Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HWACU3xIByCBlKNWjdxC6qWtIWI.roa
File: HWACU3xIByCBlKNWjdxC6qWtIWI.roa (raw, json)
Hash identifier: uRr5bO4XFKMnmr9WqyHuugYT0ub4i6y0e1ToLgne5bs=
Subject key identifier: 1D:60:02:53:7C:48:07:20:81:94:A3:56:8D:DC:42:EA:A5:AD:21:62
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01895E1978FFAA659B50EDB2C96092044571
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HWACU3xIByCBlKNWjdxC6qWtIWI.roa
Signing time: Sun 16 Jul 2023 09:47:54 +0000
ROA not before: Sun 16 Jul 2023 09:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
81.28.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 08:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:19:78:ff:aa:65:9b:50:ed:b2:c9:60:92:04:45:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 16 09:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d6002537c4807208194a3568ddc42eaa5ad2162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:81:f8:58:de:35:fe:2e:4f:30:b3:76:09:
f4:5f:48:40:ee:0d:91:03:6a:39:c0:c1:2a:6a:48:
db:59:f4:01:1b:71:30:a7:79:fb:5d:41:63:0d:fa:
e2:15:d0:81:4d:9d:0e:4e:e5:9f:c1:10:8b:68:34:
eb:d5:73:fd:e5:9f:c7:87:c4:99:a7:b2:89:fe:04:
30:5c:75:ed:13:e4:60:bf:1c:f2:c4:39:37:92:ef:
06:dd:a8:3d:0a:d2:e7:50:88:ed:5b:18:43:69:e9:
0b:4d:6a:93:b9:78:1b:ff:93:83:dc:0d:bf:ba:1c:
8b:b5:cf:a8:fe:21:85:a1:32:ab:5a:1d:02:10:4f:
3e:2a:0b:f5:21:e6:33:80:49:8c:ca:56:22:7c:9b:
ce:e4:05:e3:81:72:60:d4:fb:b7:72:cb:90:22:b7:
a3:47:eb:5a:58:da:e3:00:c6:8e:8f:f8:5a:3f:22:
a7:40:31:5c:34:b1:53:88:a4:94:71:be:4f:d2:43:
6e:50:28:b2:8d:ba:9f:4d:1b:d7:48:10:e7:98:bc:
0e:e8:08:29:6e:fc:0e:b2:28:e3:c8:e2:57:58:85:
66:c1:c9:b1:18:d4:fd:ff:26:10:7f:c4:aa:06:4d:
70:4f:99:f3:97:62:7c:a8:7c:cf:15:1b:29:32:1f:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:02:53:7C:48:07:20:81:94:A3:56:8D:DC:42:EA:A5:AD:21:62
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HWACU3xIByCBlKNWjdxC6qWtIWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
81.28.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:65:5d:43:1e:be:db:68:6a:62:7e:a2:db:4f:54:dc:47:c9:
ce:48:b6:3f:a8:ea:ff:ba:d9:23:8d:a1:79:9c:4d:bb:7f:77:
95:e4:6a:e3:75:c4:3f:e2:5f:6f:32:67:ed:a9:01:38:16:7b:
e9:26:3c:b1:40:7b:29:bb:5c:e9:4c:ce:cc:ae:b6:16:93:66:
43:ca:1b:bf:49:a7:60:25:1b:32:a6:28:fa:8b:d1:e4:8e:38:
85:fc:7a:22:ea:86:94:4d:00:4b:c3:61:21:49:5a:db:55:7a:
42:ed:62:ac:23:bf:40:83:10:db:96:6b:c7:6b:a5:9b:e4:19:
cc:fd:09:db:cd:d8:d1:32:7c:5b:5f:e3:70:95:e3:9f:ac:c0:
c2:c0:2c:cd:b3:71:19:8c:37:6a:6b:c0:40:4c:25:42:a3:fb:
35:9e:ef:2d:ba:80:23:c2:96:06:d7:22:0e:a5:cd:61:fd:55:
f4:41:e2:b1:81:f9:34:e6:81:e6:3c:5d:1d:78:ea:a3:ce:47:
ea:28:ba:70:98:fc:2b:75:44:b3:0b:99:bb:04:7f:26:f9:40:
c1:d6:ac:b1:78:c8:3b:64:2f:cd:2b:9a:39:ee:93:1f:df:84:
69:f8:c0:02:67:8d:7d:aa:36:bf:c4:1f:2c:c8:bf:88:6e:7b:
c1:f3:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org