Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Hh92qS9zi_p3w6plsGkaJf_0tx8.roa
File: Hh92qS9zi_p3w6plsGkaJf_0tx8.roa (raw, json)
Hash identifier: BB9bu5T/UOhfpx+wsvTJ4JR6GxmTQM/b7lOZKrIlxSE=
Subject key identifier: 1E:1F:76:A9:2F:73:8B:FA:77:C3:AA:65:B0:69:1A:25:FF:F4:B7:1F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CAFD76622FE85B588D028F4A11196E8E0
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Hh92qS9zi_p3w6plsGkaJf_0tx8.roa
Signing time: Thu 28 Dec 2023 09:52:58 +0000
ROA not before: Thu 28 Dec 2023 09:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198685
IP address blocks: 85.142.149.0/24 maxlen: 24
85.143.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Dec 2023 10:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:d7:66:22:fe:85:b5:88:d0:28:f4:a1:11:96:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 28 09:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e1f76a92f738bfa77c3aa65b0691a25fff4b71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:c8:7f:8f:40:f2:4a:b7:c5:db:0d:5a:04:
fa:d5:b7:53:bb:61:cc:03:8b:35:cd:5a:f6:8e:ae:
2c:85:cc:19:a6:97:ff:e4:51:e8:49:69:0b:de:91:
d6:9d:c6:31:84:46:be:2c:0b:e3:52:dd:a5:81:2c:
de:b1:21:34:e2:cb:9b:1b:e9:41:a9:11:cb:ad:77:
7e:d4:84:18:10:27:66:c8:3a:9e:bd:fa:d4:e2:ef:
42:e0:c7:f2:ef:31:83:50:53:9d:59:a1:38:8e:36:
c6:87:c2:60:aa:4b:b3:af:78:c6:cf:fa:6d:d9:d2:
bb:f5:c1:fe:43:2c:ec:5b:d2:76:99:32:8f:51:2c:
61:8a:01:58:62:7c:a1:12:86:98:9a:fc:07:83:4a:
ba:a9:34:b7:63:0e:56:01:00:8c:99:55:a1:7f:6c:
da:31:1b:74:e7:6f:91:95:29:4c:91:79:c7:b8:da:
7c:da:b5:6e:3c:1b:83:7c:50:f9:3a:d8:e7:2b:1b:
cc:c6:18:f1:e0:01:75:bd:ec:8b:0b:22:9d:7d:9f:
de:71:0f:a8:fd:1f:c8:2c:b4:78:5e:33:1d:39:b1:
c4:86:1b:c0:97:75:17:be:a5:aa:81:79:d1:03:3e:
bc:ac:fd:37:24:90:96:75:65:85:82:95:9b:32:0d:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1F:76:A9:2F:73:8B:FA:77:C3:AA:65:B0:69:1A:25:FF:F4:B7:1F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Hh92qS9zi_p3w6plsGkaJf_0tx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.149.0/24
85.143.18.0/23
Signature Algorithm: sha256WithRSAEncryption
13:da:9b:c8:36:82:a9:bb:4d:38:05:3a:1d:76:52:ed:48:2e:
b3:88:02:df:69:51:84:02:8b:53:c1:d1:38:2e:29:53:83:9b:
7b:af:5f:cd:d7:90:23:ec:e2:00:04:5d:65:35:3e:f5:85:71:
a6:fa:a9:8d:bd:0c:8c:21:bc:a8:09:18:da:9f:7a:11:a0:3c:
fb:e6:11:b1:ba:d6:53:cc:11:9a:2a:91:e4:c7:35:56:3d:d3:
97:f7:93:5b:82:e4:96:49:a9:37:98:0c:0c:fb:66:54:5b:aa:
cb:b0:d5:02:8f:c4:f7:1d:2f:e2:de:e4:b8:63:3a:4e:a2:40:
f6:69:c1:ab:b3:95:dd:e5:f2:b9:9c:ec:c8:6b:d8:e1:60:39:
b4:ec:cb:fe:d0:20:93:aa:ec:5f:c9:9d:16:32:a4:89:15:be:
ac:5a:8b:78:83:9d:f2:36:6f:f8:40:70:56:4d:ac:e2:05:f5:
be:62:b7:32:73:83:ee:15:e8:54:51:d8:d2:ef:f5:4e:59:c8:
8f:78:49:aa:d9:93:1e:3b:7e:5e:ef:61:ef:80:92:2e:40:9c:
d9:58:80:a6:c0:48:03:d8:47:7a:be:94:80:16:e4:cc:c0:66:
0f:b7:8f:57:09:14:12:16:10:cd:2c:0a:1d:5f:c4:a6:85:48:
b1:fa:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org