Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/Hhv3rAockESSD6MHbrV4ciWbceY.roa
File: Hhv3rAockESSD6MHbrV4ciWbceY.roa (raw, json)
Hash identifier: x8eAeIyFo/iU0D2Fz+QY8f9z2C73xZkJle4EfvOjt0Y=
Subject key identifier: 1E:1B:F7:AC:0A:1C:90:44:92:0F:A3:07:6E:B5:78:72:25:9B:71:E6
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 018843F61AB0B4E07EFFECA203D4C7B1B3A0
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/Hhv3rAockESSD6MHbrV4ciWbceY.roa
Signing time: Mon 22 May 2023 14:56:22 +0000
ROA not before: Mon 22 May 2023 14:56:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29300
IP address blocks: 81.88.64.0/20 maxlen: 20
84.247.128.0/18 maxlen: 18
217.196.48.0/20 maxlen: 20
82.148.160.0/19 maxlen: 19
93.184.112.0/20 maxlen: 20
109.169.96.0/19 maxlen: 19
2a02:2828::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:f6:1a:b0:b4:e0:7e:ff:ec:a2:03:d4:c7:b1:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: May 22 14:56:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e1bf7ac0a1c9044920fa3076eb57872259b71e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:de:67:c7:d4:02:64:3b:64:d1:1a:96:8b:1e:
bc:8e:6c:33:db:39:45:98:f4:70:1e:16:26:85:eb:
ba:75:91:ab:98:ec:d8:17:12:18:34:a3:6c:38:f7:
6b:0d:73:5a:74:1f:5a:c5:a4:ff:06:df:78:53:cb:
51:b9:f9:ba:bd:6a:ea:aa:d7:76:56:ab:9c:d5:cc:
18:f9:af:25:88:59:f6:13:53:2f:5a:ae:a9:f5:0a:
8f:ea:db:7f:6b:6f:85:2b:19:58:c1:c7:d0:80:a3:
7a:7c:80:2c:04:23:fe:1b:c4:75:55:e6:e4:76:ec:
54:55:a9:6b:d9:4a:50:be:c1:19:06:61:f2:5b:1c:
02:78:0f:fc:51:47:b0:b8:23:cf:68:6b:f8:05:67:
74:8f:6a:f6:31:5c:9c:c9:c4:ff:eb:96:1d:11:97:
d0:bf:16:5a:48:b0:7e:66:49:be:eb:8b:65:6a:5c:
82:00:5c:41:13:71:02:a5:66:bb:ad:98:94:d4:d7:
38:33:20:0f:ba:d9:33:bc:1a:d3:0d:79:bd:95:c0:
05:69:37:60:f6:d9:12:bf:c5:32:74:ef:d5:ee:1d:
d5:27:03:7a:e5:c1:40:b4:dd:5e:2c:1a:2d:f2:d5:
14:dd:50:44:67:c1:64:de:5d:f8:f5:5f:54:79:b6:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1B:F7:AC:0A:1C:90:44:92:0F:A3:07:6E:B5:78:72:25:9B:71:E6
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/Hhv3rAockESSD6MHbrV4ciWbceY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.64.0/20
82.148.160.0/19
84.247.128.0/18
93.184.112.0/20
109.169.96.0/19
217.196.48.0/20
IPv6:
2a02:2828::/32
Signature Algorithm: sha256WithRSAEncryption
52:1f:81:c3:c2:dc:47:a0:75:fc:d7:46:a9:62:f4:b6:d1:a3:
0f:54:96:9a:9a:c1:38:84:6d:60:32:1b:77:ad:3a:f8:6a:b8:
38:4e:d2:88:ac:85:b5:7a:6f:3a:79:4b:cf:18:0b:da:13:5d:
c9:26:2b:52:52:d2:a6:56:b7:78:0e:f7:2c:d4:0e:30:af:a4:
a5:fa:ad:b3:f7:55:8e:b3:37:4e:6a:27:70:72:ef:30:a2:66:
5a:31:f9:69:bd:1e:f8:7c:e5:8c:dd:82:2d:28:6d:4b:ab:58:
c1:61:f8:8e:74:e1:c5:31:4d:de:c0:a4:87:d9:56:a4:0e:9b:
a1:97:dc:e0:32:02:82:f4:89:a5:32:e5:20:59:56:99:28:01:
f2:91:74:43:92:34:65:7c:3a:64:d9:a5:e0:4a:04:c4:d9:e3:
ae:cf:e7:d7:1e:16:f9:dd:5b:c5:a4:67:7d:1f:98:c2:68:ff:
3f:8b:f7:5a:97:ab:6b:47:b0:63:0c:f4:b5:2d:de:95:4a:4f:
62:7c:06:4a:a5:5a:27:df:ae:15:72:84:d6:f3:4b:2f:7a:aa:
e8:3e:67:58:e8:6a:a3:92:c6:ae:5b:16:33:2f:43:b4:4e:02:
15:c7:b9:1a:fb:ec:4e:c4:3a:24:7c:9a:15:7f:dd:ff:a5:d3:
22:c0:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:11 2023 by rpki-client on console-fra.rpki-client.org