Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/HEPo_SbOI_RbYM972jN53NnwScs.roa
File: HEPo_SbOI_RbYM972jN53NnwScs.roa (raw, json)
Hash identifier: 6mwFnimnBHszUU7NrTVAqmJxOJt3Tr5AlnDopfb/moY=
Subject key identifier: 1C:43:E8:FD:26:CE:23:F4:5B:60:CF:7B:DA:33:79:DC:D9:F0:49:CB
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 018572B4341E1DC94905BAA621348BFFCBEA
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/HEPo_SbOI_RbYM972jN53NnwScs.roa
Signing time: Mon 02 Jan 2023 13:38:10 +0000
ROA not before: Mon 02 Jan 2023 13:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6758
IP address blocks: 176.121.52.0/22 maxlen: 22
185.243.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:34:1e:1d:c9:49:05:ba:a6:21:34:8b:ff:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Jan 2 13:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c43e8fd26ce23f45b60cf7bda3379dcd9f049cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:37:a4:20:3c:1e:5a:b8:4d:3c:93:22:e6:
3b:c1:62:72:30:3b:13:22:1d:e9:5b:33:2a:a9:9d:
76:44:c1:c2:3e:7c:09:58:76:07:82:2a:eb:23:cb:
0f:98:f5:12:0f:78:0b:7b:4f:14:09:31:b4:36:df:
f7:11:42:d7:c2:f8:f3:63:fe:3c:b3:c4:28:c6:43:
63:e9:f9:01:9b:82:06:82:34:49:84:69:cc:22:42:
4a:29:29:e2:95:4e:32:87:4f:4e:65:b0:f2:20:d3:
c1:02:9a:18:ae:d7:0c:73:56:42:16:93:12:f0:29:
cc:5a:ec:2b:b4:2a:0f:6a:0b:bc:68:0f:62:fd:fd:
fe:f8:ae:40:a1:cc:8c:19:2f:ef:23:ab:66:2d:b7:
57:01:90:6b:09:ed:00:62:f5:07:48:78:3a:61:96:
86:d3:75:dc:bb:4b:66:1b:14:a9:bd:01:f2:f9:ae:
4d:16:16:df:8e:ed:0d:24:14:d7:02:7d:e8:c9:7a:
5e:f5:de:78:88:8a:f7:7a:c6:38:b2:78:21:83:b6:
22:55:59:3b:90:a5:fb:ae:ed:3b:22:15:ce:04:a5:
19:af:cc:87:b1:0b:18:4e:a3:f7:7b:e5:01:c7:53:
a5:ee:3d:21:1d:7c:4e:a6:f2:1a:a0:00:aa:9c:d1:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:E8:FD:26:CE:23:F4:5B:60:CF:7B:DA:33:79:DC:D9:F0:49:CB
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/HEPo_SbOI_RbYM972jN53NnwScs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.52.0/22
185.243.3.0/24
Signature Algorithm: sha256WithRSAEncryption
81:40:f6:72:ad:a9:e7:01:26:46:c5:3d:42:a8:eb:8e:16:95:
10:14:d4:38:35:0e:57:77:6a:ec:95:c4:9d:16:b1:20:68:a6:
6f:62:a9:1c:bb:34:22:7d:25:86:f5:46:98:66:d5:4a:7f:67:
c1:0b:dc:1a:a0:7a:f1:4e:af:5a:b0:c5:21:3e:fa:da:7a:df:
aa:b0:ce:44:d0:12:09:39:06:4e:6e:79:db:98:1b:ee:b9:a5:
f2:f1:88:d8:01:21:4e:99:58:fb:e8:1d:24:81:eb:f9:7e:e0:
75:77:e4:f6:ca:53:29:24:6d:35:d8:13:6a:98:8d:6e:ef:46:
d6:4b:e0:47:98:a5:99:d9:12:16:65:89:33:4e:0b:99:66:c6:
ab:f7:1c:8f:d9:55:35:7b:83:da:84:b2:15:fa:37:1c:8f:fd:
3a:a4:dc:9d:6a:d7:0f:d7:0a:3f:bd:d1:1f:25:7e:7c:b0:e6:
af:9a:25:a8:2f:2c:a7:00:94:30:0c:d0:5b:8e:46:4e:9f:b9:
6c:71:88:03:10:49:90:db:2c:60:15:30:a9:3a:59:8a:c2:c9:
49:6e:6d:d0:7f:bb:49:23:bb:46:46:e5:2f:38:db:c5:ef:f0:
59:ee:d2:b1:ef:7b:3e:e6:a7:5f:92:ff:2c:19:09:ca:84:9a:
9b:b6:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:08 2024 by rpki-client on console-fra.rpki-client.org