Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HzmvQjRc4reEwyQRETPwVBBnmsQ.roa
File: HzmvQjRc4reEwyQRETPwVBBnmsQ.roa (raw, json)
Hash identifier: /KQ5nlN+ZpsSBHg9lTZ2ujPyDhZmXs38tz6DLmqD+yA=
Subject key identifier: 1F:39:AF:42:34:5C:E2:B7:84:C3:24:11:11:33:F0:54:10:67:9A:C4
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B10817F3CB82583F08E9ABF34EB97F9B3
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HzmvQjRc4reEwyQRETPwVBBnmsQ.roa
Signing time: Sun 08 Oct 2023 18:16:44 +0000
ROA not before: Sun 08 Oct 2023 18:16:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207590
IP address blocks: 176.105.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:81:7f:3c:b8:25:83:f0:8e:9a:bf:34:eb:97:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 8 18:16:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f39af42345ce2b784c324111133f05410679ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:c8:fb:99:0d:4f:9e:0e:3f:62:49:f0:7c:
0b:77:5f:11:39:ca:71:7e:5f:1a:a1:47:51:f1:ab:
f7:ca:fc:41:1a:66:b7:bc:03:b7:ab:47:f6:8d:aa:
7f:c0:1d:52:4c:48:36:fc:b3:b8:37:75:73:06:a7:
c6:da:e1:87:7f:67:de:d5:3b:d8:5e:36:ee:b7:32:
ff:72:24:29:27:8b:4f:9b:29:a1:65:36:53:bb:74:
c6:22:53:d5:f2:de:88:9a:b4:a4:e1:d3:97:e0:0e:
90:80:55:28:e9:4d:af:ec:ce:d2:ab:1d:f5:bc:b2:
d5:66:de:87:b9:fd:f7:fc:2c:fc:fe:4e:10:b4:98:
fa:31:ed:e9:1f:5f:73:75:26:99:7c:20:bc:d9:61:
59:d7:68:64:8c:d2:77:d4:72:80:28:60:c1:7c:e9:
b9:f9:1c:a2:f9:4c:a9:bc:22:d0:75:04:0a:49:9d:
67:62:c9:68:55:f2:95:e3:f3:77:c7:25:e0:37:97:
b3:91:01:99:76:61:58:78:22:61:f0:7d:19:ca:6d:
23:a9:63:e9:0a:91:c5:7a:a7:19:3c:25:01:4b:b8:
d3:0b:94:ba:9a:e5:6d:41:0e:13:e7:fa:d1:0a:62:
bc:53:26:81:13:23:cb:c0:b5:e0:e5:ca:a5:51:3e:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:39:AF:42:34:5C:E2:B7:84:C3:24:11:11:33:F0:54:10:67:9A:C4
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HzmvQjRc4reEwyQRETPwVBBnmsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a7:b1:24:ee:b2:1c:61:02:d8:e9:1f:34:65:5b:d8:0e:b6:
3e:f7:48:24:fa:26:4f:e1:d8:8f:3d:66:ee:cd:0c:75:5e:38:
46:3d:0f:f7:a7:e3:ab:26:f2:aa:82:d9:64:0a:f6:fc:06:0e:
be:a9:02:d1:fa:c0:15:f3:a7:af:07:0b:89:4a:07:84:3f:8c:
6a:32:f4:92:37:62:c4:8e:45:ba:a2:e3:55:02:df:80:84:6d:
eb:09:85:ed:07:ab:5e:fa:af:c9:0e:39:b5:1a:1c:21:cf:91:
10:81:06:2c:09:7c:25:6a:49:0c:ac:36:83:0a:9f:ec:96:88:
66:e5:e0:7c:89:ad:94:c1:75:8f:9e:6e:af:07:49:a5:d4:74:
2c:2e:6d:77:1a:23:da:d3:60:7d:10:68:7d:e5:28:2a:80:50:
7c:c4:12:4b:ef:3f:47:7f:a8:d8:d7:71:d9:33:8b:fc:74:e9:
54:79:03:a4:16:15:53:0d:c9:3c:24:3b:3d:a0:66:9f:c8:83:
67:a2:b6:8f:4f:e5:68:ae:da:b3:f0:06:ba:27:dc:cf:82:e0:
48:af:c4:37:3d:f7:6c:65:45:0d:55:04:38:68:cc:67:a4:c7:
eb:1d:28:1a:4c:99:35:be:92:2a:ff:f4:f4:f1:0f:36:7b:24:
68:13:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org