Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/HUhwhTtGY_tc0y_-5RgWgU5xs3Q.roa
File: HUhwhTtGY_tc0y_-5RgWgU5xs3Q.roa (raw, json)
Hash identifier: 73C7v1mYlbEk1ZBfulyQd61jGWQmBrb+2izembayXDs=
Subject key identifier: 1D:48:70:85:3B:46:63:FB:5C:D3:2F:FE:E5:18:16:81:4E:71:B3:74
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 018571DE94810023979A4053DE1B093F02F3
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/HUhwhTtGY_tc0y_-5RgWgU5xs3Q.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20912
IP address blocks: 212.66.96.0/19 maxlen: 24
77.39.216.0/22 maxlen: 24
185.109.188.0/22 maxlen: 24
176.62.48.0/20 maxlen: 21
85.119.176.0/21 maxlen: 24
77.39.192.0/20 maxlen: 24
2001:40d0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:94:81:00:23:97:9a:40:53:de:1b:09:3f:02:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d4870853b4663fb5cd32ffee51816814e71b374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:86:52:b5:87:e9:d1:cb:24:6a:03:5e:3c:
96:b1:2e:9d:68:dc:43:8f:aa:e5:7b:66:58:ef:d4:
71:a1:34:5e:22:b1:c0:50:6a:b6:66:d4:e3:f9:c5:
90:6f:f5:ff:29:e8:33:ec:67:24:8d:93:a2:79:39:
94:25:60:02:fe:f7:25:e6:72:c1:3e:22:00:e9:86:
1a:c8:96:0f:41:ef:34:62:c4:e2:af:2c:83:af:00:
16:35:85:f8:6d:94:79:35:72:8c:34:1f:1e:46:f9:
46:c6:1c:96:e5:b1:6b:93:44:0e:64:dc:77:4c:a3:
6f:e8:fc:b2:f3:da:c0:19:60:fe:0a:9b:f8:9d:0d:
4b:fd:af:a2:bb:0c:83:24:c4:94:d8:9a:0c:3f:1a:
33:50:2a:e0:4c:8a:ac:70:0b:5d:23:3c:2c:c3:b2:
15:c5:4c:b9:62:fd:87:38:72:2c:62:0b:69:87:4d:
22:90:f2:6b:38:18:b1:dd:78:56:91:7a:65:10:b6:
ec:a5:38:13:d9:0a:73:c9:bf:f1:0b:ca:fe:9b:57:
ce:c8:d9:b6:98:5a:a2:6c:b7:c7:42:62:a4:fe:af:
cb:65:68:b2:19:ac:2b:62:1d:07:95:a2:f4:6d:be:
94:62:16:4a:7e:83:c8:b8:db:f7:d5:ee:2c:77:d6:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:70:85:3B:46:63:FB:5C:D3:2F:FE:E5:18:16:81:4E:71:B3:74
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/HUhwhTtGY_tc0y_-5RgWgU5xs3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.192.0/20
77.39.216.0/22
85.119.176.0/21
176.62.48.0/20
185.109.188.0/22
212.66.96.0/19
IPv6:
2001:40d0::/32
Signature Algorithm: sha256WithRSAEncryption
26:75:98:ea:a6:94:b1:63:b1:10:3d:77:95:ad:46:fc:75:7f:
92:a8:99:af:ec:01:d1:57:73:2e:2d:04:85:47:e1:8d:d4:de:
3a:d0:cc:91:b9:49:20:85:37:60:01:e0:07:e6:23:94:5f:fc:
c0:d0:83:d4:1d:2e:43:95:06:fc:df:e0:8e:d0:2a:62:a0:21:
8f:f5:7d:bb:9a:d5:18:6f:b8:f0:bf:01:1f:5b:2f:aa:af:4f:
8b:1b:8e:35:65:ea:ee:31:16:3e:80:c5:be:28:ce:95:a9:e6:
fd:ad:82:04:b9:fb:88:68:1c:67:7d:b5:d8:81:85:ac:7e:fe:
df:d3:95:0c:9d:c5:07:4c:89:3a:9b:e8:5f:59:bc:a7:16:23:
4a:de:3d:a1:ae:c5:ee:29:da:5a:5b:e1:88:39:74:3b:00:10:
19:e4:7e:e9:cf:67:54:aa:ee:0d:60:97:56:96:aa:00:e1:c5:
dc:76:7a:70:dd:3f:7f:e0:a9:06:45:c4:36:77:7d:f2:40:c5:
e7:22:b5:23:a8:7c:78:d1:77:5d:5b:ec:fe:69:62:75:63:db:
00:fe:16:d5:2b:46:79:b1:e5:2f:c9:5b:61:49:8f:93:31:9b:
69:0e:9e:e9:bb:9a:c7:36:e9:9c:31:12:68:58:40:cb:42:c6:
66:08:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:38 2024 by rpki-client on console-fra.rpki-client.org