Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/HoTWWnairec0LHYj56u_LtMmNNQ.roa
File: HoTWWnairec0LHYj56u_LtMmNNQ.roa (raw, json)
Hash identifier: ILWR8T5MjM+xTf5ImdyysvTpCU+57ADgZBL2//gqPPk=
Subject key identifier: 1E:84:D6:5A:76:A2:AD:E7:34:2C:76:23:E7:AB:BF:2E:D3:26:34:D4
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 018B28740CF370F06CCBFDF54345103096C7
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/HoTWWnairec0LHYj56u_LtMmNNQ.roa
Signing time: Fri 13 Oct 2023 09:52:55 +0000
ROA not before: Fri 13 Oct 2023 09:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60079
IP address blocks: 78.158.87.0/24 maxlen: 24
194.104.123.0/24 maxlen: 24
2a05:e201::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:74:0c:f3:70:f0:6c:cb:fd:f5:43:45:10:30:96:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Oct 13 09:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e84d65a76a2ade7342c7623e7abbf2ed32634d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f6:52:2f:bf:b9:76:c1:c3:97:c5:8c:d1:14:
28:f2:c4:12:15:cb:17:ac:d8:ed:97:c0:4c:ab:c3:
e4:fc:5b:ab:69:78:21:8c:b0:fd:f9:73:c4:ee:f9:
9f:f2:59:8d:50:20:8f:d4:11:7a:7b:bb:d8:e9:1d:
7f:0c:c2:de:41:52:20:02:d6:f6:b4:a9:a5:53:37:
48:9f:ea:38:c4:a4:e2:de:84:e4:5b:81:ea:71:53:
0f:fc:34:8e:61:ec:4c:93:7e:6f:8b:01:a2:97:a1:
a3:d2:4a:18:59:8e:98:ab:7b:61:44:fb:d0:de:8a:
4c:26:43:d5:66:b6:f9:8d:5b:df:35:cc:7e:35:b7:
c6:be:fc:88:62:06:c1:37:35:cb:69:09:ea:f5:6a:
91:f8:3b:67:2f:24:bc:c0:c8:3c:3f:3a:62:8b:a6:
a1:5e:02:d2:0b:62:cc:cc:ef:95:e9:41:29:b8:06:
f3:6f:b5:72:74:7f:51:83:5e:c3:eb:81:9c:e8:98:
01:fa:d1:a7:38:67:a0:1d:e6:9b:62:37:42:57:9f:
84:a1:34:f4:b2:c5:1c:ac:9b:4b:2f:3f:ab:d5:cf:
05:b9:31:43:73:7b:c3:bd:d8:c1:36:8f:60:e8:17:
71:97:51:22:b9:21:b2:1a:36:2b:b9:95:0f:d9:d4:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:84:D6:5A:76:A2:AD:E7:34:2C:76:23:E7:AB:BF:2E:D3:26:34:D4
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/HoTWWnairec0LHYj56u_LtMmNNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.87.0/24
194.104.123.0/24
IPv6:
2a05:e201::/32
Signature Algorithm: sha256WithRSAEncryption
60:ae:e6:60:9f:53:0a:9d:fc:df:03:b5:7e:48:64:6a:c0:7b:
33:65:d2:a4:eb:c4:90:7b:0e:82:96:33:ad:a9:4d:3f:fd:93:
23:f8:b8:9c:2b:a0:f0:03:65:55:a4:30:cf:e2:7e:e6:26:bb:
a3:82:b3:1b:8a:49:07:2a:c8:02:dd:b6:49:44:6c:03:ad:dd:
b9:0e:05:b7:65:94:7c:3e:a2:bf:8f:45:f8:c0:2a:0d:ae:2e:
fb:0f:f8:11:b7:1e:ba:2e:bc:2d:7f:64:8a:59:1f:29:d9:a4:
0d:b9:a1:f7:1a:8f:21:4f:40:20:fe:b9:59:bb:3c:e1:df:c8:
40:cf:46:f4:f3:39:b8:f0:50:81:2f:7a:82:ba:b4:75:54:c0:
53:ce:42:ed:55:01:ff:bd:96:fc:93:b2:4c:43:34:9f:09:59:
59:ae:0d:cc:c8:f4:6d:cc:7a:a7:5b:4e:1f:86:ed:43:33:ef:
86:75:ba:86:93:ae:7f:09:d5:3e:83:f8:77:96:fc:8f:d4:71:
c1:83:eb:c4:19:1f:ef:44:08:16:23:8e:4f:fd:58:28:63:19:
c0:f6:35:9f:cc:f5:57:d7:18:26:92:ed:c3:09:53:2b:eb:d9:
72:c9:6f:e9:7e:f0:b0:8e:50:e8:7c:76:3f:15:34:b3:68:77:
d9:ff:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org