b:e9:28:5d:04:7d:bf:f5:6d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Jul 17 13:16:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85fa5648088940837f17b0b45b92799751fc6164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:e5:16:b6:6b:68:94:dc:49:d8:e3:7c:00:
14:5e:60:b0:58:6b:ab:04:3d:c4:e0:64:2c:83:fe:
95:5c:18:ed:75:3c:da:cf:33:3a:61:d1:eb:c5:30:
e4:fb:be:56:b6:1a:f3:13:53:e9:95:16:fe:ff:37:
1d:bd:c0:e4:1a:7d:ab:a2:40:6c:a4:52:e0:fd:68:
b3:c2:0c:af:9f:c3:ce:a7:2e:2e:48:ad:91:b3:ec:
e4:3d:53:6c:fd:26:43:90:83:75:15:73:81:f4:eb:
cf:aa:ba:95:ff:83:af:7b:d2:b1:85:c9:04:a6:2f:
9c:5c:22:c5:42:69:2e:02:ce:a8:67:2f:8c:8b:f6:
3b:47:0a:ed:ca:eb:18:70:07:9c:c9:c9:39:f0:e8:
cb:98:dd:04:57:9b:61:0f:3e:2e:c3:a4:91:1b:81:
50:d9:8c:16:92:ee:02:73:ea:49:c5:67:6e:5d:28:
39:7a:c8:72:08:d9:72:40:f8:21:a7:af:59:95:43:
3c:4c:11:13:43:cf:4c:ac:b4:74:35:99:56:96:bc:
69:6b:8a:d5:42:ce:7a:8e:72:72:4f:94:6d:fb:25:
e9:40:ff:0f:dd:ca:8d:fc:00:03:2e:b2:df:30:cb:
59:b8:65:70:d2:eb:6a:b4:f0:f7:8e:1b:b5:dd:5d:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FA:56:48:08:89:40:83:7F:17:B0:B4:5B:92:79:97:51:FC:61:64
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/hfpWSAiJQIN_F7C0W5J5l1H8YWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.123.0/24
IPv6:
2a0b:9e80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
2c:df:23:46:3c:32:41:28:50:4d:11:21:2b:f8:fa:95:f5:43:
ba:2e:dc:cf:1c:fb:03:75:c7:eb:1a:cd:b9:22:ce:5e:0f:c1:
c9:62:d3:64:cc:82:9e:52:51:a1:94:ef:bb:4b:7c:bf:ed:c6:
14:21:47:3a:bd:87:b1:bf:59:6b:63:93:89:2f:04:ca:5c:03:
23:38:e9:e4:d2:79:45:71:26:0f:f8:ec:f6:ea:24:4e:db:c1:
6f:cf:ae:1e:93:2d:8b:68:37:1b:43:dc:4b:7f:d8:9c:ba:19:
d6:dc:c6:44:15:50:21:35:95:c9:2b:61:34:46:aa:c8:ae:f1:
e7:1e:06:da:02:ab:61:25:25:d7:55:22:b9:d6:29:dd:8b:ce:
51:2d:94:2b:78:6e:b1:2b:43:ff:ba:0a:ad:dd:be:9b:f1:c5:
15:46:91:30:9c:c9:b6:f4:64:28:fe:15:a5:2e:5e:ec:02:12:
1e:75:c9:1d:e6:2a:06:ea:38:93:eb:5b:f7:8d:49:38:f9:f7:
34:6f:5f:ef:e5:37:66:42:c1:66:aa:82:3d:35:d8:d3:c8:fc:
ce:05:09:03:20:0e:38:dd:6f:39:96:8b:4b:51:60:6b:66:87:
f3:6e:07:c5:8e:2d:96:ea:6e:c6:be:6c:49:39:55:5e:67:2e:
29:88:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 20:18:46 2024 by rpki-client on console-ams.rpki-client.org