Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/AHupLf9y1l5zvH0zm8_uotsTSr4.roa
File: AHupLf9y1l5zvH0zm8_uotsTSr4.roa (raw, json)
Hash identifier: fntFj2lLUg8XRXVV7s/e83NTSgJ3S+cw0g+8dcEoemI=
Subject key identifier: 00:7B:A9:2D:FF:72:D6:5E:73:BC:7D:33:9B:CF:EE:A2:DB:13:4A:BE
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 01856E26892F200AD78FE3048DD28EF92994
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/AHupLf9y1l5zvH0zm8_uotsTSr4.roa
Signing time: Sun 01 Jan 2023 16:24:57 +0000
ROA not before: Sun 01 Jan 2023 16:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204076
IP address blocks: 88.210.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:89:2f:20:0a:d7:8f:e3:04:8d:d2:8e:f9:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Jan 1 16:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=007ba92dff72d65e73bc7d339bcfeea2db134abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:db:0a:7c:53:c7:55:d4:f0:66:2f:55:f9:
af:a0:ab:d8:c3:ae:ef:5c:ef:82:b3:0e:27:ca:ae:
5b:81:87:8e:83:48:b8:66:bd:3b:3b:ab:2c:e9:0b:
31:58:89:cc:c5:3c:95:2b:d4:eb:5c:d3:73:00:82:
fd:bd:b3:e1:d1:46:8f:d0:70:d2:8b:4d:90:25:e4:
77:40:14:91:35:b9:dd:0c:56:f7:16:d5:1a:50:4b:
46:1a:0f:ff:ea:2c:1c:ca:ad:02:98:d3:54:d5:52:
74:99:14:63:5a:90:db:b5:05:fa:d5:90:f7:fc:8f:
a5:6d:ac:01:9a:a4:bb:92:57:01:dd:cb:0f:7c:1d:
fb:05:f2:09:93:49:e3:6a:26:d8:e4:2a:b5:b4:88:
63:ef:b5:90:de:32:d7:6f:9c:fc:bb:be:a7:40:20:
e6:8a:84:c2:c6:cb:6e:1a:74:ff:17:f0:97:7f:d3:
4c:c5:fc:58:87:89:6c:45:96:62:e7:20:86:da:51:
e8:e5:43:19:64:43:cd:27:a3:09:98:28:0d:c8:7f:
74:1f:38:46:a2:9e:13:67:05:c0:07:81:6d:c0:b5:
71:45:13:08:af:d7:31:f0:da:1d:8b:ca:37:a1:34:
cd:af:39:6b:de:d4:ad:22:5c:80:3e:8f:96:6d:60:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7B:A9:2D:FF:72:D6:5E:73:BC:7D:33:9B:CF:EE:A2:DB:13:4A:BE
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/AHupLf9y1l5zvH0zm8_uotsTSr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b5:07:eb:6d:3c:78:4f:d0:b0:c4:6f:b0:53:55:ae:a4:12:
6c:14:8a:51:59:c6:86:67:41:ca:4e:b6:28:66:07:7d:c5:81:
3c:ea:93:a4:23:07:9d:c8:0b:98:35:b7:8d:6a:60:2e:b7:f7:
ee:5e:5b:67:54:f1:79:65:45:54:7f:bc:36:ae:fd:14:de:7e:
76:dd:52:7a:67:61:90:c9:6a:d0:cb:36:58:31:aa:1a:1c:c0:
9d:c6:81:96:a9:f2:79:82:2c:b8:cb:c2:3c:0d:f6:be:b6:81:
f6:64:e1:3d:8d:fe:f9:bd:e1:c3:09:42:a2:da:1c:08:2d:fb:
b7:b2:62:c8:79:9e:56:2b:2b:d9:3d:52:8e:c3:5a:4b:b5:1d:
88:b0:76:87:b2:48:3d:6f:4b:71:e8:64:3a:c6:6f:24:71:d6:
34:d0:91:1e:cf:2d:df:30:8b:74:b7:d6:ca:f3:6f:95:5f:07:
55:2e:31:e1:4f:bc:8a:93:de:a4:76:3b:96:f4:0a:c0:2e:cb:
79:45:cf:29:13:20:f8:08:cb:c5:03:a4:ac:84:38:e4:a3:dc:
22:59:26:b8:cb:84:93:0c:e1:d5:53:1a:b1:c2:45:e3:c4:56:
09:5b:4d:b9:73:da:c8:a0:02:19:7a:30:6c:b3:e6:f0:57:4d:
e8:00:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:00 2024 by rpki-client on console-ams.rpki-client.org