Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/HPJQbUpxPa1Gn_-5JDOZcsUUnSM.roa
File: HPJQbUpxPa1Gn_-5JDOZcsUUnSM.roa (raw, json)
Hash identifier: WT52RX8UxVGkq1cZwtH3AQVIWsh57ORqTNH8Lu/inFI=
Subject key identifier: 1C:F2:50:6D:4A:71:3D:AD:46:9F:FF:B9:24:33:99:72:C5:14:9D:23
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7C9301B2797114FD7A85C720630F8
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/HPJQbUpxPa1Gn_-5JDOZcsUUnSM.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.213.22.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
2a11:840:2::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:1::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Jun 2023 22:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c9:30:1b:27:97:11:4f:d7:a8:5c:72:06:30:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cf2506d4a713dad469fffb924339972c5149d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:47:a1:13:29:81:f3:11:0b:18:b5:c0:35:
c0:4f:f1:53:c4:c2:12:ab:04:38:67:78:bb:12:e9:
e3:73:1b:8c:f3:8d:0d:07:a3:08:55:70:6f:70:6d:
54:98:55:4c:d2:28:ad:90:86:1e:9c:1e:3f:eb:ab:
9b:04:37:9d:e2:3f:72:e4:44:78:ea:f6:89:cc:a9:
c7:15:60:61:36:84:b8:53:af:f1:e7:33:e8:1e:7b:
8a:48:bd:86:b0:d9:26:74:72:7c:61:3a:a3:49:d5:
51:f2:88:75:3b:fc:e6:9e:44:d7:45:56:c7:d6:d4:
70:36:33:cd:e4:db:5f:6a:69:01:68:34:a4:25:aa:
d2:29:d5:82:f1:85:51:9b:59:7f:0d:16:46:cf:2d:
f3:ec:9f:00:70:8f:f9:6e:3e:04:f8:21:20:c3:6c:
b1:6d:a8:aa:56:d6:e1:dd:ed:81:1f:e7:64:32:59:
8c:fd:76:70:2c:4d:91:49:e0:51:7c:be:67:0e:b5:
f1:af:20:61:6a:a0:73:75:3f:d0:82:17:96:3b:e3:
e1:c1:c4:47:1d:9a:c7:7c:b0:2b:8a:49:45:f4:fd:
76:cc:43:a9:88:42:40:2b:1d:c4:e1:33:4d:c4:f2:
55:66:79:7b:71:b9:b8:b9:fa:c6:a4:7b:e7:50:f8:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:50:6D:4A:71:3D:AD:46:9F:FF:B9:24:33:99:72:C5:14:9D:23
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/HPJQbUpxPa1Gn_-5JDOZcsUUnSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.236.0/23
185.213.22.0/24
IPv6:
2a11:840:1::-2a11:840:6:ffff:ffff:ffff:ffff:ffff
2a11:840:9::/48
Signature Algorithm: sha256WithRSAEncryption
35:94:b1:fa:01:15:d9:4f:b2:7e:d5:fe:de:ca:69:48:1e:fe:
be:67:0d:20:1e:c2:a2:61:35:89:5d:e1:64:66:06:24:2c:1c:
a0:ce:c7:8b:4e:23:a9:ac:d3:66:78:84:3a:97:c2:ff:e1:cf:
a6:44:31:ea:47:10:c5:f8:21:8f:3c:75:9c:5e:e9:3d:9d:e0:
77:ab:44:3f:3c:f3:64:74:b5:3d:23:c6:2f:fd:16:e6:3f:70:
12:6f:e0:9f:3c:28:7f:d0:40:65:d9:3a:23:02:05:49:bb:9b:
5b:f2:4a:a4:33:49:3f:9f:73:7d:ee:b8:50:37:01:f7:7e:34:
b8:22:e6:da:e6:c5:f6:22:14:4a:9c:67:b4:4d:78:61:82:8f:
de:01:e4:89:83:6e:05:7b:ba:4f:d2:25:cf:fa:31:59:a4:bb:
48:0b:87:b5:27:30:f3:db:91:2d:58:03:9c:7f:c0:f9:1b:0f:
b7:c8:94:45:e3:fe:4f:35:fd:02:6c:2b:85:12:54:1e:4b:7b:
a8:b3:a4:75:45:96:8b:13:30:49:2b:2a:18:9b:17:77:a7:20:
8c:71:c0:f7:cf:90:8f:a3:44:55:57:02:43:fd:49:db:25:29:
2e:b7:e9:69:8b:e1:ed:a5:b6:57:0d:37:f8:e1:8a:2e:9d:60:
1a:af:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org