Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/HhfpCyWEoiocdT1qjfYkHoJKQzA.roa
File: HhfpCyWEoiocdT1qjfYkHoJKQzA.roa (raw, json)
Hash identifier: atcHYyYjwLyecnzTdUDhe1j/io4eVgOxzRaOpocxUTI=
Subject key identifier: 1E:17:E9:0B:25:84:A2:2A:1C:75:3D:6A:8D:F6:24:1E:82:4A:43:30
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA7322715E0E11ABAC2ECB4EA9A700
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/HhfpCyWEoiocdT1qjfYkHoJKQzA.roa
Signing time: Mon 02 Jan 2023 13:44:59 +0000
ROA not before: Mon 02 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202409
IP address blocks: 185.1.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:73:22:71:5e:0e:11:ab:ac:2e:cb:4e:a9:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e17e90b2584a22a1c753d6a8df6241e824a4330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:a3:cf:59:2e:4a:d9:c9:68:3d:e3:b7:3d:
5a:80:dc:e8:54:8a:3d:ba:d4:6d:8b:fa:56:43:1b:
41:59:7a:d6:1b:f9:99:27:61:b9:e5:3a:ff:82:98:
3b:1c:3f:a7:bf:b9:ea:97:ac:88:86:0e:43:f6:87:
ad:f0:c8:0a:cd:01:0b:45:81:1d:01:8d:38:8d:79:
2f:67:79:15:69:67:82:4a:ae:c1:c0:db:0c:fc:45:
f4:c8:41:a8:ad:aa:bc:c2:59:a6:47:a4:02:6b:5b:
8f:40:aa:ba:75:d3:24:20:7b:a9:23:4d:7c:bc:a5:
ec:81:7d:6d:73:b6:dc:12:5f:8d:24:43:56:f5:11:
ed:02:19:fb:92:30:30:c5:b1:69:08:89:8a:87:ac:
7e:7e:58:b1:ca:2b:cb:57:44:3d:90:c2:5f:70:95:
da:60:22:d9:36:c5:43:3c:e1:6c:13:a3:c5:d6:d4:
74:e2:e7:d1:7d:0e:c2:34:21:7f:4a:27:6a:23:aa:
ba:71:ef:ec:74:ba:40:d1:1f:3d:fa:61:b5:01:ec:
99:f9:77:ff:c0:87:d7:4a:81:05:37:1e:c6:60:a5:
c3:ca:93:50:a4:38:28:0d:9e:5f:dd:35:71:ea:e1:
1d:dc:c8:5d:e3:72:aa:71:57:7f:e1:21:60:4a:11:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:17:E9:0B:25:84:A2:2A:1C:75:3D:6A:8D:F6:24:1E:82:4A:43:30
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/HhfpCyWEoiocdT1qjfYkHoJKQzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5e:22:79:ec:3f:46:e4:a8:60:fb:d4:19:f4:ef:d4:cb:e4:
23:46:93:4d:5a:81:72:f3:f5:99:6b:8e:4b:94:77:d3:d9:c0:
10:fb:67:ec:c1:d9:e0:75:6f:bf:47:0f:42:99:42:51:47:3e:
49:33:d7:7a:6c:f6:2e:31:ee:c5:ea:3b:29:6b:ac:1b:2c:6b:
9c:f8:ab:dc:ed:e8:0b:d9:47:c7:9d:19:c5:ba:c1:8f:f3:3f:
26:c8:9c:6f:b0:2c:d1:fc:9c:45:2e:2e:d2:ea:d9:bc:de:81:
d4:30:e3:7e:58:0e:eb:b6:c8:bb:5a:45:15:61:82:a2:e2:22:
88:db:55:3f:eb:cf:e6:b6:0e:24:99:32:e9:a4:a7:ef:47:78:
6b:1d:ac:da:b4:16:1a:f3:c1:80:a7:df:aa:4e:4f:33:39:34:
1b:21:21:a0:bd:e6:87:35:66:1f:d2:aa:75:67:a6:46:dd:cd:
6a:89:7a:f2:f9:c7:94:0a:20:29:a8:ca:97:a8:b7:06:63:bb:
7f:8a:5f:91:e2:4b:c9:58:67:1e:ac:21:4d:34:b7:45:3c:b4:
a2:3e:e1:2a:80:e2:fa:f7:2e:d3:71:48:32:b6:5d:f8:a5:67:
e3:ba:d4:eb:86:fe:ca:a5:d3:81:39:d4:d4:8f:e0:eb:f7:5f:
48:cc:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org