Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/HuLCm5d_Mxs3qQwrBuIOsc0BwIA.roa
File: HuLCm5d_Mxs3qQwrBuIOsc0BwIA.roa (raw, json)
Hash identifier: q8ZLcB4ZN0ursXJxf8m4On3ywhn5GkgGcW3Yfk9YMco=
Subject key identifier: 1E:E2:C2:9B:97:7F:33:1B:37:A9:0C:2B:06:E2:0E:B1:CD:01:C0:80
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 018573BA8A0E409937C8AC6B8D841D0F5BB2
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/HuLCm5d_Mxs3qQwrBuIOsc0BwIA.roa
Signing time: Mon 02 Jan 2023 18:24:42 +0000
ROA not before: Mon 02 Jan 2023 18:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4637
IP address blocks: 195.153.124.0/24 maxlen: 24
195.153.19.0/24 maxlen: 24
217.151.32.0/20 maxlen: 24
195.153.74.0/24 maxlen: 24
195.153.108.0/22 maxlen: 22
195.153.216.0/24 maxlen: 24
195.153.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Jun 2023 02:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:8a:0e:40:99:37:c8:ac:6b:8d:84:1d:0f:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jan 2 18:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ee2c29b977f331b37a90c2b06e20eb1cd01c080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:52:80:30:88:b9:e2:60:56:9f:56:1c:25:
1c:c0:4d:b2:99:2f:18:c6:39:bc:33:ae:53:16:10:
71:df:5e:c7:f3:8c:c4:fd:08:1d:44:39:b4:e1:3f:
26:9a:c6:4d:21:e0:37:b9:34:7b:aa:d9:0b:ab:d4:
3e:ed:34:f8:df:b3:b5:66:36:87:a3:67:68:72:29:
0a:a1:38:19:e6:b9:5a:67:9c:35:94:68:c0:82:a8:
02:d7:9c:c0:1c:db:ec:8b:37:83:8d:3f:e1:01:c6:
27:c9:41:53:e8:da:43:b7:33:b5:67:cc:d1:82:75:
1a:0a:25:a3:2c:65:46:69:19:59:e4:ac:62:05:84:
78:fa:de:0b:ef:53:aa:25:07:33:a3:bc:5d:f0:05:
fc:c6:b5:c3:83:9d:a7:3f:cd:68:33:0e:82:4f:17:
19:ed:db:db:b8:c7:7c:20:10:fb:63:bd:54:e4:10:
85:41:3b:66:8d:e2:51:35:65:cc:40:c7:fa:48:10:
18:a5:51:78:b3:9f:66:68:cf:4f:79:00:29:94:6a:
73:82:ed:c2:93:a6:a2:7f:21:bb:f0:d8:e6:7b:3d:
85:01:3f:a2:e1:48:72:26:52:70:86:07:0e:42:8b:
a7:07:df:44:8f:d5:d2:d5:e3:84:8a:cd:53:4d:e2:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:C2:9B:97:7F:33:1B:37:A9:0C:2B:06:E2:0E:B1:CD:01:C0:80
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/HuLCm5d_Mxs3qQwrBuIOsc0BwIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.153.19.0/24
195.153.74.0/24
195.153.108.0/22
195.153.124.0/24
195.153.216.0/23
217.151.32.0/20
Signature Algorithm: sha256WithRSAEncryption
12:ad:ff:88:49:a0:18:7d:73:9a:80:0c:d4:7a:eb:d0:a3:8d:
70:50:72:0e:7b:0c:ee:de:ae:5a:c2:f4:e5:aa:a8:f7:d5:e7:
73:83:42:31:5c:26:94:04:e1:22:66:e9:28:26:73:4e:14:ff:
99:db:b2:ee:1e:c4:37:92:d3:38:bb:5a:41:4f:c6:c1:6c:32:
61:47:4e:76:87:67:89:0d:87:f4:37:6d:5e:f9:e1:9f:e8:0e:
0c:41:24:8e:77:75:4b:b2:fe:88:2c:2e:f8:67:17:db:ee:48:
8b:16:0c:74:d1:1c:d7:70:89:2d:ea:fd:13:de:c7:80:33:a7:
df:b5:24:74:bd:cf:f3:5f:4e:b7:ca:98:4e:e3:6a:6f:39:87:
7f:1f:e0:45:6e:a0:3f:e7:94:d4:57:bd:b1:ad:9e:31:1c:72:
8b:f2:fe:b5:7d:52:6f:4f:ce:16:2f:c5:66:b0:d4:fc:3c:e5:
9a:26:0f:cf:69:2c:9a:62:f3:3e:59:ba:15:a5:78:d1:10:22:
aa:f2:5b:87:41:b5:6a:9a:02:04:97:1a:7c:1e:36:ed:75:e1:
bf:f7:32:a7:80:49:62:80:91:b7:6e:dc:80:0a:dc:53:f4:9b:
a0:81:6c:ce:89:cb:4b:a4:a9:b6:88:55:ca:1f:9e:6b:e3:85:
4e:e7:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org